<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Musings on Database Security &#187; security</title>
	<atom:link href="http://www.slaviks-blog.com/category/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.slaviks-blog.com</link>
	<description>Slavik&#039;s Blog</description>
	<lastBuildDate>Thu, 02 Sep 2010 00:03:08 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>Mixed case passwords for Oracle</title>
		<link>http://www.slaviks-blog.com/2010/09/01/mixed-case-passwords-for-oracle/</link>
		<comments>http://www.slaviks-blog.com/2010/09/01/mixed-case-passwords-for-oracle/#comments</comments>
		<pubDate>Thu, 02 Sep 2010 00:03:08 +0000</pubDate>
		<dc:creator>Slavik</dc:creator>
				<category><![CDATA[Oracle]]></category>
		<category><![CDATA[Passwords]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://www.slaviks-blog.com/?p=272</guid>
		<description><![CDATA[So, we all know that Oracle used to be non-case sensitive when it came to user names and passwords. We also know that since 11g this is not the case and Oracle, by default, is case sensitive. The one thing I wanted to point out is that even if you are using sec_case_sensitive_logon=false and ignore [...]]]></description>
		<wfw:commentRss>http://www.slaviks-blog.com/2010/09/01/mixed-case-passwords-for-oracle/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Upcoming presentation with McAfee for their ‘Hacking Exposed’ Webcast series</title>
		<link>http://www.slaviks-blog.com/2010/07/15/upcoming-presentation-with-mcafee-for-their-%e2%80%98hacking-exposed%e2%80%99-webcast-series/</link>
		<comments>http://www.slaviks-blog.com/2010/07/15/upcoming-presentation-with-mcafee-for-their-%e2%80%98hacking-exposed%e2%80%99-webcast-series/#comments</comments>
		<pubDate>Fri, 16 Jul 2010 01:29:36 +0000</pubDate>
		<dc:creator>Slavik</dc:creator>
				<category><![CDATA[security]]></category>
		<category><![CDATA[hacking]]></category>

		<guid isPermaLink="false">http://www.slaviks-blog.com/?p=265</guid>
		<description><![CDATA[Next week I’ll be doing a really fun webcast, as a guest speaker for McAfee’s ‘Hacking Exposed Live’ series.  The series takes a look at current and evolving hacks and what you can do to protect your environment.  The topic is officially:  ‘Understanding Threat Vectors for Database Breaches’, and I’ll be showing some sample attacks [...]]]></description>
		<wfw:commentRss>http://www.slaviks-blog.com/2010/07/15/upcoming-presentation-with-mcafee-for-their-%e2%80%98hacking-exposed%e2%80%99-webcast-series/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Java Forensics in Oracle</title>
		<link>http://www.slaviks-blog.com/2010/03/31/java-forensics-in-oracle/</link>
		<comments>http://www.slaviks-blog.com/2010/03/31/java-forensics-in-oracle/#comments</comments>
		<pubDate>Wed, 31 Mar 2010 22:44:00 +0000</pubDate>
		<dc:creator>Slavik</dc:creator>
				<category><![CDATA[Oracle]]></category>
		<category><![CDATA[monitoring]]></category>
		<category><![CDATA[patching]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[forensics]]></category>
		<category><![CDATA[virtual patching]]></category>

		<guid isPermaLink="false">http://www.slaviks-blog.com/?p=257</guid>
		<description><![CDATA[Paul Wright published an interesting post about how you can find traces of Java privilege escalation attacks in the database. Great stuff! Of course, Hedgehog already protects against these published attacks as Paul showed earlier here. Hedgehog comes with build-in vPatch protections that cover the DBMS_JVM_EXP_PERMS and DBMS_JAVA attacks.]]></description>
		<wfw:commentRss>http://www.slaviks-blog.com/2010/03/31/java-forensics-in-oracle/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Oracle TNS Resend Packet</title>
		<link>http://www.slaviks-blog.com/2010/03/07/oracle-tns-resend-packet/</link>
		<comments>http://www.slaviks-blog.com/2010/03/07/oracle-tns-resend-packet/#comments</comments>
		<pubDate>Sun, 07 Mar 2010 22:41:56 +0000</pubDate>
		<dc:creator>Slavik</dc:creator>
				<category><![CDATA[Oracle]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://www.slaviks-blog.com/?p=252</guid>
		<description><![CDATA[As you can see here, the Python code handles a specific case of Oracle TNS layer requesting a RESEND of the last packet. I&#8217;ve noticed that no matter what client I&#8217;m trying to connect with, Oracle is always requesting a RESEND after the initial CONNECT request as you can see here (removed various ACK packets, [...]]]></description>
		<wfw:commentRss>http://www.slaviks-blog.com/2010/03/07/oracle-tns-resend-packet/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>Enumerate Oracle SIDs</title>
		<link>http://www.slaviks-blog.com/2010/02/26/enumerate-oracle-sids/</link>
		<comments>http://www.slaviks-blog.com/2010/02/26/enumerate-oracle-sids/#comments</comments>
		<pubDate>Fri, 26 Feb 2010 20:37:00 +0000</pubDate>
		<dc:creator>Slavik</dc:creator>
				<category><![CDATA[Oracle]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://www.slaviks-blog.com/?p=241</guid>
		<description><![CDATA[As promised, here is a small Python script to allow you to enumerate and find Oracle SIDs. Of course, the usual caveats apply &#8211; if it breaks something, I&#8217;m not responsible Use at your own risk. I&#8217;m using the sidlist.txt file from David&#8217;s OAK but there are plenty of available resources with common SID lists. [...]]]></description>
		<wfw:commentRss>http://www.slaviks-blog.com/2010/02/26/enumerate-oracle-sids/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Exploiting Oracle from the web whitepaper</title>
		<link>http://www.slaviks-blog.com/2010/02/22/exploiting-oracle-from-the-web-whitepaper/</link>
		<comments>http://www.slaviks-blog.com/2010/02/22/exploiting-oracle-from-the-web-whitepaper/#comments</comments>
		<pubDate>Tue, 23 Feb 2010 02:47:00 +0000</pubDate>
		<dc:creator>Slavik</dc:creator>
				<category><![CDATA[Oracle]]></category>
		<category><![CDATA[SQL*Plus]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[SQL injection]]></category>

		<guid isPermaLink="false">http://www.slaviks-blog.com/?p=239</guid>
		<description><![CDATA[Sumit Siddarth (Sid) has published an excellent whitepaper talking about hacking Oracle from the web. It shows many types and techniques of SQL injection and how to use an SQL injection vulnerability as a jumping point to extract data, take control of the database and even escape the database to the OS. Security folks and [...]]]></description>
		<wfw:commentRss>http://www.slaviks-blog.com/2010/02/22/exploiting-oracle-from-the-web-whitepaper/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

<!-- Dynamic Page Served (once) in 1.533 seconds -->
