https://blog.1sec.day/en-gb/tags/vulnerability/ Recent content in Vulnerability on 思安录 | Thinking's Security Notes Hugo -- gohugo.io en-gb Thinking Thinking Tue, 02 Jan 2018 00:00:00 +0000 https://blog.1sec.day/en-gb/posts/2018-01-02-axublog-sqli-to-getshell/ Tue, 02 Jan 2018 00:00:00 +0000 Thinking https://blog.1sec.day/en-gb/posts/2018-01-02-axublog-sqli-to-getshell/ https://blog.1sec.day/en-gb/posts/2017-12-19-phpcms-962-vulnerabilities/ Tue, 19 Dec 2017 00:00:00 +0000 Thinking https://blog.1sec.day/en-gb/posts/2017-12-19-phpcms-962-vulnerabilities/ https://blog.1sec.day/en-gb/posts/2017-11-21-duomicms-filter-bypass/ Tue, 21 Nov 2017 00:00:00 +0000 Thinking https://blog.1sec.day/en-gb/posts/2017-11-21-duomicms-filter-bypass/ https://blog.1sec.day/en-gb/posts/2017-11-17-appcms-code-audit/ Fri, 17 Nov 2017 00:00:00 +0000 Thinking https://blog.1sec.day/en-gb/posts/2017-11-17-appcms-code-audit/ https://blog.1sec.day/en-gb/posts/2017-08-31-oracle-sql-injection-summary/ Thu, 31 Aug 2017 00:00:00 +0000 Thinking https://blog.1sec.day/en-gb/posts/2017-08-31-oracle-sql-injection-summary/ <p>I&rsquo;ve been running into Oracle injection tests more often lately, and solid writeups on the topic are surprisingly scarce online (MySQL material, by contrast, is everywhere). To speed up future testing and vulnerability hunting, I decided to revisit what I&rsquo;d learned and put it all in one place. This post draws on Oracle&rsquo;s official docs, fellow researchers&rsquo; blogs, and a few classic papers — feedback and discussion very welcome. Throughout, the <code>user</code> value is <code>SQLINJECTION</code>.</p> <blockquote> <p>Note: This article was first written in August 2017. I&rsquo;ve updated the version- and privilege-related details that have since gone stale and flagged the changes with side notes.</p> </blockquote>