Oracle DB SQL Injection Via SYS.DBMS_METADATA.GET_XML

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle DB SQL Injection via SYS.DBMSMETADATA.GETXML', 'Description' = %q This module will escalate an Oracle DB user to DBA by exploiting a sql...

Oracle DB SQL Injection via SYS.DBMS_METADATA.GET_XML

This module will escalate an Oracle DB user to DBA by exploiting a sql injection bug in the SYS.DBMSMETADATA.GETXML package/function. Module Options msf use auxiliary/sqli/oracle/dbms/metadatagetxml msf undefinedmetadatagetxml show actions ...actions... msf undefinedmetadatagetxml set ACTION msf...