Skip to content
Threat Feed
Subscribe

Tag

Khunt

1 brief RSS
high advisory

Oracle Database SQL Injection Leads to OS-Level RCE and khunt Toolkit Deployment

A threat actor exploited SQL injection in a public-facing application to achieve OS-level remote code execution by abusing Oracle Java Source to deploy the custom 'khunt' post-exploitation toolkit.

Oracle Database sqli remote-code-execution khunt oracle credential-theft
3t 1i