khunt toolkit lets attackers turn Oracle SQLi into Windows SYSTEM RCE
Researchers observed a public‑facing Java app’s SQL injection being used to feed Oracle’s CREATE JAVA SOURCE command, compiling a hidden khunt toolkit inside the database. The compiled code ran with Windows SYSTEM privileges, achieving persistence without dropping a file on disk.