This module attempts to bruteforce the SID on the Oracle application server iSQL*Plus login pages. It does this by testing Oracle error responses returned in the HTTP response. Incorrect username/pass with a correct SID will produce an Oracle ORA-01017 error. Works against Oracle 9.2, 10.1 & 10.2 iSQL*Plus. This module will attempt to fingerprint the version and automatically select the correct POST request.
To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':
msf > use auxiliary/scanner/oracle/isqlplus_sidbrute
msf auxiliary(isqlplus_sidbrute) > show actions
...actions...
msf auxiliary(isqlplus_sidbrute) > set ACTION < action-name >
msf auxiliary(isqlplus_sidbrute) > show options
...show and set options...
msf auxiliary(isqlplus_sidbrute) > run
Time is precious, so I don’t want to do something manually that I can automate. Leveraging the Metasploit Framework when automating any task keeps us from having to re-create the wheel as we can use the existing libraries and focus our efforts where it matters.
– Jim O’Gorman | President, Offensive Security