The Web Application Hacker’s Handbook Discovering and Exploiting Security Flaws

AUTHOR

TITLE

YEAR

CORE 9.2.0.1.0 Production

NLSRTL Version 9.2.0.1.0 - Production

Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production

PL/SQL Release 9.2.0.1.0 - Production

TNS for 32-bit Windows: Version 9.2.0.1.0 - Production

Of course, while the database’s version string may be interesting, and may

enable you to research vulnerabilities in the specific software being used, in

most cases you will be more interested in extracting actual data from the data-

base. To do this, you will typically need to address the second proviso

described earlier; that is, you need to know the name of the database table that

you wish to target and the names of its relevant columns. We will describe

techniques you can employ to achieve this shortly.