SQL and PLSQL tools
The scripts contained on this page are available free to anyone to use. The author accepts no responsibility for any damage or errors or anything whatsoever caused by running or using these scripts. The scripts have been tested thoroughly but as there are many many platforms, oracle versions and possible configurations what works for me may not work for you. Please check what scripts do before running them especially on production systems.
| Script | Description |
| vpd2.sql |
This is the sample scripts for my Using VPD in the real world presentation given at the ULOUG DBMS SIG in Slough on March 17th 2009. This is a substantial update on the script below. Running the script follows through the samples in the presentation Using VPD in the real world which is available on my Oracle security white papers page. |
| vpd.sql | This is the sample scripts for my VPD presentation first given at the UKOUG Unix SIG in London Jan 22nd 2008. |
| Oracle Security Masterclass | This page is a list of all of the scripts that i used for the Oracle security masterclass at the 2006 UKOUG. |
| rls.sql rls.ksh |
These two files contain all of the sample code written for a two part paper called "Oracle Row Level Security" written by Pete Finnigan for a www.securityfocus.com infocus article published on 7 November 2003 (part 1) and 17 November (part 2). These papers discuss implementing row level security within an Oracle database and discuss some of the issues related to this and shows various methods for extracting useful information from the database in relation to row level security. |
| detect.sql detect.ksh |
These two files contains all of the sample code written for a paper called "Detecting SQL Injection in Oracle" written by Pete Finnigan for a www.securityfocus.com infocus article published on 23 July 2003. This paper discusses some of the sources of audit and logging information that can be found within Oracle and be used to detect SQL injection. |
| audit.sql |
This file contains all of the sample code written for a paper called "Introduction to simple Oracle auditing" written by Pete Finnigan for a www.securityfocus.com infocus article published on 29 April 2003. This paper shows some simple examples of how audit can be used within Oracle. |
| sqlinject.sql |
This file contains all of the sample code written for a paper called "SQL Injection and Oracle" written by Pete Finnigan for a www.securityfocus.com infocus article published on 21 November 2002. This paper explores what parts of the technique are possible on Oracle databases. |
| sqlinject.lis |
This file contains sample output from running the SQL file above used to demonstrate SQL Injection techniques for the security focus article written by Pete Finnigan. |
