Hack Tool Repository Logo

Hack Tool Repository

white curve white curve

Oracle Auditing Tools

Google
 

Oracle Auditing Tools

The Oracle Auditing Tools is a toolkit that could be used to audit security within Oracle database servers.

The OAT use CREATE LIBRARY to be able to access the WinExec function in the kernel32.dll in Windows or the system call in libc on Un*x. Having access to this function makes it possible to execute anything on the server with the same security context as the user who started the Oracle Service. So basicaly all accounts with default passwords, or easy guessable password, having this privelege can do this.

The OAT have a builtin TFTP server for making file transfers easy. The tftp server is based on the server source from www.gordian.com. The Tools are Java based and were tested on both Windows and Linux. They should hopefully also run on any other Java platform.

 Related to:
Oracle9i JDBC Drivers


Site: http://www.cqure.net/wp/test/
Source URL: files/Database/Oracle Auditing Tools/oat-source-1.3.1.zip
Category: Database
Hits: 33038
Rating: 10
Added: 2007-04-27 17:43:20
Updated: 2009-10-13 16:24:33
Tested on:
Fedora Core    install.sh
10
11
OpenSUSE    install.sh
10
11
Ubuntu    install.sh
7.10
8.10
9.10
Windows
XP

Comments:

if you get an error message saying:
Exception in thread "main" java.lang.NoClassDefFoundError: ork/OracleTNSCtrl
make sure you have the classes111.zip in the oat directory and start the script from that directory. Starting the script from another directory will fail with the above error message

by marc at 2007-12-21 12:39:41

 
Olderchurch Web Site About Us | Site Map | Contact Us | ©2007 Olderchurch Security Consultancy