DeepSec 2007: Oracle Security: Orasploit

[Nytro]

[h=1]DeepSec 2007: Oracle Security: Orasploit[/h]Thanks to the DeepSec organisation for making these videos available and let me share the videos on YouTube.

Speaker: Alexander Kornbrust, Red Database Security

Orasploit is an Oracle exploit framework which automatically exploits vulnerabilities in Oracle databases. With orasploit it is possible to exploit an (unprotected/unpatched) database. Orasploit supports various exploits, privilege escalation techniques and many different payloads. We show different possibilities to create / write / read files, D.o.S., new ways to send data via HTTP requests from the database, ... It's possible to extend orasploit with own/custom exploits.

For more information visit: Speakers - DeepSec IDSC 2007 Europe - Vienna, November 20-23, 2007

To download the video visit: DeepSec 2007 on Vimeo