David Litchfield's Weblog

Home
Archives

October 2006
SMTWTFS
1234567
891011121314
15161718192021
22232425262728
293031    

Valid XHTML 1.0!

Powered By Greymatter

Home » Archives » October 2006 » The Oracle Hacker's Handbook

[Previous entry: "Shooting to high?"] [Next entry: "Unbreakable Linux"]

10/05/2006: "The Oracle Hacker's Handbook"


Today I finished the manuscript for the Oracle Hacker's Handbook. It's a follow on from the Oracle section in the Database Hacker's Handbook, and I cover a number of new areas including Defeating Virtual Private Databases, PLSQL Race Conditions and Indirect Privilege Escalation to DBA. I cover attacking the Oracle Application Server PL/SQL Gateway and methods of bypassing database enforced access control. I skim over the stuff covered in the Database Hacker's Hanbook because I don't want people to feel that they only needed half the book because the rest was covered elsewhere. I enjoyed writing it - I hope you guys enjoy reading it.