You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+11-10Lines changed: 11 additions & 10 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,4 +1,4 @@
1
-
__ODAT linux standalone__ version at [https://github.com/quentinhardy/odat/releases/download/1.6.0/odat-linux-libc2.5-x86_64-v1.6.tar.gz](https://github.com/quentinhardy/odat/releases/download/1.6.0/odat-linux-libc2.5-x86_64-v1.6.tar.gz)
1
+
__ODAT linux standalone__ version at [https://github.com/quentinhardy/odat/releases/](https://github.com/quentinhardy/odat/releases/)
2
2
3
3
ODAT
4
4
====
@@ -16,13 +16,14 @@ Changelog
16
16
====
17
17
* Version __2.0__ (__2016/02/21__) :
18
18
* A new module (_privesc_) for using system privileges of an Oracle user (e.g. CREATE ANY PROCEDURE) in order to gain privileged access (i.e. DBA). System privileges that can be used by ODAT in this version:
19
-
* CREATE ANY PROCEDURE: execution of arbitrary requests with APEX_040200's privileges (e.g. modification of Oracle users' passwords)
20
-
* CREATE PROCEDURE and EXECUTE ANY PROCEDURE: execution of arbitrary requests as SYS (e.g. gives DBA role to a user)
21
-
* CREATE ANY TRIGER (and CREATE PROCEDURE): execution of arbitrary requests as SYS (e.g. gives DBA role to a user)
22
-
* ANALYZE ANY (and CREATE PROCEDURE): execution of arbitrary requests as SYS (e.g. gives DBA role to a user)
23
-
* CREATE ANY INDEX (and CREATE PROCEDURE): execution of arbitrary requests as SYS (e.g. gives DBA role to a user)
19
+
* CREATE ANY PROCEDURE: execution of arbitrary requests with APEX_040200's privileges (e.g. modification of Oracle users' passwords)
20
+
* CREATE PROCEDURE and EXECUTE ANY PROCEDURE: execution of arbitrary requests as SYS (e.g. gives DBA role to a user)
21
+
* CREATE ANY TRIGER (and CREATE PROCEDURE): execution of arbitrary requests as SYS (e.g. gives DBA role to a user)
22
+
* ANALYZE ANY (and CREATE PROCEDURE): execution of arbitrary requests as SYS (e.g. gives DBA role to a user)
23
+
* CREATE ANY INDEX (and CREATE PROCEDURE): execution of arbitrary requests as SYS (e.g. gives DBA role to a user)
24
24
* The module _privesc_ can be used to get all system privileges and roles granted. It shows system privileges that can be used to gain privileged access.
25
25
* new option (-vvv) for showing SQL requests sent by ODAT in debugs
26
+
* standalone version moved to *releases* ([https://github.com/quentinhardy/odat/releases/](https://github.com/quentinhardy/odat/releases/))
26
27
* Version __1.6__ (__2015/07/14__) :
27
28
* new feature to detect if a target is vulnerable to TNS poisoning (CVE-2012-1675)
28
29
* new module named *unwrapper* to unwrap PL/SQL source code wrapped, from a file or a remote database
@@ -106,10 +107,10 @@ Supported Platforms and dependencies
106
107
107
108
ODAT is compatible with __Linux__ only.
108
109
109
-
__Standalone versions__ exist in order to don't have need to install dependencies and slqplus (see [https://github.com/quentinhardy/odat-standalones](https://github.com/quentinhardy/odat-standalones)).
110
+
__Standalone versions__ exist in order to don't have need to install dependencies and slqplus (see [https://github.com/quentinhardy/odat/releases/](https://github.com/quentinhardy/odat/releases/)).
110
111
The ODAT standalone has been generated thanks to *pyinstaller*.
111
112
112
-
If you want to have the __development version__ installed on your computer, these following tool and dependencies are needed:
113
+
If you want to have the __development version__ installed on your computer, these following tools and dependencies are needed:
113
114
* Langage: Python 2.7
114
115
* Oracle dependancies:
115
116
* Instant Oracle basic
@@ -121,11 +122,11 @@ If you want to have the __development version__ installed on your computer, thes
121
122
* argcomplete (recommended)
122
123
* pyinstaller (recommended)
123
124
124
-
Installation (optional)
125
+
Installation (optional, for development version)
125
126
====
126
127
127
128
This part describes how to install instantclient, CX_Oracle and some others python libraries on __Ubuntu__ in order to have the ODAT development version.
128
-
Don't forget that an ODAT standalone version exists at [https://github.com/quentinhardy/odat-standalones](https://github.com/quentinhardy/odat-standalones): __It is not required to install something for use the standalone version__
129
+
Don't forget that an ODAT standalone version exists at [https://github.com/quentinhardy/odat/releases/](https://github.com/quentinhardy/odat/releases/): __It is not required to install something for use the standalone version__
129
130
130
131
* Get instant client basic, sdk (devel) and sqlplus from the Oracle web site:
0 commit comments