Pete Finnigan's Oracle Security Forum


    
      
        Pete Finnigan's Oracle Security Forum
        (http://www.petefinnigan.com/forum/yabb/YaBB.cgi)
      

        Oracle Security >> Oracle Security >> Sample Database For Pen Testing?
        
(Message started by: Pete Finnigan on Jul 19^th, 2007, 3:00pm)

Title: Sample Database For Pen Testing?
Post by Pete Finnigan on Jul 19^th, 2007, 3:00pm

Hi - I wondered if anyone could suggest a sample database or application with database or a bre built virtual machine that could be used for database pen testing offline. I'm in the process of building a lab and would ideally like to get a vulnerable oracle database (& ideally MSSQL) setup within vmware but due to Oracle licencing figure this may not be realistic Any advice or links would be a big help. Thanks!

Title: Re: Sample Database For Pen Testing?
Post by Pete Finnigan on Jul 19^th, 2007, 5:48pm

Hi shevz,

you can install Oracle XE (which is basically unpatched 10g) for free. For other options, take a look at http://orafaq.com/wiki/Oracle_Licensing