hantwister/o5logon-fetch

PoC

Attempts to exploit CVE-2012-3137 on vulnerable Oracle servers

view exploit source poc_in_githubauthor hantwisterpublished 2014-03-29catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2012-3137US	medium6.4	31.4% (98th)	Exploit	2012-09-21
The authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote attackers to obtain the session key and salt for…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.