Google Hacking of Oracle Technologies V1.02 - by Red-Database-Security GmbH

Google Hacking of Oracle Technologies V1.02                          

Database Logins  
iSQL*Plus is the web version of SQL*Plus the default user interface for the Oracle database 


iSQL*Plus 
http://www.google.com/search? l=en&lr=&c2coff=1&q=intitle%3AiSQL+intitle%3ARelease+inurl
%3Aisqlplus&btnG=Search


iSQL*Plus 9.2 
http://www.google.com/search?l=en&lr=&c2coff=1&q=intitle%3AiSQL+intitle%3ARelease+inurl
%3Aisqlplus+intitle%3A9.2&btnG=Search


iSQL*Plus 9.2.0.1 
http://www.google.com/search?l=en&lr=&c2coff=1&q=intitle%3AiSQL+intitle%3ARelease+inurl
%3Aisqlplus+intitle%3A9.2.0.1&btnG=Search


iSQL*Plus 9.2.0.2 
http://www.google.com/search?l=en&lr=&c2coff=1&q=intitle%3AiSQL+intitle%3ARelease+inurl
%3Aisqlplus+intitle%3A9.2.0.2&btnG=Search


iSQL*Plus 9.2.0.3 
http://www.google.com/search?l=en&lr=&c2coff=1&q=intitle%3AiSQL+intitle%3ARelease+inurl
%3Aisqlplus+intitle%3A9.2.0.3&btnG=Search


iSQL*Plus 9.2.0.4 
http://www.google.com/search?l=en&lr=&c2coff=1&q=intitle%3AiSQL+intitle%3ARelease+inurl
%3Aisqlplus+intitle%3A9.2.0.4&btnG=Search


iSQL*Plus 9.2.0.5 
http://www.google.com/search?l=en&lr=&c2coff=1&q=intitle%3AiSQL+intitle%3ARelease+inurl
%3Aisqlplus+intitle%3A9.2.0.5&btnG=Search


iSQL*Plus 9.2.0.6 
http://www.google.com/search?l=en&lr=&c2coff=1&q=intitle%3AiSQL+intitle%3ARelease+inurl
%3Aisqlplus+intitle%3A9.2.0.6&btnG=SearchGoogle Hacking of Oracle Technologies V1.02 


iSQL*Plus 10.1 
http://www.google.com/search?l=en&lr=&c2coff=1&q=intitle%3AiSQL+intitle%3ARelease+inurl
%3Aisqlplus+intitle%3A10.1&btnG=Search


iSQL*Plus 10.1.0.1 
http://www.google.com/search?l=en&lr=&c2coff=1&q=intitle%3AiSQL+intitle%3ARelease+inurl
%3Aisqlplus+intitle%3A10.1.0.1&btnG=Search


iSQL*Plus 10.1.0.2 
http://www.google.com/search?l=en&lr=&c2coff=1&q=intitle%3AiSQL+intitle%3ARelease+inurl
%3Aisqlplus+intitle%3A10.1.0.2&btnG=Search


iSQL*Plus 10.1.0.3 
http://www.google.com/search?l=en&lr=&c2coff=1&q=intitle%3AiSQL+intitle%3ARelease+inurl
%3Aisqlplus+intitle%3A10.1.0.3&btnG=Search


iSQL*Plus 10.1.0.4 
http://www.google.com/search?l=en&lr=&c2coff=1&q=intitle%3AiSQL+intitle%3ARelease+inurl
%3Aisqlplus+intitle%3A10.1.0.4&btnG=Search                                


Oracle Application Server: 
iAS Demopages 
http://www.google.de/search?num=100&q=++%22inurl%3A%2FiASDemos.htm%22
http://www.google.de/search?num=100&q=++%22inurl%3A%2FJ2EEandIA.htm%22


Oracle Forms 
Oracle Forms 6i (using CGI) 
http://www.google.com/search?q=+inurl%3Af60cgi&btnG=Search&num=100
http://www.google.com/search?num=100&hl=de&c2coff=1&q=+inurl%3Aifcgi60


Oracle Forms 6i (using Servlets) 
http://www.google.com/search?num=100&hl=en&lr=&c2coff=1&q=inurl%3Af60servlet


Oracle Forms 9i 
http://www.google.com/search?num=100&hl=en&lr=&c2coff=1&q=inurl%3Af90servlet
Oracle Reports 


Oracle Reports 6i 
http://www.google.com/search?num=100&q=+inurl%3Arwcgi60


Oracle Reports 9i 
http://www.google.com/search?q=%22inurl%3Arwservlet%22+%22inurl%3Areports%22&num=10


Oracle Discoverer 
Oracle Discoverer 9i Viewer 
http://www.google.com/search?num=100&q=%22inurl%3Adiscoverer%2Fviewer%22


Oracle Discoverer 9i Plus  
http://www.google.com/search?num=100&q=%22inurl%3Adiscoverer%2Fplus%22


Oracle Discoverer 10g 
http://www.google.com/search?num=100&q=%22inurl%3Adiscoverer%2Fapp%22Google 


Oracle HTTP Server 
Browsable Oracle HTTP Server Directories 
http://www.google.com/search?num=100&q=%22Index+of%22++%22Oracle-HTTPServer%22+Server+at+Port+%22Last+modified%22


Oracle HTTP Server 1.3.12 
http://www.google.com/search?num=100&q=%22Index+of%22++%22Oracle-HTTPServer%22+Server+at+Port+%22Last+modified%22+1.3.12


Oracle HTTP Server 1.3.19 
http://www.google.com/search?num=100&q=%22Index+of%22++%22Oracle-HTTPServer%22+Server+at+Port+%22Last+modified%22+1.3.19


Oracle HTTP Server 1.3.22 
http://www.google.com/search?num=100&q=%22Index+of%22++%22Oracle-HTTPServer%22+Server+at+Port+%22Last+modified%22+1.3.22


Oracle HTTP Server 1.3.28 
http://www.google.com/search?num=100&q=%22Index+of%22++%22Oracle-HTTPServer%22+Server+at+Port+%22Last+modified%22+1.3.28


Oracle HTTP Server 10g 
http://www.google.com/search?num=100&q=%22Index+of%22++%22Oracle-HTTPServer%22+Server+at+Port+%22Last+modified%22++%22Oracle-Application-Server-10g%22


Oracle HTTP Server with 300-Error Message 
http://www.google.de/search?num=100&q=%22Oracle+HTTP+Server+Powered+by+Apache%22+
%22intitle%3A300


Oracle HTTP Server with 302-Error Message 
http://www.google.de/search?num=100&q=%22Oracle+HTTP+Server+Powered+by+Apache%22+
%22intitle%3A302


Oracle HTTP Server with 401-Error Message 
http://www.google.de/search?num=100&q=%22Oracle+HTTP+Server+Powered+by+Apache%22+
%22intitle%3A401%22


Oracle HTTP Server with 403-Error Message 
http://www.google.de/search?num=100&q=%22Oracle+HTTP+Server+Powered+by+Apache%22+
%22intitle%3A403%22


Oracle HTTP Server with 404-Error Message 
http://www.google.de/search?num=100&q=%22Oracle+HTTP+Server+Powered+by+Apache%22+
%22intitle%3A404+Not+Found%22


Oracle Webdav  
http://www.google.com/search?num=100&q=%22inurl%3Adav_public%22


Oracle Single-Sign-On Page 
http://www.google.de/search?num=100&q=%22intitle%3ASingle+SignOn%22+%22Oracle+Corporation%22+%22All+rights+reserved%22
http://www.google.com/search?num=100&hl=de&q=%22inurl%3Apls%2Forasso%22


Oracle Portal 
http://www.google.com/search?num=100&hl=de&c2coff=1&q=%22inurl%3Apls%2Fportal%22


Oracle HTMLDB 
http://www.google.com/search?num=100&q=%22inurl%3Apls%2Fhtmldb%22


Oracle Internet Directory OIDDAS 
http://www.google.com/search?q=%22inurl%3Aoiddas%22&num=100


Designer generated Web Application 
http://www.google.com/search?q=%22inurl:pls%22+%22inurl:startup%22+%22inurl:%24.%22&nu
m=100


Oracle Enterprise Manager 
Oracle Enterprise Manager 9i 
http://www.google.com/search?q=%22inurl%3A%2Femd%2Fmain%22&num=100


Oracle Enterprise Manager 10g 
http://www.google.com/search?num=100&q=%22inurl%3A%2Fem%2Fconsole%22+%22intitle%3
AOracle+Enterprise+Manager%22++Copyright+Oracle


Oracle Ultrasearch 
http://www.google.com/search?num=100&hl=de&c2coff=1&q=%22inurl%3A%2Fultrasearch%2Fq
uery%22Google Hacking of Oracle Technologies V1.02                                 


Oracle Lite 9i 
http://www.google.de/search?num=100&q=%22inurl%3Awebtogo%2Findex.html%22
Oracle Jinitator Download Page 
http://www.google.de/search?num=100&q=%22inurl%3Ajinitiator%22+%22intitle%3AOracle+JInit
iator%22+%22intitle%3ADownload+Page%22
Oracle mod_plsql-related 


Oracle DAD Config Page 
http://www.google.de/search?num=100&q=%22inurl%3A%2Fpls%2Fadmin_%2Fgateway.htm%22
admin_/globalsettings.htm
http://www.google.com/search?&ie=UTF-8&oe=UTF-
8&q=inurl%3Aadmin%5F%2Fglobalsettings%2Ehtm


Oracle Pages with wrong DAD configuration 
http://www.google.de/search?q=%22No+DAD+configuration+Found%22++%22DAD+Name%22&
num=100


Oracle JDeveloper: 
Oracle OC4j connections.xml 
http://www.google.de/search?as_q=&num=100&as_epq=inurl%3Aconnections+xml&as_filetype=x
ml


Oracle JSP with error messages “at oracle.jsp” 
http://www.google.de/search?num=100&q=%22at+oracle.jsp.%22+%22Exception%3A%22+%22Re
quest+URI%3A%22+%22JSP+Error%3A%22


Oracle JSP with error messages “at oracle.jdbc” 
http://www.google.de/search?num=100&q=%22at+oracle.jdbc%22+%22Exception%3A%22++%22
JSP+Error%22


Oracle UIX Applications: 
http://www.google.de/search?q=inurl%3Auix+inurl%3Aimtapp&num=100
Oracle Web Conferencing: 
http://www.google.de/search?num=100&q=%22inurl%3A%2Fimtapp%22+Conference


OracleAS Wireless Portal: 
http://www.google.de/search?q=%22inurl%3Aptg%2Frm%22&num=100Google Hacking of 


Oracle iLearning: 
http://www.google.de/search?num=100&q=%22inurl%3A%2Filearn%2Fen%22
Oracle FilesOnline: 
http://www.google.de/search?num=100&q=%22inurl%3A%2Ffiles%2Fapp%2FHomePage%22


Oracle iStore: 
http://www.google.com/search?num=100&q=%22inurl%3A%2FOA_HTML%2F%22


Oracle CRM Login Page: 
http://www.google.de/search?num=100&q=%22inurl%3A%2FOA_HTML%2Fjtflogin.jsp%22Google Hacking of Oracle Search 


Engines Used to Attack Databases:
http://www.appsecinc.com/presentations/Search_Engine_Attack_Database.pdf
Johnny Long’s Google Hacking Webpage:  http://johnny.ihackstuff.com/