| 1 | from autorecon.plugins import ServiceScan |
| 2 | |
| 3 | class OraclePatator(ServiceScan): |
| 4 | |
| 5 | def __init__(self): |
| 6 | super().__init__() |
| 7 | self.name = "Oracle Patator" |
| 8 | self.tags = ['default', 'databases'] |
| 9 | |
| 10 | def configure(self): |
| 11 | self.match_service_name('^oracle') |
| 12 | |
| 13 | def manual(self, service, plugin_was_run): |
| 14 | service.add_manual_command('Install Oracle Instant Client (https://github.com/rapid7/metasploit-framework/wiki/How-to-get-Oracle-Support-working-with-Kali-Linux) and then bruteforce with patator:', 'patator oracle_login host={address} port={port} user=COMBO00 password=COMBO01 0=/usr/share/seclists/Passwords/Default-Credentials/oracle-betterdefaultpasslist.txt -x ignore:code=ORA-01017 -x ignore:code=ORA-28000') |
nothing calls this directly
no outgoing calls
no test coverage detected