Chris Gates has published a video where he shows how to attack Oracle with Metasploit from the Shmoocon 09 conference.
Even if the attacks were shown on an outdated version of Oracle (10.1.0.3) it’s good to see that the Oracle support in Metasploit is getting better…
Chris has an interesting blog called carnal0wnage.blogspot.com.