Hidden File Transfer Tunnel based on Oracle Undetectable Backdoor
Zhi Xue · Information Security and Communications Privacy · 2011
With the increasing demand of information storage,Oracle database structure is widely adopted in all kinds of institutes,while the relative security research is not in an all-round way.Based on some former data ensconcing techniques,especially HTTP tunnel,a new type of data ensconcing and transferring method based on Oracle net protocol is proposed,which could be used in file transfer over different networks.Oracle protocol and user-defined function or stored procedure could be employed to simply bypass the Oracle's security mechanism and access the operation system directly.The experiment results indicate that hidden file transfer tunnel is of high flexibility and concealment,and also could hardly be blocked by a firewall.