Excellent presentation by Chris Gates (carnal0wnage) on Attacking Oracle Web Applications With Metasploit [PDF]