[Previous entry: "Reinventing the wheel... and Oracle passwords"] [Next entry: "0wned by the lowly Oracle rowid pseudo function?"]

10/30/2007: "Memory-resident backdoors in Oracle / Deepsec conference."

I finished my code for the upcoming Deepsec conference in Vienna (November 20th-23rd). I'm presenting a discussion on memory-resident backdoors in Oracle (I will refrain from calling them "rootkits"). The code I wrote exploits a buffer overflow using ASCII armoured shellcode that dynamically creates a decoder which decodes the backdoor and then executes it. The talk will present this and look at potential defences. As the backdoor never touches the file system or any database objects it's much harder to spot than previously presented Oracle "rootkits". See you in Vienna - be there or be square