p216 Oracle漏洞分析:

开启oracle:

C:\oracle\product\10.2.\db_1\BIN\sqlplus.exe /nolog
conn sys/mima1234 as sysdba
startup

用IDA Pro打开c:\oracle\product\10.2.0\db_1\BIN\oracle.exe,通过shift+f12打开string subview,查找字符串"AUTH_SESSKEY":

aaarticlea/png;base64,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" alt="" />

用OllyDbg附到oracle.exe进程上,按照书上说的搜索"AUTH_SESSKEY",都是显示 Item Not Found..

原来我漏了一点,要先选择可执行模块oracle.exe。

aaarticlea/png;base64,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" alt="" />

回到代码中可以看到,这三段代码在引用"AUTH_SESSKEY"后,都调用了模块oracommon10.dll的kpzgkvl函数。

aaarticlea/png;base64,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" alt="" />

查找kpzgkvl函数的地址:右键->search for->name in all modules,找到这几个kpzgkvl

aaarticlea/png;base64,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" alt="" />

按我的理解,应该选择在oracommon10模块中靠前的那个地址,即0x60FD99AC。

在函数kpzgkvl的起始地址处0x60FD99AC下断点,运行起来

aaarticlea/png;base64,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" alt="" />

但是总是停在这一处上,多次按f9或ctrl+f9也没用。

aaarticlea/png;base64,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" alt="" />

在register窗口显示了这个消息,但是上网也查不到什么资料。

aaarticlea/png;base64,iVBORw0KGgoAAAANSUhEUgAAAUMAAAAXCAIAAAAeOboFAAAB7UlEQVR4nO2aO24DMQxEef+TuXThg6RPIRcBgo1Fih9RyooY4xULQqJJrmbHsE2ttdfz0VojIiJq318AgOOgHxm/ng8oGYBzIXgyAAWAJwNQAXgyABWAJwNQAd2T6fKyJvVvYTPkdMilou6VPFmiT9i4tF5KZVlvKekj2F9L6431hPMYu7C0dkrcOwEBxZOvQeOJD2wZJ5ntUOtrCdLtkZSTdW2pZ2cNWfUPVu5sbdG4MsSsePKMkmfsbrBRMlLWYyXvlfJLa9xzuLOSV9fjfV87YyUT9/Hn/vHwNP6y0JMXKdlbm9qXpXh3U3dTsrRsgzKzxKzmuYkyA0oOTKNjoSfbt4yTTL7RoK9elpJQ3U+l37vFPn29cemaPRNqVVJkXslSPSlitiQ58TowCo5Vnnx1sEhZmjIHIvzYqPY1ExdRj52kWJeSAyfAm9/bV3ggkyPtp3FK3DsHgVWevEjJlnpYhQfyW+IiloO77gFvr21nDZNihpKHHPbdNZSsXFvq2VlD4pPov0a6Z1zzSr7z78lsHjYuLZbqkfInK/lK+Db3SdRjoZaUHpf6DeRXW9jc2ra4/XRx4D9e4BwyTvwdSVEy/ncNTqKemJM6gicXov+IW+/cAwF4MgAVgCcDUAF4MgAVgCcDUAF4MgAVeAMaw6ItURc5kAAAAABJRU5ErkJggg==" alt="" />

还是没能完成任务,唉~

Oracle漏洞分析(tns_auth_sesskey)的更多相关文章

  1. Java反序列化漏洞分析

    相关学习资料 http://www.freebuf.com/vuls/90840.html https://security.tencent.com/index.php/blog/msg/97 htt ...

  2. FakeID签名漏洞分析及利用(二)

    本文转自:http://blog.csdn.net/l173864930/article/details/38409521 继上一次Masterkey漏洞之后,Bluebox在2014年7月30日又公 ...

  3. Weblogic漏洞分析之JNDI注入-CVE-2020-14645

    Weblogic漏洞分析之JNDI注入-CVE-2020-14645 Oracle七月发布的安全更新中,包含了一个Weblogic的反序列化RCE漏洞,编号CVE-2020-14645,CVS评分9. ...

  4. weblogic漏洞分析之CVE-2021-2394

    weblogic漏洞分析之CVE-2021-2394 简介 Oracle官方发布了2021年7月份安全更新通告,通告中披露了WebLogic组件存在高危漏洞,攻击者可以在未授权的情况下通过IIOP.T ...

  5. weblogic漏洞分析之CVE-2016-0638

    weblogic漏洞分析之CVE-2016-0638 一.环境搭建: 这里使用前一篇文章的环境,然后打上补丁 上一篇文章:https://www.cnblogs.com/yyhuni/p/151370 ...

  6. weblogic漏洞分析之CVE-2017-10271

    weblogic漏洞分析之CVE-2017-10271 一.环境搭建 1)配置docker 这里使用vulhub的环境:CVE-2017-10271 编辑docker-compose.yml文件,加入 ...

  7. Zabbix 漏洞分析

    之前看到Zabbix 出现SQL注入漏洞,自己来尝试分析. PS:我没找到3.0.3版本的 Zabbix ,暂用的是zabbix 2.2.0版本,如果有问题,请大牛指点. 0x00 Zabbix简介 ...

  8. PHPCMS \phpcms\modules\member\index.php 用户登陆SQL注入漏洞分析

    catalog . 漏洞描述 . 漏洞触发条件 . 漏洞影响范围 . 漏洞代码分析 . 防御方法 . 攻防思考 1. 漏洞描述2. 漏洞触发条件 0x1: POC http://localhost/p ...

  9. CVE-2016-0143 漏洞分析(2016.4)

    CVE-2016-0143漏洞分析 0x00 背景 4月20日,Nils Sommer在exploitdb上爆出了一枚新的Windows内核漏洞PoC.该漏洞影响所有版本的Windows操作系统,攻击 ...

随机推荐

  1. 【转载】jQuery动画中的queue()函数

    原文链接:http://www.cnblogs.com/hh54188/archive/2011/04/09/1996469.html 原文摘要:当你使用一系列的动画效果(如hide,show),这些 ...

  2. win10 uwp 验证输入 自定义用户控件

    TextBox是给用户输入,我们有时要用户只输入数字,而用户输入汉字,我们就有提示用户,那么这东西用到次数很多,我们需要做成一个控件. 我们可以用别人的库,我找到一个大神写的库,很好用 我们使用这个库 ...

  3. PE格式第九讲,资源表解析

    PE格式第九讲,资源表解析 一丶熟悉Windows管理文件的方法 首先,为什么标题是这个,主要是为了下边讲解资源方便,因为资源结构体很乱.如果直接拿出来讲解,那么就会很晕. 1.windows管理文件 ...

  4. [译]ASP.NET Core 2.0 依赖注入

    问题 如何使用 ASP.NET Core 服务容器进行依赖注入? 答案 创建一个服务 public interface IGreetingService { string Greet(string t ...

  5. mySQL:两表更新(用一个表更新另一个表)的SQL语句

    用一个表中的字段去更新另外一个表中的字段, MySQL 中有相应的 update 语句来支持,不过这个 update 语法有些特殊.看一个例子就明白了. create table student ( ...

  6. 【NOIP模拟】jzoj5233概率博弈(树规)

    Description 小A和小B在玩游戏.这个游戏是这样的: 有一棵

  7. 处理MySQL服务器无法启动的问题

    MySQL数据库在升级到5.7版本后,和之前的版本有些不一样,没有data文件夹,我们都知道MySQL数据库文件是保存在data文件夹中的,网上有人说把5.6版本的data文件夹拷贝一个,这种说法听听 ...

  8. PHP异常处理机制

    1. 异常: 异常(Exception)用于在指定的错误发生时改变脚本的正常流程. 当异常被触发时,通常会发生: (1)当前代码状态被保存: (2)代码执行被切换到预定义的异常处理器函数: (3)根据 ...

  9. web 开发中的路由是什么意思

    路由: 就是一个路径的解析,根据客户端提交的路径,将请求解析到相应的控制器上 从 URL 找到处理这个 URL 的类和函数

  10. hibernate的集合映射(详细笔记)