¡¾ºÚ¿Í×·»÷¡¿¾³ÍâºÚ¿Í×éÖ¯ÌáǰÐж¯£¬£¬£¬£¬£¬£¬Ãé×¼ÎÒ¹ú¹«Ë¾ÊµÑéÍøÂç¹¥»÷
Ðû²¼Ê±¼ä 2020-02-09Ò»¡¢ºÚ¿Í×îй¥»÷¶¯Ïò
¿ËÈÕ£¬£¬£¬£¬£¬£¬¾³ÍâºÚ¿Í×éÖ¯£¨°üÀ¨ÄäÃûÕß×éÖ¯ÔÚÄڵĶà¸öºÚ¿Í×éÖ¯×é³ÉµÄºÚ¿ÍͬÃË£©Éù³Æ½«ÓÚ2020Äê2ÔÂ13ÈÕÕë¶ÔÎÒ¹úÊÓÆµ¼à¿ØÏµÍ³ÊµÑéÍøÂç¹¥»÷ÆÆËð»î¶¯£¬£¬£¬£¬£¬£¬²¢Ðû²¼ÁËÆäÒÑÕÆÎÕµÄÒ»ÅúÔÚÏßÊÓÆµ¼à¿ØÏµÍ³µÄ¾³ÄÚIPµØµã£¬£¬£¬£¬£¬£¬¸ÃÉùÃ÷ÒýÆðÁËÍøÂçÇå¾²ÒµÄڵĸ߶ȹØ×¢¡£¡£¡£¡£¡£
c7c7ÓéÀÖÆ½Ì¨ADLab×·×ÙÁ˸Ã×éÖ¯ÔÚPastebinÉϵÄÏà¹Ø¹¥»÷»î¶¯¼Í¼£¬£¬£¬£¬£¬£¬·¢Ã÷ÆäÀúÊ·ÉÏÔø¶à´Î½«¹¥»÷Ä¿µÄËø¶¨ÖÁÎÒ¹úµÄÕþ¸®ºÍÆóÒµÍøÕ¾¡£¡£¡£¡£¡£
¹¥»÷ÀÖ³ÉÔò»áչʾ¸Ã×éÖ¯µÄÏà¹Ø¹¥»÷Ò³Ãæ¡£¡£¡£¡£¡£
ÖµµÃ×¢ÖØµÄÊÇ£¬£¬£¬£¬£¬£¬ËäÈ»¾àÀëºÚ¿ÍÐû³ÆµÄ¹¥»÷ÈÕÆÚÉÐÓÐÊýÈÕ£¬£¬£¬£¬£¬£¬µ«ºÚ¿Í×éÖ¯ÒѾ×îÏÈÌᳫÐж¯¡£¡£¡£¡£¡£2020Äê2ÔÂ9ÈÕÆÆÏþ4ʱ£¬£¬£¬£¬£¬£¬¸ÃÍÅ»ïÔÙ´ÎÐû²¼ÍÆÎÄÐû²¼ÁËÆäÕë¶ÔÖйúijº£Ô˼¯ÍŹ«Ë¾ÍøÕ¾¾ÙÐеÄÉøÍ¸¹¥»÷»î¶¯¡£¡£¡£¡£¡£
c7c7ÓéÀÖÆ½Ì¨ADLabÇå¾²Ñо¿Ö°Ô±Ñ¸ËÙ¶Ô¸ÃÊÂÎñ¾ÙÐÐÁËÆÊÎö£¬£¬£¬£¬£¬£¬¹¥»÷Êý¾ÝÏÔʾ¸ÃÍøÕ¾¿ÉÄܱ£´æoracleÎó²îCVE-2012-1675£¬£¬£¬£¬£¬£¬ºÚ¿ÍʹÓøÃÎó²î¾ÙÐеĹ¥»÷¿ÉÒÔµ¼ÖÂoracle×é¼þºÍÕýµ±Êý¾Ý¿âÖ®¼äÔâµ½ÖÐÐÄÈ˹¥»÷¡¢»á»°Ð®ÖÆ»ò¾Ü¾øÐ§À͹¥»÷µÈ£¬£¬£¬£¬£¬£¬ÐèÒªÒýÆðÏà¹ØÆóÒµµÄ¸ß¶ÈÖØÊÓ¡£¡£¡£¡£¡£
¶þ¡¢¹¥»÷ϸ½ÚÆÊÎö
ÎÒÃǴӺڿ͵ÄPastebinÕ¹Ê¾Ò³ÃæÖз¢Ã÷Á˴˴ι¥»÷µÄ²¿·ÖÊý¾Ý£¬£¬£¬£¬£¬£¬¸ÃÍÅ»ïͨ¹ý±©Á¦²Â½â¡¢Îó²îʹÓõȷ½·¨×îÖÕÓпÉÄÜÇÔÈ¡µ½Ä¿µÄµÄoracleÊý¾Ý¿âÊý¾Ý£¬£¬£¬£¬£¬£¬Ïà¹Ø¹¥»÷Á÷³ÌÈçÏ£º
¹¥»÷ÍÅ»ïÊ×ÏÈʹÓÃnmap¹¤¾ßÕë¶ÔÄ¿µÄÍøÕ¾¾ÙÐÐɨÃ裬£¬£¬£¬£¬£¬»ñÈ¡µ½Ä¿µÄЧÀÍÆ÷µÄÏà¹ØÖ¸ÎÆÐÅÏ¢¡£¡£¡£¡£¡£
Ä¿µÄЧÀÍÆ÷¿ªÆôÁËoracleÊý¾Ý¿âµÄĬÈϼàÌý¶Ë¿Ú1521£¬£¬£¬£¬£¬£¬ÇÒÊý¾Ý¿âÏìÓ¦°æ±¾½ÏµÍ£¬£¬£¬£¬£¬£¬¿ÉÄܱ£´æÖî¶àÎó²î£¬£¬£¬£¬£¬£¬ÕâÒ²¸øÁ˹¥»÷ÍÅ»ï¿É³ËÖ®»ú£¨1521¶Ë¿ÚÊÇoracleÊý¾Ý¿âĬÈϵĶ˿ڣ¬£¬£¬£¬£¬£¬Ö÷Òª×÷ÓÃÊÇÓÃÀ´¼àÌýÀ´×Ô¿Í»§¶ËµÄÊý¾Ý¿âÁ´½ÓÇëÇ󣩡£¡£¡£¡£¡£
¹¥»÷ÍÅ»ï½øÒ»²½Õë¶Ô1521¶Ë¿ÚµÄoracle Êý¾Ý¿âʵÑéÁËÉøÍ¸²âÊԺ͹¥»÷£¬£¬£¬£¬£¬£¬¹¥»÷Àú³ÌÖй²Ê¹Óõ½Á½¸ö¿ªÔ´µÄoracleÉøÍ¸²âÊÔÏîÄ¿£¨odat¹¥»÷¿ò¼Ü¾ÙÐÐÔ¶³Ì²âÊÔOracleÊý¾Ý¿âµÄÇå¾²ÐÔ ; oracle-tns-poison¾ÙÐй¥»÷Ͷ¶¾£©¡£¡£¡£¡£¡£
2.1 ʹÓÃodat¹¥»÷¿ò¼Ü¾ÙÐÐÇå¾²ÐÔ²âÊÔ
Ê×ÏÈ£¬£¬£¬£¬£¬£¬¹¥»÷Õßͨ¹ýodat¹¥»÷¿ò¼ÜÅþÁ¬ÖÁÄ¿µÄoracleÊý¾Ý¿â£¬£¬£¬£¬£¬£¬²¢½øÒ»²½Í¨¹ýPasswordGuesserÄ£¿£¿£¿£¿£¿£¿é¾ÙÐб©Á¦²Â½â¡£¡£¡£¡£¡£
ͬʱ̽²âµ½Ä¿½ñoracle°æ±¾¿ÉÄܱ£´æTNS poisoning (CVE-2012-1675)Îó²î¹¥»÷¡£¡£¡£¡£¡£
¹¥»÷ÍÅ»ï½øÒ»²½Í¨¹ýMetasploit5ÉøÍ¸²âÊÔ¿ò¼ÜµÄtnspoison_checkerÄ£¿£¿£¿£¿£¿£¿é¶Ôoracle¾ÙÐÐÁËÎó²î¼ì¿¼ÊÔÖ¤¡£¡£¡£¡£¡£
·µ»ØÐÅÏ¢Åú×¢±£´æCVE-2012-1675Îó²î£¬£¬£¬£¬£¬£¬²¢½øÒ»²½»ñÈ¡µ½oracleµÄOracle System ID(SID£©¡£¡£¡£¡£¡£
2.2 ͨ¹ýoracle-tns-poisonÏîĿʵÑéͶ¶¾¹¥»÷
¹¥»÷¹²·ÖΪÈý¸ö°ì·¨£º
£¨1£©Í¨¹ýcheck_tns_poisonÄ£¿£¿£¿£¿£¿£¿éÔÙ´ÎÑéÖ¤Îó²îµÄ¿ÉÓÃÐÔ¡£¡£¡£¡£¡£
£¨2£©Í¨¹ýproxyÄ£¿£¿£¿£¿£¿£¿é½«Ô¶³ÌЧÀÍÆ÷µÄoracleÊý¾ÝÊðÀíת·¢ÖÁÍâµØ¡£¡£¡£¡£¡£
£¨3£©Ö´ÐÐtnspoisonv1Ä£¿£¿£¿£¿£¿£¿é£¬£¬£¬£¬£¬£¬Õë¶ÔÄ¿µÄÊý¾Ý¿â¾ÙÐÐͶ¶¾¹¥»÷£¨CVE-2012-1675£©¡£¡£¡£¡£¡£
2.3 CVE-2012-1675Îó²îÏÈÈÝ
CVE-2012-1675Îó²îÊÇOracleÔÊÐí¹¥»÷ÕßÔÚ²»ÌṩÓû§Ãû¼°ÃÜÂëµÄÇéÐÎÏ£¬£¬£¬£¬£¬£¬ÏòÔ¶³Ì¡°TNS Listener¡±×é¼þ´¦Öóͷ£µÄÊý¾ÝͶ¶¾µÄÎó²î¡£¡£¡£¡£¡£¹¥»÷Õß¿ÉʹÓÃÎó²î½«Êý¾Ý¿âЧÀÍÆ÷µÄÕýµ±¡°TNS Listener¡±×é¼þÖеÄÊý¾Ýת·¢¸ø¹¥»÷ÕßµÄÍâµØÏµÍ³£¬£¬£¬£¬£¬£¬Ôì³É×é¼þºÍÕýµ±Êý¾Ý¿âÖ®¼äµÄÖÐÐÄÈ˹¥»÷¡¢»á»°Ð®ÖÆ»ò¾Ü¾øÐ§À͹¥»÷£¬£¬£¬£¬£¬£¬Ïà¹ØÊ¾ÒâͼÈçÏ£º
¡ôÏà¹Ø·À»¤ºÍÐÞ¸´½¨Òé
½¨Éè×㹻ǿ׳µÄ¿ÚÁ£¬£¬£¬£¬£¬ÇÐÎðʹÓÃ8λÒÔÏÂÃÜÂë»ò×Öµä¿âÖеĿÚÁ£¬£¬£¬£¬£¬°´ÆÚÌæ»»Çå¾²ÃÜÂë¾ÙÐÐÔ¤·À¡£¡£¡£¡£¡£
Õë¶ÔOracle¾ÙÐв¹¶¡Éý¼¶£¨¸üÐÂcpuoct2012-1515893²¹¶¡£¡£¡£¡£¡£©£»£»£»£»£»£»×¢ÖØ£º¹ØÓÚcpuoct2012-1515893²¹¶¡ÒªÇóЧÀÍÆ÷¶ËºÍÓ¦ÓÃЧÀÍÆ÷¶ËͬʱÉý¼¶£¬£¬£¬£¬£¬£¬²»È»Ó¦ÓÃϵͳ½«ÎÞ·¨»á¼ûOracle¡£¡£¡£¡£¡£
ÈôÎÞ·¨¶ÔOracleÉý¼¶£¬£¬£¬£¬£¬£¬Ð蹺Öûò×°Öþ߱¸ÐéÄâ²¹¶¡¹¦Ð§µÄÊý¾Ý¿âÇå¾²²úÆ·£¬£¬£¬£¬£¬£¬±ÜÃâ¶ÔCVE-2012-1675¼°ÆäËüÎó²îµÄʹÓᣡ£¡£¡£¡£
¿ÉÕë¶ÔÊý¾Ý¿â¾ÙÐÐÈ«¿â»òÕßÃô¸Ð×ֶμÓÃÜ£¬£¬£¬£¬£¬£¬°ü¹Ü×ÝÈ»TNS Listener±»¹¥»÷£¬£¬£¬£¬£¬£¬½¹µãÊý¾ÝÒÀ¾É²»»áй¶¡£¡£¡£¡£¡£
Èý¡¢×Ü ½á
ÒÀ¾ÝÏÖÔÚÕÆÎÕµÄÇéÐΣ¬£¬£¬£¬£¬£¬¸Ã¾³ÍâºÚ¿Í×é֝ɯÓÚÉøÍ¸¹¥»÷ºÍÎó²îʹÓ㬣¬£¬£¬£¬£¬ÇÒÓпÉÄÜÒÑ¾ÕÆÎÕÁË´ó×ÚÎïÁªÍø×°±¸Çå¾²Îó²î£¬£¬£¬£¬£¬£¬²¢¾ß±¸½øÒ»²½Ê¹ÓõÄÄÜÁ¦¡£¡£¡£¡£¡£ÓÉÓÚ¸Ã×éÖ¯ºã¾ÃÕë¶ÔÎÒ¹ú¾ÙÐй¥»÷£¬£¬£¬£¬£¬£¬Ï£ÍûÏà¹ØÓû§ºÍÆóÒµÔöÇ¿×ÔÉíÍøÂçΣº¦ÅŲéºÍÇå¾²¼Ó¹ÌÊÂÇ飬£¬£¬£¬£¬£¬½øÒ»²½Ìá¸ß·À»¤Òâʶ£¬£¬£¬£¬£¬£¬¸ß¶ÈСÐľ³ÍâºÚ¿Í×éÖ¯ÏÂÒ»²½¿ÉÄܵĹ¥»÷Ðж¯¡£¡£¡£¡£¡£


¾©¹«Íø°²±¸11010802024551ºÅ