quentinhardy/odat

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1776 stars · 349 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

ODAT (Oracle Database Attacking Tool) is an open-source Python penetration testing tool for assessing the security of remote Oracle Databases. It can discover valid SIDs and credentials, escalate privileges to DBA/SYSDBA, and execute system commands on the host.

Use cases

• find valid Oracle database SIDs and credentials remotely
• escalate Oracle account privileges to DBA or SYSDBA
• execute system commands on the database host via Oracle account
• test security of remote Oracle databases
• brute-force Oracle database credentials
• check if TNS listener is properly configured
• enumerate Oracle databases from nmap scan output

When to choose

• you are pentesting an Oracle Database 10g through 19c remotely
• you need SID/service name discovery and credential brute-forcing for Oracle
• you have valid Oracle credentials and want privilege escalation or OS command execution

When to avoid

• you need to attack non-Oracle databases like MySQL or PostgreSQL
• you want a GUI-based vulnerability scanner rather than a command-line tool
• you need defensive database hardening rather than offensive testing

Facets

cli-tool · maturity active

penetration-testing security database vulnerability-scanning security penetration-testing databases python cli oracle-database pentest privilege-escalation sid-guessing tns-listener dba-exploitation linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="quentinhardy/odat")