quentinhardy / odat

ODAT: Oracle Database Attacking Tool
1.6k stars 345 forks source link

passwordguesser --output-file doesn't output to a file #31

Closed Knowledge-Wisdom-Understanding closed 5 years ago

Knowledge-Wisdom-Understanding commented 5 years ago

As you can see from this log, the specified output file doesn't get created.

➜  BUG ls -la
total 12
drwxr-xr-x 2 root root 4096 Aug  1 21:47 .
drwxr-xr-x 5 root root 4096 Aug  1 21:34 ..
-rw-r--r-- 1 root root   28 Aug  1 21:35 blah.txt
➜  BUG python /opt/odat/odat.py passwordguesser -s 10.10.10.82 -p 1521 -d XE --accounts-file ../blah.txt --output-file output.txt --force-retry

[1] (10.10.10.82:1521): Searching valid accounts on the 10.10.10.82 server, port 1521
[+] Valid credentials found: scott/tiger. Continue...
100% |######################################################################################################################################| Time: 00:00:00
[+] Accounts found on 10.10.10.82:1521/XE:
scott/tiger

➜  BUG ls -la
total 16
drwxr-xr-x 2 root root 4096 Aug  1 21:48 .
drwxr-xr-x 5 root root 4096 Aug  1 21:34 ..
-rw-r--r-- 1 root root   10 Aug  1 21:48 10.10.10.82-1521-XE.odat.save
-rw-r--r-- 1 root root   28 Aug  1 21:35 blah.txt

The 10.10.10.82-1521-XE.odat.save file is created regardless of the --output-file flag and just contains the names from the blah.txt wordlist. Not sure how to solve this as i haven't taken the time to analyze the source code yet.