Oracle databases, TNS, and how to hack it.

Oracle databases, TNS, and how to hack it.

The Oracle Transparent Network Substrate (TNS) server is a communication protocol that enables communication between Oracle databases and applications across networks. Initially introduced as part of the Oracle Net Services software suite, TNS supports diverse networking protocols, including IPX/SPX and TCP/IP protocol stacks, facilitating communication between Oracle databases and client applications. Its built-in encryption mechanism ensures the security of data transmitted. Over time, TNS has undergone updates to support newer technologies, including IPv6 and SSL/TLS encryption.
SNMP Hacking

SNMP Hacking

Simple Network Management Protocol (SNMP) was designed to monitor network devices. It also enables remote configuration and setting changes. SNMP Community strings provide information and statistics about routers and devices.
SMTP Hacking

SMTP Hacking

The Simple Mail Transfer Protocol (SMTP) is a protocol for sending emails in an IP network. It can be used between an email client and an outgoing mail server or between two SMTP servers. SMTP is often combined with the IMAP or POP3 protocols, which can fetch emails and send emails.
SMB Hacking

SMB Hacking

SMB (Server Message Block) is a widely used protocol on Windows systems that offers various paths for vertical and lateral movement within a network. Samba allows Linux and Unix distributions to utilize the SMB protocol.
Nginx Hacking

Nginx Hacking

Nginx is regarded as a secure, high-performance web server and reverse proxy, but its real-world security depends heavily on how it is configured and maintained. By default, Nginx includes several security controls, such as rate limiting and access controls, which help mitigate common threats like DDoS attacks and unauthorized access. However, like any widely deployed software, Nginx is not immune to vulnerabilities and requires regular updates and security hardening to remain secure.
NFS Hacking

NFS Hacking

Network File System (NFS), developed by Sun Microsystems, serves a similar purpose to SMB, enabling access to file systems over a network as if they were local. NFS is primarily used between Linux and Unix systems, preventing direct communication between NFS clients and SMB servers. While NFSv3, which has been widely adopted, authenticates client computers, NFSv4 introduces a change, similar to the Windows SMB protocol, requiring user authentication. A notable advantage of NFSv4 over its predecessors is its simplicity in utilizing only one UDP or TCP port (2049), which simplifies the protocol’s use across firewalls.
IMAP/POP3 Hacking

IMAP/POP3 Hacking

Unlike POP3, IMAP allows for online management of emails directly on the server and supports folder structures. IMAP is a network protocol designed for the management of emails on a remote server. In contrast, POP3 has limited functionality; it only offers features for listing, retrieving, and deleting emails on the email server.
nmap quick notes

nmap quick notes

Nmap (short for “Network Mapper”) is a free and open-source utility designed for network discovery and security auditing. Created by Gordon Lyon (also known as Fyodor Vaskovich), Nmap is widely used by cybersecurity professionals, network administrators, and system administrators to map out networks, discover hosts and services, and assess network security.
FTP hacking

FTP hacking

About FTP In an FTP connection, two channels are opened. First, the client and server establish a control channel through TCP port 21. The client sends commands to the server, and…