Returns a list of all tables (System and User)
select * from all_tables;

Returns a list of all db_links (System and User)
select * from all_db_links;

Returns a list of all views (System and User)
select * from all_views;

Returns a list of all table columns (System and User)
select * from all_tab_columns;

List current sessions and do some stuff
SELECT * FROM v$session s;
SELECT s.sid,s.serial#,s.osuser,s.username FROM v$session s;
ALTER SYSTEM KILL SESSION ’sid,serial#’;

Converts a number or date to a string
select to_char(INSERT_DT,’YYYY-MM-DD’) the_date
from CREDIT_REPORT where
CREDIT_REPORT_ID = 8000076;

Converts a string to a date
select to_date(’2007-01-30′,’YYYY-MM-DD’) the_date
from CREDIT_REPORT where
CREDIT_REPORT_ID = 8000076;

Substitutes a value when a null value is encountered
select NVL(supplier_city, ‘n/a’) from supplier;

The functionality of an IF-THEN-ELSE statement
SELECT supplier_name, decode(supplier_id, 10000, ‘IBM’, 10001, ‘Microsoft’, 10002, ‘Hewlett Packard’, ‘Gateway’) result
FROM suppliers;

Testing for an empty BLOB
select credit_report_id, BLOB_COLUMN
from CREDIT_REPORT
where
BLOB_COLUMN is not null and dbms_lob.getLength(BLOB_COLUMN) > 0;

Converting BLOB to VARCHAR
select
utl_raw.cast_to_varchar2(dbms_lob.substr(BLOB_COLUMN, dbms_lob.getLength(BLOB_COLUMN), 1)) BLOB_AS_VARCHAR
from
CREDIT_REPORT
where
CREDIT_REPORT_ID = 8000056;

• Oracle Forensics

Cert issued a
Vulnerability Note VU#476267
for a "Cross-Protocol" scripting attack, known as the HTML
Form Protocol Attack which allowed sending arbitrary data to most TCP ports.
A simple exploit of this hole allows an attacker to send forged unsigned mail through
a mail server behind your firewall: A really nasty hole.

I found the list of ports blocked by Mozilla here: http://www.mozilla.org/projects/netlib/PortBanning.html

• A browser as web hacking platform
• How to create Firefox extensions
• Useful Firefox Security Extensions

Another enterprise level service from Amazon.

Links:

• Amazon SimpleDB™- Limited Beta
• What You Need To Know About Amazon SimpleDB
• Amazon Takes on Oracle and IBM With SimpleDB
• Amazon Launches SimpleDB: Your Database in the Cloud
• Amazon SimpleDB 101 & Why It Matters

Random Posts

• Lol: Ho visto cose
• Fineco: una bizzarra password policy
• Cinema: L’ultima missione
• Lol: Deformazione professionale
• Building a Wardriving Bot

Maltego is a program that can be used to determine the relationships and real world links between:
People, Groups of people (social networks), Companies, Organizations, Web sites
Internet infrastructure such as:
Domains, DNS names, Netblocks, IP addresses
AND Phrases, Affiliations, Documents and files

http://www.paterva.com/web2/maltego/maltego-2.html

• Spionaggio basato sul Viagra
• Come spiare un cellulare per intercettare chiamate e SMS
• Cinema: Agente Smart – Casino Totale
• Cinema: The good sheperd
• Attivita` del CESIS a tutela delle informazioni

What they haven’t done is launch yet another social network
platform. As more and more of these platforms launch, developers have
difficult choices to make. There are costs associated with writing and
maintaining applications for these social networks. Most developers
will choose one or two platforms and ignore the rest, based on a simple
cost/benefit analysis.

Google wants to create an easy way for developers to create an
application that works on all social networks. And if they pull it off,
they’ll be in the center, controlling the network.

The question is: this interesting news must be flaggeg "A new Web2.0 cutting edge
service from Google" or "The big brother Google become more powerful
and acquire new weapons to attack our privary."

• Hanno rotto Google, perchè? Una spiegazione tecnica.
• Inside Google
• GoogleBot compilera` le form
• Google suggest

• Sviluppo Ruby on Rails orientato SEO
• A browser as web hacking platform
• How to create Firefox extensions
• SEO for Wordpress
• A list of SEO plugins for Wordpress

• Turn documents, notes and whiteboards into digital copies (PDFs)
• Email or fax qipit digital copies via email, your online Qipit account, or right from your phone
• Store all of your paper documents and notes as digital documents for easy archiving and sharing
• Tag your qipit documents for easy searching and sorting
• Publish and share your documents on the web

If you want to test this service: Qipit

Random Posts

• A browser as web hacking platform
• Penetration Testing Tools
• Lol: Be a Sysadmin
• Cinema: Cruel Intentions
• All’install party

• SEO for Wordpress
• Sviluppo Ruby on Rails orientato SEO
• Come scrivere un plugin per Wordpress
• Must Have SEO Firefox Extensions

Random Posts

• Cinema: La Pantera Rosa
• Lol: Uso corretto dei post-it
• Lol: PHP
• Semifinale Italia-Germania
• Carta Regionale dei Servizi del FVG: egemonia Windows

1. There was e big Skype outage
2. A Sype DoS exploit is published
3. Skype released a new upstream version

Skype said that the outage is not caused by a DoS attack, but like a big company do, said that was a software issue.
I think that the exploit published is a fake, because for me don’t work, and other have documented this here.
Another glance through Desclaux and Kortchinsky suggests, in addition to traffic from clients to login servers, Skype
generates a lot of traffic between the login servers and supernodes (see slide 16 for example). This makes the login servers a doubly critical piece of Skype infrastructure. Of course, if they merely introduced a bug in their login servers, it shouldn’t take 12-24 hours to do a roll back.
So this outage can be caused by a Sype network or Skype server issue.
Another good point is that this week a Snort Skype preprocessor was published.
But no one out of Skype known the truth.

• Come Skype oltrepassa i firewall
• skype