35 lines
840 B
Plaintext
35 lines
840 B
Plaintext
|
# oracle_sids.rc
|
||
|
|
# Author: nebulus
|
||
|
|
|
||
|
|
<ruby>
|
||
|
|
|
||
|
|
hosts = []
|
||
|
|
|
||
|
|
begin
|
||
|
|
framework.db.services.each do |service|
|
||
|
|
if ( (service.port == 1521 or service.port == 1522 or service.port == 1526) and (service.name =~ /oracle/i) and service.state == 'open')
|
||
|
|
hosts << {'ip' => service.host.address, 'port' => service.port}
|
||
|
|
end
|
||
|
|
end
|
||
|
|
rescue ActiveRecord::ConnectionNotEstablished
|
||
|
|
puts "DB not connected..."
|
||
|
|
# Uncomment if you want auto-reconnect and retry (on really large scans the db connector can time out)
|
||
|
|
# self.run_single('db_connect <creds>')
|
||
|
|
# puts "trying again..."
|
||
|
|
# retry
|
||
|
|
end
|
||
|
|
|
||
|
|
|
||
|
|
self.run_single("use auxiliary/admin/oracle/sid_brute")
|
||
|
|
|
||
|
|
hosts.each do |rhost|
|
||
|
|
|
||
|
|
self.run_single("set RHOST #{rhost['ip']}")
|
||
|
|
self.run_single("set RPORT #{rhost['port']}")
|
||
|
|
self.run_single('set ConnectTimeout 5')
|
||
|
|
self.run_single('run')
|
||
|
|
sleep 1
|
||
|
|
end
|
||
|
|
</ruby>
|
||
|
|
|