Tools no image

Published on March 25th, 2014 | by NJ Ouchn


[New Tool] DataWalker for Oracle v1.0 in the wild

DataWalker for Oracle is a data unloader and block examiner tool. It can be used by DBAs to recover data or by forensic examiners to look for evidence after a breach.

Figure 1 – the DataWalker interface

This document describes how to recover data from a given table.

Recovering data using DataWalker

For the purposes of this exercise, we’ll dump a list of object IDs and object names from the SYS.OBJ$ table from the data file that contains the SYSTEM tablespace. To start, click on the “Folder” icon on the toolbar and select the data file. Once selected you’ll be presented with a “Load Options” window:

If you don’t want to examine any data blocks simply select, “No load, just open”. This is the quickest option. Then choose “Data” from the menu and select “Export”. You’ll be presented with the “Export Data” form. This form requires three pieces of information: an export template, an output file and the object ID of the table you wish to dump the data from.

Tool submitted by the respected David Litchfield.


Tags: , , , , ,

About the Author

Principal Founder & Maintainer - Freelancer ICS/SCADA Security Expert As part of my research, I'm focusing into maintaining many projects as the DPE (Default Password Enumeration), vFeed® the open source correlated & cross-linked vulnerability database and FireCAT the Firefox Catalog of Auditing exTensions. Today, I'm the co-organizer of the major event Blackhat Arsenal Tools (US and Europe) since 2011 and since 2014 co-organizer of Rooted Warfare in Spain. I'm going by the handle of @toolswatch on Twitter and always willing to help, share and drink with friends from far and wide.

Leave a Reply

Your email address will not be published. Required fields are marked *

Back to Top ↑