Oracle TNSLSNR Full Client
Most of admins neglect setting password on TNSlsnr Clients for Oracle databases. Oracle ensures that you can either connect to TNSlsnr on a localhost or through mapping to a remote Oracle database using .ora files.
This is not the case anymore Based on Jwa perl client.
This client is a FULL client, with Packet crafting reassembled.
Supports all the commands as the version that is shipped with Oracle.
Allow you to totally control an unprotected Oracle Database Server remotelly , without having to map or install Oracle.
Download Here
Commands Supported
ping , version , service , status change_password, help, reload, save_config, set connect_timout set display_mode, set log_directory , set log_file , set log_status , show , spawn stop
this version works on Oracle9i.
On Oracle 10g only "version" command is working.
This is feedback i got from Pete Finnigan Oracle Security
The 10g listener is by default protected by local authentication rather than by a password like in the 9i and lower listener. This means that because it is protected you cannot use commands like status which can only be used on an un-protected listener. This is the reason that the version command still works, because it can be executed on a password or locally authenticated listener. To be able to get the lsnrctl tool to work remotely you need to disable local authentication.
Currently, i am working on 10g version with D.O.S check , well if you can't own it see if you can bring it down!!
If you have Oracle10g on a public IP and want to share it for testing let me know , just send me the IP by Email
I recieved feedback from Ivan Saez. Very helpful.
On 10G, when local authentication is enabled, sends a rediret packet back to tnscmd. The packet is :
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(KEY=#12543.2)))
The key points to a special file
in /var/tmp/.oracle (for example):
oracle@Siemens:/var/tmp/.oracle > ls -lrt total 0
srwxrwxrwx 1 oracle oinstall 0 2005-11-03 15:57 s#12529
相关文档：
表的查找：
select * from emp where (sal>500 or job='MANAGER') and ename like 'J%';
引号里边的字符是区分大小写的。
查找之后把结果排序：
select * from emp order by sal asc;
asc是升序，desc是降序
对列重命名，只要打个空格，后跟新列名就可以
select ename,sal*12+nvl(comm,0)*12 "年薪" from ......
仍然使用SCOTT用户来操作：
1、 显示工资比部门30的所有员工的工资都高的员工的信息：
Select * from emp where sal>all(select sal from emp where deptno=30);
2、 显示工资比部门30的任意一个员工的工资高就可� ......
摘自徐玉金的<<sql性能的调整-总结>>
如何使用hints:
Hints只应用在它们所在sql语句块(statement block，由select、update、delete关键字标识)上，对其它SQL语句或语句的其它部分没有影响。如：对于使用union操作的2个sql语句，如果只在一个sql语句上有hints，则该hints不会影响另一个sql语句。
我们可以� ......
1. 查看表空间的名称及大小
select t.tablespace_name, round(sum(bytes/(1024*1024)),0) ts_size
from dba_tablespaces t, dba_data_files d
where t.tablespace_name = d.tablespace_name
group by t.tablespace_name;
2、查看表空间物理文件的名称及大小
select tablespace_name, file_id, file_name,
round(byte ......
