ORSEM - ORacle Security Enumeration Module

ORSEM is an Oracle database security vulnerability scanner.

ORSEM is a Django (Python) framework (web based) project that utilises authenticated scanning methods.

Authenticated scanning permits:

The result is that ORSEM is really an Oracle security scanner for perfectionists.

Currently ORSEM supports Oracle Database 10g and 11g, and has 30 tests configured. This number is growing and will most likely level at around 45 tests. This covers all matters that are of interest to auditors (compliance).

ORSEM was born in late 2012 and continues to grow. Thus far (as of April 2013) I have successfully used the tool onsite at two major banks in Indonesia.

As with any project of this nature I stand on the shoulders of giants: