[Full-disclosure] Oracle Database IDS Evasion Techniques for SQL*Net

Joxean Koret joxeankoret at yahoo.es
Tue Aug 22 19:28:31 BST 2006


Hi,

Attached goes a "little bit stupid" paper about how to evade snort and
other IDS softwares that relies in rules to exploit known
vulnerabilities under Oracle database.

I wrote it for a friend and I decided that may be interesting for
someone else.

---
Regards,
Joxean Koret
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ids_evasion_oracle_sqlnet.pdf.gz
Type: application/x-gzip
Size: 74564 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20060822/ee4a4ba7/attachment.bin 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Esta parte del mensaje =?ISO-8859-1?Q?est=E1?= firmada
	digitalmente
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20060822/ee4a4ba7/attachment-0001.bin 


Full-Disclosure is hosted and sponsored by Secunia.