threat-intel
Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access
High
Summary
Attackers exploited a SQL injection vulnerability in a public-facing web application to gain access to an Oracle database. They then leveraged a post-exploitation toolkit, ‘khunt,’ to execute commands on the underlying Windows server, ultimately achieving SYSTEM-level access. The toolkit, developed using a technique dating back to 2006, allowed attackers to steal credentials and exfiltrate sensitive data.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data