1. As DBA (yea for SQLI) we use UTL_FILE to write out our FTP download script, using DBMS_SCHEDULER we create a job to run the script to download our binary and create a 2nd job to execute our binary and get our meterpreter shell. Oracle...Unbreakable. check MC's video (requires java) on getting those DBA privs http://www.w00t-shell.net/demos/CVE-2008-3996.html

    # vimeo.com/2704188 Uploaded 1,203 Plays / / 2 Comments

Follow

carnal0wnage

Created by carnal0wnage

carnal0wnage Hack Videos

Browse This Channel

More stuff from “carnal0wnage

Shout Box

Channels are a simple, beautiful way to showcase and watch videos. Browse more Channels. Channels

Keyboard Shortcuts

Just think about it… What if you were trapped under something heavy and the mouse was out of your reach? Scary, right? That's exactly why we have these keyboard shortcuts so you can still use Vimeo until the help arrives.

  • [ Prev video
  • ] Next video
  • L Like this video
  • S Share this video
  • F Full screen
  • V Couch Mode
  • M More videos
  • ? More shortcuts