Home

A classical method of getting Oracle-based processes communicating with the outside world is by using the DBMS_PIPE package: Typically, we write to a pipe from an Oracle PL/SQL-based process, and then we continuously run an asynchronous Oracle PL/SQL process which reads the pipe and processes what it reads. A common use of DBMS_PIPE is for debugging, logging and launching external processes.

It is possible to call O/S commands or third-party programs from within SQL or PL/SQL with external procedures. This guide describes how to build, install and use such an ExtProc and shows an exploit on how to grant yourself Oracle sysdba rights. Think of an ExtProc as an Oracle root kit.

A step-by-step construction guide to install and configure a Linux server from scratch and how to then install the Oracle 10g RDBMS on it.
 

  • You are here:  
  • Home