SQL Injection Attacks and Defense - 2009

436 Chapter 10 • References
Table 10.15 Extracting Oracle Database Schema
Data
Database name
List schema/users
List table names and their schema
List columns
Query
SELECT global_name FROM global_name;
SELECT username FROM all_users;
SELECT owner,table_name FROM all_tables;
SELECT owner, table_name, column_name
FROM all_tab_columns WHERE table_name =
'tblUsers';
Table 10.16 Encryption in the Database
Data
Encrypted
tables
List objects
using crypto
libraries
List PL/SQL
functions
containing the
string ‘crypt’
Query
SELECT table_name, column_name, encryption_alg, salt FROM dba_
encrypted_columns;
Since Oracle 10g, you can use transparent encryption for
tables. For performance reasons, only the most important
columns are encrypted.
SELECT owner, name, type, referenced_name FROM all_dependencies;
--show objects using database encryption (e.g. for passwords
in 'DBMS_CRYPTO'and 'DBMS_OBFUSCATION_TOOLKIT')
SELECT owner,object_name,procedure_name FROM all_procedures
where (lower(object_name) LIKE '%crypt%' or
lower(procedure_name) like '%crypt%') AND object_name not
in ('DBMS_OBFUSCATION_TOOLKIT','DBMS_CRYPTO_TOOLKIT')
Blind SQL Injection Functions: Oracle
Table 10.17 lists functions that are useful when performing blind SQL injection attacks.
Table 10.17 Blind SQL Injection Functions
Data
String length
Extract substring
from a given string
Query
LENGTH()
SELECT SUBSTR(string, offset, length) FROM dual;
Continued