The Web Local
 

 

 

Registering an Oracle Server with a TNS Listener

 

When a database is brought up it registers with the TNS listener with its associated service name that users will need to connect to the instance.  It does this with the hidden TNS Listener command; SERVICE_REGISTER_NSGR.  This tool has been designed to register another version to the listener and it may be possible to overwrite services. NGS Software are currently researching ways to use this to leverage this extended facility.  I became aware of this tool after attending the Blackhat Breaking into Oracle Server class given by David Litchfield of NGS Software.

 

At the time of writing this tool has not been publicly released and is only available to attendees at NGS training courses.

Execution:

 

Service-register.exe 192.168.0.18

 

IT Security News:

 

Pen Testing Framework:

 

Latest Tool Reviews: