Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access
- ID
- 11473
- Status
- summarized
- Published
- 06 Aug 2026, 5:19 PM
- Fetched
- 06 Aug 2026, 6:35 PM
- Provider
- The Hacker News
- Category
- security
- Original URL
- https://thehackernews.com/2026/08/attackers-compile-khunt-inside-oracle.html
- Source URL
- https://feeds.feedburner.com/TheHackersNews
Excerpt
Attackers broke into an organization's Oracle database through a SQL injection flaw in a public-facing web application, then installed a post-exploitation toolkit without writing an executable to disk. They fed Java source code to the database, let Oracle compile it into stored schema objects, and ran commands from inside the database engine. Huntress, which tracks the toolkit as khunt,
Summary
No summary yet. It will appear after the daemon summarizes this item.