Scribd
Upload
462 views4 pages

Oracle SQL Injection Cheat Sheet - Pentestmonkey

This document provides a cheat sheet for SQL injection into Oracle databases. It lists useful SQL syntax reminders, database versions, current user, listing users and passwords, privileges, databases, tables, columns, and other queries. It also provides tips for things like delaying time, DNS requests, command execution if Java is installed, local file access if UTl_FILE is enabled, getting the host name and IP address, and locations of database files. The majority of the content is SQL queries to retrieve metadata and perform other tasks within an Oracle database.

Uploaded by

quedyah
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
462 views4 pages

Oracle SQL Injection Cheat Sheet - Pentestmonkey

This document provides a cheat sheet for SQL injection into Oracle databases. It lists useful SQL syntax reminders, database versions, current user, listing users and passwords, privileges, databases, tables, columns, and other queries. It also provides tips for things like delaying time, DNS requests, command execution if Java is installed, local file access if UTl_FILE is enabled, getting the host name and IP address, and locations of database files. The majority of the content is SQL queries to retrieve metadata and perform other tasks within an Oracle database.

Uploaded by

quedyah
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 4

2UDFOH64/,QMHFWLRQ&KHDW6KHHW

6RPHXVHIXOV\QWD[UHPLQGHUVIRU64/,QMHFWLRQLQWR2UDFOHGDWDEDVHV
7KLVSRVWLVSDUWRIDVHULHVRI64/,QMHFWLRQ&KHDW6KHHWV,QWKLVVHULHV,YHHQGHYRXUHGWRWDEXODWHWKHGDWDWRPDNH
LWHDVLHUWRUHDGDQGWRXVHWKHVDPHWDEOHIRUIRUHDFKGDWDEDVHEDFNHQG7KLVKHOSVWRKLJKOLJKWDQ\IHDWXUHVZKLFKDUH
ODFNLQJIRUHDFKGDWDEDVHDQGHQXPHUDWLRQWHFKQLTXHVWKDWGRQWDSSO\DQGDOVRDUHDVWKDW,KDYHQWJRWURXQGWR
UHVHDUFKLQJ\HW
7KHFRPSOHWHOLVWRI64/,QMHFWLRQ&KHDW6KHHWV,PZRUNLQJLV
2UDFOH
0664/
0\64/
3RVWJUH64/
,QJUHV
'%
,QIRUPL[
,PQRWSODQQLQJWRZULWHRQHIRU06$FFHVVEXWWKHUHVDJUHDW06$FFHVV&KHDW6KHHWKHUH
6RPHRIWKHTXHULHVLQWKHWDEOHEHORZFDQRQO\EHUXQE\DQDGPLQ7KHVHDUHPDUNHGZLWKSULYDWWKHHQGRIWKH
TXHU\

9HUVLRQ

6(/(&7EDQQHU)520YYHUVLRQ:+(5(EDQQHU/,.(2UDFOH
6(/(&7EDQQHU)520YYHUVLRQ:+(5(EDQQHU/,.(716
6(/(&7YHUVLRQ)520YLQVWDQFH

&RPPHQWV

6(/(&7)520GXDOFRPPHQW
1%6(/(&7VWDWHPHQWVPXVWKDYHD)520FODXVHLQ2UDFOHVR
ZHKDYHWRXVHWKHGXPP\WDEOHQDPHGXDOZKHQZHUHQRWDFWXDOO\
VHOHFWLQJIURPDWDEOH

&XUUHQW8VHU

6(/(&7XVHU)520GXDO

/LVW8VHUV

6(/(&7XVHUQDPH)520DOOBXVHUV25'(5%<XVHUQDPH
6(/(&7QDPH)520V\VXVHUSULY

/LVW3DVVZRUG
+DVKHV

6(/(&7QDPHSDVVZRUGDVWDWXV)520V\VXVHUSULY J
DVWDWXVWHOOV\RXLIDFFWLVORFNHG
6(/(&7QDPHVSDUH)520V\VXVHUSULYJ

3DVVZRUG
&UDFNHU

FKHFNSZGZLOOFUDFNWKH'(6EDVHGKDVKHVIURP2UDFOHDQG

/LVW3ULYLOHJHV

6(/(&7 )520VHVVLRQBSULYVFXUUHQWSULYV
6(/(&7 )520GEDBV\VBSULYV:+(5(JUDQWHH '%6103
SULYOLVWDXVHUVSULYV
6(/(&7JUDQWHH)520GEDBV\VBSULYV:+(5(SULYLOHJH 6(/(&7
$1<',&7,21$5<SULYILQGXVHUVZLWKDSDUWLFXODUSULY
6(/(&7*5$17((*5$17('B52/()520'%$B52/(B35,96

/LVW'%$
$FFRXQWV

6(/(&7',67,1&7JUDQWHH)520GEDBV\VBSULYV:+(5(
$'0,1B237,21 <(6SULYOLVW'%$V'%$UROHV

&XUUHQW
'DWDEDVH

6(/(&7JOREDOBQDPH)520JOREDOBQDPH
6(/(&7QDPH)520YGDWDEDVH
6(/(&7LQVWDQFHBQDPH)520YLQVWDQFH
6(/(&76<6'$7$%$6(B1$0()520'8$/

/LVW'DWDEDVHV

6(/(&7',67,1&7RZQHU)520DOOBWDEOHVOLVWVFKHPDV RQH
SHUXVHU
$OVRTXHU\716OLVWHQHUIRURWKHUGDWDEDVHV6HHWQVFPG VHUYLFHV
_VWDWXV 

/LVW&ROXPQV

6(/(&7FROXPQBQDPH)520DOOBWDEBFROXPQV:+(5(WDEOHBQDPH
EODK
6(/(&7FROXPQBQDPH)520DOOBWDEBFROXPQV:+(5(WDEOHBQDPH
EODKDQGRZQHU IRR

/LVW7DEOHV

6(/(&7WDEOHBQDPH)520DOOBWDEOHV
6(/(&7RZQHUWDEOHBQDPH)520DOOBWDEOHV

)LQG7DEOHV
)URP&ROXPQ
1DPH

6(/(&7RZQHUWDEOHBQDPH)520DOOBWDEBFROXPQV:+(5(
FROXPQBQDPH/,.(3$661%WDEOHQDPHVDUHXSSHUFDVH

6HOHFW1WK
5RZ

6(/(&7XVHUQDPH)520 6(/(&752:180UXVHUQDPH)520
DOOBXVHUV25'(5%<XVHUQDPH :+(5(U JHWVWKURZ URZV
QXPEHUHGIURP

6HOHFW1WK
&KDU

6(/(&7VXEVWU DEFG )520GXDOJHWVUGFKDUDFWHUF

%LWZLVH$1'

6(/(&7ELWDQG  )520GXDOUHWXUQV


6(/(&7ELWDQG  )520GXDOUHWXUQV

$6&,,9DOXH!
&KDU

6(/(&7FKU  )520GXDOUHWXUQV$

&KDU!$6&,,
9DOXH

6(/(&7DVFLL $ )520GXDOUHWXUQV

&DVWLQJ

6(/(&7&$67 $6FKDU )520GXDO


6(/(&7&$67 $6LQW )520GXDO

6WULQJ
&RQFDWHQDWLRQ

6(/(&7$__%)520GXDOUHWXUQV$%

,I6WDWHPHQW

%(*,1,) 7+(1GEPVBORFNVOHHS  (/6(GEPVBORFNVOHHS  


(1',)(1'GRHVQWSOD\ZHOOZLWK6(/(&7VWDWHPHQWV

&DVH
6WDWHPHQW

6(/(&7&$6(:+(1 7+(1(/6((1')520GXDO
UHWXUQV
6(/(&7&$6(:+(1 7+(1(/6((1')520GXDO
UHWXUQV

$YRLGLQJ
4XRWHV

6(/(&7FKU  __FKU  )520GXDOUHWXUQV$%

7LPH'HOD\

%(*,1'%06B/2&.6/((3  (1'SULYFDQWVHHPWRHPEHG

WKLVLQD6(/(&7
6(/(&787/B,1$''5JHWBKRVWBQDPH  )520GXDOLI
UHYHUVHORRNVDUHVORZ
6(/(&787/B,1$''5JHWBKRVWBDGGUHVV EODKDWWDFNHUFRP
)520GXDOLIIRUZDUGORRNXSVDUHVORZ
6(/(&787/B+7735(48(67 KWWSJRRJOHFRP )520GXDO
LIRXWERXQG7&3LVILOWHUHGVORZ
$OVRVHH+HDY\4XHULHVWRFUHDWHDWLPHGHOD\
0DNH'16
5HTXHVWV

6(/(&787/B,1$''5JHWBKRVWBDGGUHVV JRRJOHFRP )520GXDO


6(/(&787/B+7735(48(67 KWWSJRRJOHFRP )520GXDO

&RPPDQG
([HFXWLRQ

-DYDFDQEHXVHGWRH[HFXWHFRPPDQGVLILWVLQVWDOOHG([W3URFFDQ
VRPHWLPHVEHXVHGWRRWKRXJKLWQRUPDOO\IDLOHGIRUPH

/RFDO)LOH
$FFHVV

87/B),/(FDQVRPHWLPHVEHXVHG&KHFNWKDWWKHIROORZLQJLVQRQ
QXOO
6(/(&7YDOXH)520YSDUDPHWHU:+(5(QDPH
XWOBILOHBGLU-DYDFDQEHXVHGWRUHDGDQGZULWHILOHVLILWVLQVWDOOHG LW
LVQRWDYDLODEOHLQ2UDFOH([SUHVV 

+RVWQDPH,3
$GGUHVV

6(/(&787/B,1$''5JHWBKRVWBQDPH)520GXDO
6(/(&7KRVWBQDPH)520YLQVWDQFH
6(/(&787/B,1$''5JHWBKRVWBDGGUHVV)520GXDOJHWV,3
DGGUHVV
6(/(&787/B,1$''5JHWBKRVWBQDPH  )520GXDO
JHWVKRVWQDPHV

/RFDWLRQRI'%
ILOHV

6(/(&7QDPH)5209'$7$),/(

'HIDXOW6\VWHP
'DWDEDVHV

6<67(0
6<6$8;

0LVF7LSV
,QQRSDUWLFXODURUGHUKHUHDUHVRPHVXJJHVWLRQVIURPSHQWHVWPRQNH\UHDGHUV
)URP&KULVWLDQ0HKOPDXHU

*HWDOO
WDEOHQDPHV
LQRQH
VWULQJ

VHOHFWUWULP [PODJJ [POHOHPHQW HWDEOHBQDPH__


 H[WUDFW WH[W H[WUDFW WH[W 
IURPDOOBWDEOHVZKHQXVLQJ
XQLRQEDVHG64/,ZLWKRQO\RQHURZ

%OLQG64/,
LQRUGHUE\
FODXVH

RUGHUE\FDVHZKHQ VHOHFWIURPXVHUBWDEOHVZKHUH
VXEVWU ORZHU WDEOHBQDPH   DDQGURZQXP   WKHQ
FROXPQBQDPHHOVHFROXPQBQDPHHQG\RXPXVWNQRZFROXPQ
QDPHVZLWKWKHVDPHGDWDW\SH


7DJVFKHDWVKHHWGDWDEDVHRUDFOHSHQWHVWVTOLQMHFWLRQ

3RVWHGLQ64/,QMHFWLRQ

You might also like