Home » Infrastructure » Windows » OScanner
OScanner [message #499894] Wed, 16 March 2011 10:46 Go to next message
Shabz
Messages: 4
Registered: March 2011
Location: London
Junior Member
I have recently downloaded (the zip file for) OScanner (1.0.6) and have Java JRE installed on my machine. However, I am experiencing some difficulty in running the scanner. Please can someone explain in laymans terms on how I should start to use this tool, once I have downloaded the zip file.

Thanks in advance.
Re: OScanner [message #499897 is a reply to message #499894] Wed, 16 March 2011 10:57 Go to previous messageGo to next message
Mahesh Rajendran
Messages: 10694
Registered: March 2002
Location: oracleDocoVille
Senior Member
Account Moderator
As usual,
Exact installation and usage depends on your OS.
OScanner is pretty straight forward.

Install Jre.
Unzip the OScanner thingy.
Make sure you environment is using the correct Java.
Call Oscanner from the unzip directory.

Here is an example.
http://www.vulnerabilityassessment.co.uk/oscanner.htm
Re: OScanner [message #499898 is a reply to message #499894] Wed, 16 March 2011 10:58 Go to previous messageGo to next message
Littlefoot
Messages: 21670
Registered: June 2005
Location: Croatia, Europe
Senior Member
Account Moderator
No idea; I never even heard of OScanner before. Google returned this page which says:
Quote:

To do: documentation!

Bad luck, eh?

Though, this page mentions "OScanner installation". Does it look like anything you have on your computer?
Re: OScanner [message #499899 is a reply to message #499898] Wed, 16 March 2011 11:05 Go to previous messageGo to next message
Shabz
Messages: 4
Registered: March 2011
Location: London
Junior Member
Thanks for the prompt responses.

I have installed the current version of JRE and I am using Windows. I have then unzipped the OScanner folder. But after this I am not getting anywhere. In the first instance I did find the link that was sent through, but this did not help. A couple of follow on questions:

1. How do I make sure the environment is using the correct java?
2. How do I call the OScanner from the unzipped directory?

In anticipation of your reponse.
Re: OScanner [message #499906 is a reply to message #499899] Wed, 16 March 2011 11:59 Go to previous messageGo to next message
Mahesh Rajendran
Messages: 10694
Registered: March 2002
Location: oracleDocoVille
Senior Member
Account Moderator
1) set your environment variables.
2) oscanner -s servername or ip.

It is all in the links provided.
Re: OScanner [message #499910 is a reply to message #499906] Wed, 16 March 2011 12:25 Go to previous messageGo to next message
Shabz
Messages: 4
Registered: March 2011
Location: London
Junior Member
In the attached file it states the following:

JAVA=/usr/java/j2re1.4.2_08/bin/java
chmod 744 oscanner.sh
chmod 744 reportviewer.sh

Where am I supposed to input this? Also what do I need to change from it/how?

The following command:

C:\Oracle\oscanner_bin>oscanner

For this, I have created this folder and stored the appropriate files within it.

When I go to cmd.exe and input the oscanner command, I am presented with the appropriate fields shown in the attachment. Now seeing if the report worked as well.

Thanks,
Re: OScanner [message #499916 is a reply to message #499910] Wed, 16 March 2011 12:42 Go to previous messageGo to next message
Mahesh Rajendran
Messages: 10694
Registered: March 2002
Location: oracleDocoVille
Senior Member
Account Moderator
chmod is meant for unix/linux.

Go ahead and check for other stuff.
If it complains anything about java, set JAVA to JRE_HOME you are using ( your environment variable in windows. use set command or goto mycomputer/environment variables? NOt sure. I am not a windows user).
Re: OScanner [message #499918 is a reply to message #499910] Wed, 16 March 2011 12:43 Go to previous messageGo to next message
BlackSwan
Messages: 26763
Registered: January 2009
Location: SoCal
Senior Member
do as below so we can know complete Oracle version & OS name.

Post via COPY & PASTE complete results of
SELECT * from v$version;
Re: OScanner [message #520625 is a reply to message #499916] Tue, 23 August 2011 13:59 Go to previous message
Shabz
Messages: 4
Registered: March 2011
Location: London
Junior Member
Hi again,

I have attempted to following the instructions from the link below:

vulnerabilityassessment.co.uk/oscanner.htm

However, when I run the command:

C:\Oracle\oscanner_bin>oscanner -s 172.x.x.x

I get the message below:

Oracle Scanner 1.0.6 by ....
-------------------------------------------
[-] Checking host 172.x.x.x
[x] Failed to enumerate sids from host
[-] Loading services/sids from service file
Plugin ork.plugins.CheckOracleVersion failed
Plugin ork.plugins.GetPrivilegesForAccounts failed
Plugin ork.plugins.GetRoles failed
Plugin ork.plugins.GetPasswordPolicy failed
Plugin ork.plugins.GetPasswordPolicyForAccounts failed
Plugin ork.plugins.GetAccountHashes failed
Plugin ork.plugins.GetPrivilegesForRoles failed
Plugin ork.plugins.GetAuditInfo failed

Some background ...

I am attempting to run this tool from a Windows client accessing a server hosting an Oracle product. I have the host name and IP address which I believe is the same as the servername?

In all honesty, I did not know how to make sure the environment is using the correct Java (as relayed in the previous thread, so this is also probably another problem).

Any help/input would be much appreciated.
Previous Topic: Diff b/w standby database and clone database
Next Topic: which version of 32 bit oracle client should I install (2 threads merged by bb)
Goto Forum:
  


Current Time: Fri May 07 04:17:18 CDT 2021