Exploiting SYSDBA Invoker Rights Using Trigger on Database

(Alex Gorbachev) This is a follow up on my previous post about SYSDBA keeping invoker rights when calling PL/SQL procedure. There was no direct privilege escalation but I mentioned that you need to craft your code so that it gets called by a SYSDBA user. This is what we are going to do now and here

Read More - Register for Free Membership