Oracle

Attackers exploited a web SQL injection to compile and execute the khunt tool inside an Oracle database environment, achieving Windows SYSTEM-level access. They then staged credential data and registry hives locally for exfiltration. This demonstrates a chained attack leveraging database access to compromise the underlying endpoint.