diff --git a/db/modules_metadata_base.json b/db/modules_metadata_base.json index 218baa6875..c8865ac00f 100644 --- a/db/modules_metadata_base.json +++ b/db/modules_metadata_base.json @@ -5209,6 +5209,42 @@ "notes": { } }, + "auxiliary_admin/oracle/oracle_index_privesc": { + "name": "Oracle DB Privilege Escalation via Function-Based Index", + "full_name": "auxiliary/admin/oracle/oracle_index_privesc", + "rank": 300, + "disclosure_date": "2015-01-21", + "type": "auxiliary", + "author": [ + "David Litchfield", + "Moshe Kaplan" + ], + "description": "This module will escalate an Oracle DB user to DBA by creating a\n function-based index on a table owned by a more-privileged user.\n Credits to David Litchfield for publishing the technique.", + "references": [ + "URL-http://www.davidlitchfield.com/Privilege_Escalation_via_Oracle_Indexes.pdf" + ], + "is_server": false, + "is_client": false, + "platform": "", + "arch": "", + "rport": "1521", + "autofilter_ports": [ + + ], + "autofilter_services": [ + + ], + "targets": null, + "mod_time": "2018-12-10 11:21:16 +0000", + "path": "/modules/auxiliary/admin/oracle/oracle_index_privesc.rb", + "is_install_path": true, + "ref_name": "admin/oracle/oracle_index_privesc", + "check": false, + "post_auth": true, + "default_credential": true, + "notes": { + } + }, "auxiliary_admin/oracle/oracle_login": { "name": "Oracle Account Discovery", "full_name": "auxiliary/admin/oracle/oracle_login",