RE: Oracle SQL injection

["yeesan wong" <yeesan () hotmail com>]

mate...

i am not sure whether it helps, but you can give this a go...

http://www.petefinnigan.com/orasec.htm

cheers....



<BLOCKQUOTE style='PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #A0C6E5 
2px solid; MARGIN-RIGHT: 0px'><font 
style='FONT-SIZE:11px;FONT-FAMILY:tahoma,sans-serif'><hr color=#A0C6E5 
size=1>
From:  <i>&quot;Sap .&quot; &lt;0xsapx0 () gmail com&gt;</i><br>To:  
<i>security-basics () securityfocus com</i><br>Subject:  <i>Oracle SQL 
injection</i><br>Date:  <i>Tue, 23 Aug 2005 08:18:49 -0700</i><br>&gt;Can 
anyone provide links towards SQL injection using Oracle's SQL?.<br>&gt;I've 
been doing pentesting against MSSQL for a while and the 
standard<br>&gt;injection techniques all error out on Oracle for me. Not 
knowing<br>&gt;Oracle SQL if anyone has any good links towards resources 
regarding<br>&gt;this I would Appreciate it.<br>&gt;<br>&gt;. - SaP - 
.<br></font></BLOCKQUOTE>