Sunday, February 28, 2021

Oracle iSQLPlus SID Check

sql vulnerabilities In: sql, vulnerabilities

Description

                                This module attempts to bruteforce the SID on the Oracle application server iSQL*Plus        login pages.  It does this by testing Oracle error responses returned in the HTTP response.        Incorrect username/pass with a correct SID will produce an Oracle ORA-01017 error.        Works against Oracle 9.2, 10.1 & 10.2 iSQL*Plus.  This module will attempt to        fingerprint the version and automatically select the correct POST request.
                            Author(s)
CG <[email protected]>
todb <[email protected]>

NoneNone