# Oracle DB 1521

&#x20;<https://book.hacktricks.xyz/pentesting/1521-1522-1529-pentesting-oracle-listener>\
\
\
there are multiple ways to enumerate oracle\
start with nmap script\
using msf\
and using odat\
oracle db attacking tool \[o d a t ]\
\
\
password bruteforce using odat\
\
sudo odat passwordguesser -s 10.10.10.82 -p 1521 -d XE --accounts-files \`pwd\`/users-oracle.txt \`pwd\`/pass-oracle.txt --force-retry --output-file passgues.txt.odat\
\
\
\--out-file flag does not works \[\[Beware]]\
\
troubleshooting sqlplus if not working\
\
<https://stackoverflow.com/questions/27717312/sqlplus-error-while-loading-shared-libraries-libsqlplus-so-cannot-open-shared>\
\
to write to a file in oracledb using sqlplus\
<https://stackoverflow.com/questions/27562/oracle-write-to-file>\\
