Wodat - Windows Oracle Database Attack Toolkit

Simple port of the popular Oracle Database Attack Tool (ODAT) (https://github.com/quentinhardy/odat) to C# .Net Framework. Credit to https://github.com/quentinhardy/odat as lots of the functionality are ported from his code.

Perform password based attacks e.g. username as password, username list against given password, password list against given username, username:pass combolist. Test if a credential/connection string is working against target Brute force attacks to discover valid SID/ServiceNames Perform discovery of valid TNS listeners against provided target file or CIDR range More to come, I hope!

Disclaimer

I take not responsibility for your use of the software. Development is done in my personal capacity and carry no affiliation to my work.

Usage

The general command line arguments required are as follow:

To test if a specific credential set works.

See the outline on modules for further usage. The tool will always first check if the TNS listener that is targeted works.

Modules

BRUTESID

Module performs wordlist SID guessing attack if not successful will ask for brute force attack.

BRUTESRV

Module performs wordlist ServiceName guessing attack if not successful will ask for brute force attack.

BRUTECRED

Module performs wordlist password based attack. The following options exist:

To perform a basic attack with a given file that has username:password combos.

TEST

Module tests if the given connection string can connect successfully.

DISC

Module will perform discovery against provided CIDR range or file with instances. Note, only instances with valid TNS listeners will be returned. Testing a network range will be much faster as it’s processed in parallel.

Instances to test must be formatted as per the below example targets.txt:

ALL

Not implemented yet.

RECON

Not implemented yet.

Setup and Requirements

You can grab automated release build from the GitHub Actions or build yourself using the following commands:

Some general notes: The Oracle.ManagedDataAccess.dll library will have to be copied with the binary. I'm looking at ways of embedding it.

Todo

Handle SYSDBA and SYSOPER connections Implement outstanding modules Various validation, error handling code still needs to be done Some minor known bugfixes Add options to check against built in lists for SID, ServiceNames or common credentials