OAPScan – Oracle Application Server Scanner


We got an e-mail a while back about this new and apparently simple Oracle Application Server scanner.

It detects web pages, DADs (Database Access Descriptors) and test applications installed by default.

It may be useful for system hardening and pen-test.

You can download OAPScan here:

OAPScan.tar.gz

Posted in: Database Hacking, Hacking Tools

, , ,


Latest Posts:


BloodHound - Hacking Active Directory Trust Relationships BloodHound – Hacking Active Directory Trust Relationships
BloodHound is for hacking active directory trust relationships and it uses graph theory to reveal the hidden and often unintended relationships within an AD environment.
SecLists - Usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells SecLists – Usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place.
DeepSound - Audio Steganography Tool DeepSound – Audio Steganography Tool
DeepSound is an audio steganography tool and audio converter that hides secret data into audio files, the application also enables you to extract from files.
2019 High Severity Vulnerabilities What are the MOST Critical Web Vulnerabilities in 2019?
So what is wild on the web this year? Need to know about the most critical web vulnerabilities in 2019 to protect your organization?
GoBuster - Directory/File & DNS Busting Tool in Go GoBuster – Directory/File & DNS Busting Tool in Go
GoBuster is a tool used to brute-force URIs (directories and files) in web sites and DNS subdomains (inc. wildcards) - a directory/file & DNS busting tool.
BDFProxy - Patch Binaries via MITM - BackdoorFactory + mitmProxy BDFProxy – Patch Binaries via MiTM – BackdoorFactory + mitmproxy
BDFProxy allows you to patch binaries via MiTM with The Backdoor Factory combined with mitmproxy enabling on the fly patching of binary downloads


7 Responses to OAPScan – Oracle Application Server Scanner

  1. Daniel June 29, 2007 at 7:14 am #

    have you actually tested it? what platform? how does it work?

    more details please

  2. Darknet June 29, 2007 at 8:19 am #

    It’s PERL so it should work fine on both Windows and Linux, I don’t have any Oracle server or Applications here so I’m unable to test it.

  3. SN July 2, 2007 at 2:54 pm #

    Hey … this is nice. I am looking to make life really hard for my dba’s. It is better that I do it, before a real hacker does.

    -SN

  4. Sandeep Nain July 3, 2007 at 1:19 am #

    Any stats on how accurate the results are?? or teh stats on vulnerabilities found vs actual vulnerabilities

  5. Darknet July 3, 2007 at 8:47 am #

    SN sounds like a good plan :)

    Sandeep, you can try it out yourself, as we’ve said we don’t have any Oracle architecture to test with right now.

  6. john May 28, 2009 at 4:10 pm #

    Link seems broken

  7. Anonymous May 28, 2009 at 4:41 pm #

    Really? But the story is only two years old!

    Blimey Darknet, why don’t you check all of your links, every day????