52 - Oracle Database System Tables for SQLi | WEB-200 OSWA by KinSec

52 - Oracle Database System Tables for SQLi | WEB-200 OSWA by KinSec

In this video, we focus on Oracle Database and the key system tables and views used during SQL Injection attacks. Oracle has a different structure compared to MySQL, MSSQL, and PostgreSQL, and requires knowledge of specific internal tables for successful enumeration and data extraction.

Topics Covered:
- Common Oracle metadata tables: all_tables, all_tab_columns, user_tables, user_tab_columns
- Extracting table and column names during SQLi
- Querying current user, database, and privileges
- Understanding Oracle’s dual table and its role in injection
- Differences in syntax and behavior compared to other RDBMS

Tools Used:
- Burp Suite
- SQLi payloads tailored for Oracle
- Vulnerable web app with Oracle backend (or simulated)

This video is part of the WEB-200 OSWA training series by KinSec, designed to teach practical web application exploitation techniques and prepare for Offensive Security’s OSWA certification.

Subscribe to KinSec for more database-specific hacking content, lab walkthroughs, and real-world web security training.

#OracleSQL #SQLInjection #WEB200 #OSWA #KinSec #CyberSecurity #EthicalHacking #BugBounty #PenetrationTesting #DatabaseSecurity #OffensiveSecurity

Видео 52 - Oracle Database System Tables for SQLi | WEB-200 OSWA by KinSec канала KinSec