Attacking Oracle Web Applications with Metasploit
A great paper from Chris Gates (carnalOwnage) enumerating techniques, vulnerabilities and metasploit modules to scan, identify and own a vulnerable Oracle based system.
It is worth reading !!!
Get it from this location (exploit-db)
