sqlmap/xml/banner/oracle.xml

<?xml version="1.0" encoding="UTF-8"?>

<root>
    <!-- Generic -->
    <regexp value="^Oracle\s+.*Release\s+([\d\.]+)\s+">
        <info version="1"/>
    </regexp>
</root>
Minor enhancement to fingerprint the back-end DBMS operating system (type, version, release, distribution, codename and service pack) by parsing the DBMS banner value when both -f and -b are provided: adapted the code and added XML files defining regular expressions for matching. Example of the -f -b output now on MySQL 5.0.67 running on latest Ubuntu: --8<-- back-end DBMS: active fingerprint: MySQL >= 5.0.38 and < 5.1.2 comment injection fingerprint: MySQL 5.0.67 banner parsing fingerprint: MySQL 5.0.67 html error message fingerprint: MySQL back-end DBMS operating system: Linux Ubuntu 8.10 (Intrepid) --8<-- 2008-11-16 02:41:31 +03:00			`<?xml version="1.0" encoding="UTF-8"?>`

			`<root>`
			`<!-- Generic -->`
			`<regexp value="^Oracle\s+.*Release\s+([\d\.]+)\s+">`
			`<info version="1"/>`
			`</regexp>`
			`</root>`