Re: [sqlmap-users] Getting Database IP Address (Oracle)

[Zaki A. <zak...@gm...>]

On Mon, Jul 16, 2012 at 11:20 PM, Bernardo Damele A. G.
<ber...@gm...> wrote:

> Zaki,
>
> Recently we added switch --hostname to retrieve the database server
> hostname. There's no built-in switch to retrieve the IP yet.

Hi Bernardo,

Actually Miroslav had answered my question:

<quote>
Hi Zaki.

You can try either [1][2]:
1) --sql-query="SELECT UTL_INADDR.GET_HOST_ADDRESS() FROM DUAL"
or
2) --sql-query="SELECT SYS_CONTEXT('USERENV', 'IP_ADDRESS', 15) FROM DUAL"

...but don't hope too much because of execute privileges [3]

Also, try to use those with --parse-errors to possibly catch some DBMS
error information

Kind regards,
Miroslav Stampar

References:
[1] http://www.dba-oracle.com/t_get_ip_address_utl_inaddr_sys_context.htm
[2] http://docs.oracle.com/cd/B19306_01/appdev.102/b14258/u_inaddr.htm
[3] https://forums.oracle.com/forums/thread.jspa?messageID=9755122

</quote>

Did --hostname option had implement those sql-query?

Regards,
-- 
Zaki Akhmad