KHunt Toolkit Turns Oracle SQL Injection Into SYSTEM-Level RCE and Credential Theft

**KHunt intrusion summary:** Attackers leveraged a SQL injection in a Java/Tomcat application to push Java source into Oracle via CREATE JAVA SOURCE, compiled a stealthy toolkit (khunt) inside the database, achieved SYSTEM-level command execution on the Windows host, and staged registry hive copies for credential theft; Huntress observed telemetry and published IOCs and mitigation guidance.