{
  "port": 5560,
  "protocol": "tcp",
  "service": "Oracle iSQL*Plus (unassigned at IANA)",
  "oneLiner": "An Oracle 10g database with the browser-based iSQL*Plus console still running.",
  "whatItIs": "IANA lists 5558-5564 as unassigned. The use that put 5560 on port lists is Oracle iSQL*Plus, the browser front-end to SQL*Plus, which Oracle 10g served from an OC4J instance at http://host:5560/isqlplus/; the actual port for an installation is recorded in $ORACLE_HOME/install/portlist.ini. Oracle dropped iSQL*Plus after 10g, so a live 5560 means an old database server. Legacy RSA ACE/Server services files also placed sdlockmgr, its lock manager, on this port.",
  "exposure": {
    "verdict": "never",
    "note": "iSQL*Plus is a web login straight into a database over plain HTTP — exposing it publishes both the credentials and the SQL console."
  },
  "checkCommand": "curl -sS -o /dev/null -w '%{http_code}\\n' http://TARGET:5560/isqlplus/",
  "links": [
    {
      "title": "Oracle Database 10g — Starting SQL*Plus and iSQL*Plus (port 5560)",
      "url": "https://docs.oracle.com/cd/B19306_01/server.102/b14357/ch3.htm",
      "kind": "official-docs"
    },
    {
      "title": "IANA port registry — 5560 (unassigned)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=5560",
      "kind": "iana"
    }
  ]
}