Oscanner Package Description

Oscanner is an Oracle assessment framework developed in Java. It has a plugin-based architecture and comes with a couple of plugins that currently do:

• Sid Enumeration
• Passwords tests (common & dictionary)
• Enumerate Oracle version
• Enumerate account roles
• Enumerate account privileges
• Enumerate account hashes
• Enumerate audit information
• Enumerate password policies
• Enumerate database links

The results are given in a graphical java tree.

Source: http://www.cqure.net/wp/tools/database/oscanner/
Oscanner Homepage | Kali Oscanner Repo

• Author: Patrik Karlsson
• License: GPLv2

Tools included in the oscanner package

oscanner – Oracle assessment framework

[email protected]:~# oscanner
    Oracle Scanner 1.0.6 by [email protected]
    --------------------------------------
    OracleScanner -s <ip> -r <repfile> [options]
        -s  <servername>
        -f  <serverlist>
        -P  <portnr>
        -v  be verbose

oscanner Usage Example

Scan the target server (-s 192.168.1.15) on port 1040 (-P 1040):

[email protected]:~# oscanner -s 192.168.1.15 -P 1040
Oracle Scanner 1.0.6 by [email protected]
--------------------------------------------------
[-] Checking host 192.168.1.15
[x] Failed to enumerate sids from host
[-] Loading services/sids from service file