Skip to content

Commit 1c8bd95

Browse files
bdamelebdamele
committed
more work on Oracle test cases (#312)
1 parent f25d7ff commit 1c8bd95

File tree

1 file changed

+47
-53
lines changed

1 file changed

+47
-53
lines changed

‎xml/livetests.xml

+47-53
Original file line numberDiff line numberDiff line change
@@ -490,11 +490,10 @@
490490
<getPrivileges value="True"/>
491491
<getRoles value="True"/>
492492
<getDbs value="True"/>
493-
<getTables value="True"/>
494493
<getColumns value="True"/>
495494
<getCount value="True"/>
496495
<dumpTable value="True"/>
497-
<db value="scott"/>
496+
<db value="sys"/>
498497
<tbl value="users"/>
499498
<excludeSysDbs value="True"/>
500499
</switches>
@@ -508,13 +507,12 @@
508507
<item value="current user is DBA: True"/>
509508
<item value="r'database management system users \[.+ANONYMOUS.+SCOTT.+SYS.+XDB'"/>
510509
<item value="r'database management system users password hashes:.+CTXSYS \[.+password hash: D1D21CA56994CAB6.+clear-text password: ORACLE.+DBSNMP \[.+password hash: E066D214D5421CCC.+clear-text password: DBSNMP.+SYS \[.+password hash: 2D5A0C491B634F1B.+clear-text password: TESTPASS'"/>
511-
<item value="r'database management system users privileges:.+CTXSYS.+ALTER SESSION.+ SYS .+ADMINISTER ANY SQL TUNING SET'"/>
512-
<item value="r'database management system users roles:.+MDSYS.+CONNECT.+SYS \(administrator\).+DBA.+JAVA_DEPLOY'"/>
513-
<item value="r'available databases \[.+CTXSYS.+SCOTT.+WMSYS'"/>
514-
<item value="r'Database: SCOTT.+ tables.+USERS'"/>
515-
<item value="r'Database: SCOTT.+Table: USERS.+3 columns.+SURNAME.+VARCHAR2'"/>
516-
<item value="r'Database: SCOTT.+Table.+Entries.+USERS.+5'"/>
517-
<item value="r'Database: SCOTT.+Table: USERS.+5 entries.+luther.+nameisnull.+'"/>
510+
<item value="r'database management system users privileges:.+CTXSYS.+ALTER SESSION.+ SYS .+ALTER ANY EVALUATION CONTEXT'"/>
511+
<item value="r'database management system users roles:.+MDSYS.+CONNECT.+SYS \(administrator\).+DBA.+XDBADMIN'"/>
512+
<item value="r'available databases \[.+CTXSYS.+MDSYS.+SYSTEM'"/>
513+
<item value="r'Database: SYS.+Table: USERS.+3 columns.+SURNAME.+VARCHAR2'"/>
514+
<item value="r'Database: SYS.+Table.+Entries.+USERS.+5'"/>
515+
<item value="r'Database: SYS.+Table: USERS.+5 entries.+luther.+nameisnull.+'"/>
518516
</parse>
519517
</case>
520518
<case name="Oracle error-based multi-threaded enumeration - all entries">
@@ -537,9 +535,8 @@
537535
<getColumns value="True"/>
538536
<getCount value="True"/>
539537
<dumpTable value="True"/>
540-
<db value="scott"/>
538+
<db value="sys"/>
541539
<tbl value="users"/>
542-
<excludeSysDbs value="True"/>
543540
<answers value="do you want to perform a dictionary-based attack against retrieved password hashes=N"/>
544541
</switches>
545542
<parse>
@@ -552,13 +549,13 @@
552549
<item value="current user is DBA: True"/>
553550
<item value="r'database management system users \[.+ANONYMOUS.+SCOTT.+SYS.+XDB'"/>
554551
<item value="r'database management system users password hashes:.+CTXSYS \[.+password hash: D1D21CA56994CAB6.+DBSNMP \[.+password hash: E066D214D5421CCC.+SYS \[.+password hash: 2D5A0C491B634F1B'"/>
555-
<item value="r'database management system users privileges:.+CTXSYS.+ALTER SESSION.+ SYS .+ADMINISTER ANY SQL TUNING SET'"/>
556-
<item value="r'database management system users roles:.+MDSYS.+CONNECT.+SYS \(administrator\).+DBA.+JAVA_DEPLOY'"/>
557-
<item value="r'available databases \[.+CTXSYS.+SCOTT.+WMSYS'"/>
558-
<item value="r'Database: SCOTT.+ tables.+USERS'"/>
559-
<item value="r'Database: SCOTT.+Table: USERS.+3 columns.+SURNAME.+VARCHAR2'"/>
560-
<item value="r'Database: SCOTT.+Table.+Entries.+USERS.+5'"/>
561-
<item value="r'Database: SCOTT.+Table: USERS.+5 entries.+luther.+nameisnull.+'"/>
552+
<item value="r'database management system users privileges:.+CTXSYS.+ALTER SESSION.+ SYS .+ALTER ANY EVALUATION CONTEXT'"/>
553+
<item value="r'database management system users roles:.+MDSYS.+CONNECT.+SYS \(administrator\).+DBA.+XDBADMIN'"/>
554+
<item value="r'available databases \[.+CTXSYS.+MDSYS.+SYSTEM'"/>
555+
<item value="r'Database: SYS.+ tables.+USERS'"/>
556+
<item value="r'Database: SYS.+Table: USERS.+3 columns.+SURNAME.+VARCHAR2'"/>
557+
<item value="r'Database: SYS.+Table.+Entries.+USERS.+5'"/>
558+
<item value="r'Database: SYS.+Table: USERS.+5 entries.+luther.+nameisnull.+'"/>
562559
</parse>
563560
</case>
564561
<case name="Oracle UNION query multi-threaded enumeration - all entries">
@@ -581,9 +578,8 @@
581578
<getColumns value="True"/>
582579
<getCount value="True"/>
583580
<dumpTable value="True"/>
584-
<db value="scott"/>
581+
<db value="sys"/>
585582
<tbl value="users"/>
586-
<excludeSysDbs value="True"/>
587583
<answers value="do you want to perform a dictionary-based attack against retrieved password hashes=N"/>
588584
</switches>
589585
<parse>
@@ -596,13 +592,13 @@
596592
<item value="current user is DBA: True"/>
597593
<item value="r'database management system users \[.+ANONYMOUS.+SCOTT.+SYS.+XDB'"/>
598594
<item value="r'database management system users password hashes:.+CTXSYS \[.+password hash: D1D21CA56994CAB6.+DBSNMP \[.+password hash: E066D214D5421CCC.+SYS \[.+password hash: 2D5A0C491B634F1B'"/>
599-
<item value="r'database management system users privileges:.+CTXSYS.+ALTER SESSION.+ SYS .+ADMINISTER ANY SQL TUNING SET'"/>
600-
<item value="r'database management system users roles:.+MDSYS.+CONNECT.+SYS \(administrator\).+DBA.+JAVA_DEPLOY'"/>
601-
<item value="r'available databases \[.+CTXSYS.+SCOTT.+WMSYS'"/>
602-
<item value="r'Database: SCOTT.+ tables.+USERS'"/>
603-
<item value="r'Database: SCOTT.+Table: USERS.+3 columns.+SURNAME.+VARCHAR2'"/>
604-
<item value="r'Database: SCOTT.+Table.+Entries.+USERS.+5'"/>
605-
<item value="r'Database: SCOTT.+Table: USERS.+5 entries.+luther.+nameisnull.+'"/>
595+
<item value="r'database management system users privileges:.+CTXSYS.+ALTER SESSION.+ SYS .+ALTER ANY EVALUATION CONTEXT'"/>
596+
<item value="r'database management system users roles:.+MDSYS.+CONNECT.+SYS \(administrator\).+DBA.+XDBADMIN'"/>
597+
<item value="r'available databases \[.+CTXSYS.+MDSYS.+SYSTEM'"/>
598+
<item value="r'Database: SYS.+ tables.+JOBS.+REGIONS'"/>
599+
<item value="r'Database: SYS.+Table: USERS.+3 columns.+SURNAME.+VARCHAR2'"/>
600+
<item value="r'Database: SYS.+Table.+Entries.+USERS.+5'"/>
601+
<item value="r'Database: SYS.+Table: USERS.+5 entries.+luther.+nameisnull.+'"/>
606602
</parse>
607603
</case>
608604
<case name="Oracle partial UNION query multi-threaded enumeration - all entries">
@@ -625,9 +621,8 @@
625621
<getColumns value="True"/>
626622
<getCount value="True"/>
627623
<dumpTable value="True"/>
628-
<db value="scott"/>
624+
<db value="sys"/>
629625
<tbl value="users"/>
630-
<excludeSysDbs value="True"/>
631626
<answers value="do you want to perform a dictionary-based attack against retrieved password hashes=N"/>
632627
</switches>
633628
<parse>
@@ -640,13 +635,13 @@
640635
<item value="current user is DBA: True"/>
641636
<item value="r'database management system users \[.+ANONYMOUS.+SCOTT.+SYS.+XDB'"/>
642637
<item value="r'database management system users password hashes:.+CTXSYS \[.+password hash: D1D21CA56994CAB6.+DBSNMP \[.+password hash: E066D214D5421CCC.+SYS \[.+password hash: 2D5A0C491B634F1B'"/>
643-
<item value="r'database management system users privileges:.+CTXSYS.+ALTER SESSION.+ SYS .+ADMINISTER ANY SQL TUNING SET'"/>
644-
<item value="r'database management system users roles:.+MDSYS.+CONNECT.+SYS \(administrator\).+DBA.+JAVA_DEPLOY'"/>
645-
<item value="r'available databases \[.+CTXSYS.+SCOTT.+WMSYS'"/>
646-
<item value="r'Database: SCOTT.+ tables.+USERS'"/>
647-
<item value="r'Database: SCOTT.+Table: USERS.+3 columns.+SURNAME.+VARCHAR2'"/>
648-
<item value="r'Database: SCOTT.+Table.+Entries.+USERS.+5'"/>
649-
<item value="r'Database: SCOTT.+Table: USERS.+5 entries.+luther.+nameisnull.+'"/>
638+
<item value="r'database management system users privileges:.+CTXSYS.+ALTER SESSION.+ SYS .+ALTER ANY EVALUATION CONTEXT'"/>
639+
<item value="r'database management system users roles:.+MDSYS.+CONNECT.+SYS \(administrator\).+DBA.+XDBADMIN'"/>
640+
<item value="r'available databases \[.+CTXSYS.+MDSYS.+SYSTEM'"/>
641+
<item value="r'Database: SYS.+ tables.+JOBS.+REGIONS'"/>
642+
<item value="r'Database: SYS.+Table: USERS.+3 columns.+SURNAME.+VARCHAR2'"/>
643+
<item value="r'Database: SYS.+Table.+Entries.+USERS.+5'"/>
644+
<item value="r'Database: SYS.+Table: USERS.+5 entries.+luther.+nameisnull.+'"/>
650645
</parse>
651646
</case>
652647
<case name="Oracle time-based single-threaded enumeration - all entries">
@@ -683,9 +678,8 @@
683678
<getColumns value="True"/>
684679
<getCount value="True"/>
685680
<dumpTable value="True"/>
686-
<db value="scott"/>
681+
<db value="sys"/>
687682
<tbl value="users"/>
688-
<excludeSysDbs value="True"/>
689683
<answers value="do you want to perform a dictionary-based attack against retrieved password hashes=N"/>
690684
</switches>
691685
<parse>
@@ -698,13 +692,13 @@
698692
<item value="current user is DBA: True"/>
699693
<item value="r'database management system users \[.+ANONYMOUS.+SCOTT.+SYS.+XDB'"/>
700694
<item value="r'database management system users password hashes:.+CTXSYS \[.+password hash: D1D21CA56994CAB6.+DBSNMP \[.+password hash: E066D214D5421CCC.+SYS \[.+password hash: 2D5A0C491B634F1B'"/>
701-
<item value="r'database management system users privileges:.+CTXSYS.+ALTER SESSION.+ SYS .+ADMINISTER ANY SQL TUNING SET'"/>
702-
<item value="r'database management system users roles:.+MDSYS.+CONNECT.+SYS \(administrator\).+DBA.+JAVA_DEPLOY'"/>
703-
<item value="r'available databases \[.+CTXSYS.+SCOTT.+WMSYS'"/>
704-
<item value="r'Database: SCOTT.+ tables.+USERS'"/>
705-
<item value="r'Database: SCOTT.+Table: USERS.+3 columns.+SURNAME.+VARCHAR2'"/>
706-
<item value="r'Database: SCOTT.+Table.+Entries.+USERS.+5'"/>
707-
<item value="r'Database: SCOTT.+Table: USERS.+5 entries.+luther.+nameisnull.+'"/>
695+
<item value="r'database management system users privileges:.+CTXSYS.+ALTER SESSION.+ SYS .+ALTER ANY EVALUATION CONTEXT'"/>
696+
<item value="r'database management system users roles:.+MDSYS.+CONNECT.+SYS \(administrator\).+DBA.+XDBADMIN'"/>
697+
<item value="r'available databases \[.+CTXSYS.+MDSYS.+SYSTEM'"/>
698+
<item value="r'Database: SYS.+ tables.+JOBS.+REGIONS'"/>
699+
<item value="r'Database: SYS.+Table: USERS.+3 columns.+SURNAME.+VARCHAR2'"/>
700+
<item value="r'Database: SYS.+Table.+Entries.+USERS.+5'"/>
701+
<item value="r'Database: SYS.+Table: USERS.+5 entries.+luther.+nameisnull.+'"/>
708702
</parse>
709703
</case>
710704
<case name="SQLite boolean-based multi-threaded enumeration - all entries">
@@ -963,15 +957,15 @@
963957
<tech value="E"/>
964958
<getSchema value="True"/>
965959
<dumpTable value="True"/>
966-
<db value="scott"/>
960+
<db value="sys"/>
967961
<tbl value="users"/>
968962
<limitStart value="2"/>
969963
<limitStop value="4"/>
970964
<excludeSysDbs value="True"/>
971965
</switches>
972966
<parse>
973-
<item value="r'Database: SCOTT.+Table: USERS.+3 columns.+SURNAME.+VARCHAR2'"/>
974-
<item value="r'Database: SCOTT.+Table: USERS.+3 entries.+fluffy.+bunny.+wu.+ming'"/>
967+
<item value="r'Database: SYS.+Table: USERS.+3 columns.+SURNAME.+VARCHAR2'"/>
968+
<item value="r'Database: SYS.+Table: USERS.+3 entries.+fluffy.+bunny.+wu.+ming'"/>
975969
</parse>
976970
</case>
977971
<case name="Oracle UNION query multi-threaded custom enumeration">
@@ -981,15 +975,15 @@
981975
<tech value="U"/>
982976
<getSchema value="True"/>
983977
<dumpTable value="True"/>
984-
<db value="scott"/>
978+
<db value="sys"/>
985979
<tbl value="users"/>
986980
<limitStart value="2"/>
987981
<limitStop value="4"/>
988982
<excludeSysDbs value="True"/>
989983
</switches>
990984
<parse>
991-
<item value="r'Database: SCOTT.+Table: USERS.+3 columns.+SURNAME.+VARCHAR2'"/>
992-
<item value="r'Database: SCOTT.+Table: USERS.+3 entries.+fluffy.+bunny.+wu.+ming'"/>
985+
<item value="r'Database: SYS.+Table: USERS.+3 columns.+SURNAME.+VARCHAR2'"/>
986+
<item value="r'Database: SYS.+Table: USERS.+3 entries.+fluffy.+bunny.+wu.+ming'"/>
993987
</parse>
994988
</case>
995989
<case name="Oracle boolean-based multi-threaded custom enumeration - substring">
@@ -998,13 +992,13 @@
998992
<threads value="4"/>
999993
<tech value="B"/>
1000994
<dumpTable value="True"/>
1001-
<db value="scott"/>
995+
<db value="sys"/>
1002996
<tbl value="users"/>
1003997
<firstChar value="3"/>
1004998
<lastChar value="5"/>
1005999
</switches>
10061000
<parse>
1007-
<item value="r'Database: SCOTT.+Table: USERS.+5 entries.+the | iss.+&lt;blank&gt; | mei'"/>
1001+
<item value="r'Database: SYS.+Table: USERS.+5 entries.+the | iss.+&lt;blank&gt; | mei'"/>
10081002
</parse>
10091003
</case>
10101004
<case name="SQLite UNION query multi-threaded custom enumeration">

0 commit comments

Comments
 (0)