oracle.html

<h3 id="reading-and-writing-files">Reading and Writing Files</h3>

<p class="pageDescription">{{site.data.injectionDescriptions.readingAndWritingFiles}}</p>

<p><a target="_blank" rel="noopener" href="http://www.0xdeadbeef.info/exploits/raptor_oraexec.sql">UTL_FILE</a> can sometimes be used. Check that the following is non-null: <br> <code>SELECT value FROM v$parameter2 WHERE name = 'utl_file_dir';</code></p>

<p><a target="_blank" rel="noopener" href="http://www.0xdeadbeef.info/exploits/raptor_oraexec.sql">Java</a> can be used to read and write files if it's installed (it is not available in Oracle Express).</p>