Oracle environment construction for SQL injection

Oracle environment construction for SQL injection

foreword

Oracle Database, also known as Oracle RDBMS , or Oracle for short. It is a relational database management system developed by Oracle Corporation . It is a product that has always been in a leading position in the database field. It can be said that the Oracle database system is a popular relational database management system in the world. The system has good portability , convenient use, and strong functions, and is suitable for various large, medium, and small computer environments. It is a high-efficiency, reliable, and high- throughput database solution.

Features:

1) Complete data management function
2) Large amount of data 3) Persistence
of data storage 4) Data sharing 5) Data reliability

1. Download the Oracle Database 11*g *Release 2 installation package

Install and configure desktop Oracle Database 11g Release 2 in Windows environment (Win10)

PS1: The installation package is divided into two compressed packages, which need to be downloaded before installation

32位&64位百度云分享链接及提取码：
链接: [https://pan.baidu.com/s/1mh7s1nU ](https://link.jianshu.com/?t=https://pan.baidu.com/s/1mh7s1nU%C2%A0)
密码: 8neh

2. Unzip the downloaded two compressed packages to the same path of the database (that is, merge them)

3. Click on the database folder in the above picture, double-click to run setup.exe to start the installation

4. It will take some time to load the installation program. After the loading is complete, the installation interface will appear. I installed it in the Windows 10 environment of the virtual machine, and a dialog box "The environment does not meet the minimum requirements" will pop up. If this window appears, click "Yes" to proceed with the follow-up operations

5. First, configure the security update. If you do not need to receive email notifications from Oracle in the "Email" field, leave it blank (if you do not fill it in, a "unspecified email address" window will pop up. If you do not need to receive notifications, click "Yes" to proceed to the next step). If you do not need to receive its updates in the "Security Update" field, uncheck it. I unchecked it when installing

6. Then enter the "Installation Options" interface, select "Create and Configure Database" (after the installation is complete, you will automatically enter the database configuration interface), and then click "Next" for subsequent operations

7. Next, enter the selection of "system type", here select "desktop type", and then click "next" for subsequent operations

8. Next, enter the configuration of "Typical Installation". After the configuration is complete, click "Next" to proceed with the follow-up operation. The following is the description of the content of the "Typical Configuration" interface

1. "Oracle directory base directory": the base directory of all Oracle products. If it is modified here, the following directory will be automatically changed accordingly. It is not recommended to use Chinese (metaphysics) for the directory name
2. "Software location": the installation directory of the currently installed software (that is, Oracle Database11g), the installation directory cannot contain space characters, and it is also not recommended to use Chinese (metaphysics)
3. "Data file location": the location where the database content is stored, it is also not recommended to use Chinese (or metaphysics)
4. About the database version: the Enterprise Edition includes the full functionality of Oracle Database, and for detailed instructions on other versions, please refer to the help documentation of Oracle Database
5. Regarding the choice of character set: UTF-8 is recommended (better versatility)
6. "Global database name": the name of the startup database (no more than 8 characters)
7. "Admin password": the password to start the database, here we fill in Oracle

Note: The official Oracle document recommends a password of (just a suggestion, if it is for learning, it can be set simpler, but it must meet the minimum requirements, for example, I set it to "Oracle")

8. "Confirm Password": Enter the administrative password again in this field

9. Next, the prerequisite check will be carried out. If the check is passed, it will automatically enter the "Summary" interface. If there is an error message during the check, please find a solution by yourself or directly select "Ignore".

10. Then enter the "Summary" interface, which displays the summary information of the options selected during the installation process. If you confirm that there is no problem, click "Finish" to officially execute the installation

11. It will take some time to install, you just need to wait patiently

If you are prompted to download and install the Winodws function plug-in, click Download to install it.

12. Afterwards, the database configuration window (Database Configuration Assistant) will pop up. Do not click "OK" or close the window directly, but click "Password Management", because the "Password Management" window is required for subsequent configuration (user unlocking and password modification)

13. After entering the management window, you need to modify the four users sys, system, scott, sh (user unlock and password modification)

The following table shows the main users and their functions in the Oracle database

Unlocking of the user: If it is locked, it needs to be unlocked (remove √ to complete the unlocking)

Password modification: enter a new password in the "New Password" field, and enter the new password again in the "Confirm Password" field (the password cannot be empty, cannot exceed 30 characters, and cannot be a user name)

Then click "OK" to complete the unlocking of the user and the modification of the password (if the password does not meet the four "at least" recommended by Oracle, a warning box will still pop up, if it appears, click "Yes" to continue the follow-up operation)

14. After that, it will return to the Database Configuration Assistant window, click "OK" to enter the "Complete" interface

15. Next, click "Close" to complete the installation

16. Start the service (optional, according to the situation)

After the installation is complete, several Oracle services will appear in the computer system. You can enter the computer management interface and click "Services and Applications" and "Services" in order to view/manage Oracle services (for details on how to enter the computer management interface, please check the method yourself). These services can be set to start manually (the setting method is: right-click the service that needs to be modified → click "Properties" → set "Startup Type" to "Manual Start" → click "OK") to prevent it from affecting the computer's running/starting speed, and then start these services when you need to use Oracle Database service

17. Test the connection with Oracle Database

Next we run SQL Plus, run the Oracle database

Next we will enter the login interface

Then we enter the username and password just now

Username: sys/as sysdba
Password: Oracle

Enter the following command to query the current user

select user from dual；