RE: Reverse engineer passwords

From: William Beilstein <BeilstWH_at_obg.com>
Date: Fri, 14 Jul 2000 14:47:28 -0400
Message-Id: <10558.112110@fatcity.com>

The passwords are encrypted with a non reversible algorithm. The way you = check a password, is to encrypt the entered password and compare it = against the stored encrypted password.

>>> Linda Hagedorn <Linda_at_pets.com> 07/14/00 01:16PM >>> Hi Vincent,=20
=20

I have the encrypted password, and I want to reverse engineer it to the Ebcdic. Do you have the math or routine?
=20

Thanks,=20
=20

Linda=20

-----Original Message-----
Sent: Friday, July 14, 2000 5:45 AM
To: Multiple recipients of list ORACLE-L

hi,
=20

look into dba_users, there y'll find the encrypted password.
=20
=20

Vincent
=20

-----Oorspronkelijk bericht-----
Van: root_at_fatcity.com [mailto:root_at_fatcity.com]Namens Siva_Chintalapati Verzonden: vrijdag 14 juli 2000 14:09
Aan: Multiple recipients of list ORACLE-L Onderwerp: RE: Reverse engineer passwords

Where does this passwords store.What is that file.Will it be in encrypted form??=20
Siva=20

	----------=20
Reply To:       ORACLE-L_at_fatcity.com=20
Sent:   Friday, July 14, 2000 4:35 PM=20
To:     Multiple recipients of list ORACLE-L=20

	Hi,=20

	You can store the encrypted password in a table, change your

password as you like, test your application, if it fails then you know = where
to look because probably the password will be somewhere in the application or you can put the encrypted pasword back in de original table.

        good luck=20

        Vicnent Ruger=20
(Oracle DBA)=20

        -----Oorspronkelijk bericht-----=20
Van: root_at_fatcity.com [ mailto:root_at_fatcity.com <mailto:root_at_fatcity.com> ]Namens Eric Lansu=20
Verzonden: vrijdag 14 juli 2000 12:15=20 Aan: Multiple recipients of list ORACLE-L=20 Onderwerp: Re: Reverse engineer passwords=20

        I hope it's not possible to do this reverse engeneering for it = would
mean a=20
serious security-problem.=20

        Eric Lansu=20

• Original Message -----=20 To: "Multiple recipients of list ORACLE-L" <ORACLE-L_at_fatcity.com>=20 Sent: Thursday, 13 July 2000 22:17=20

        > Some passwords are lost, others are in clear text, others are operational=20
> (somewhere in production), but not known due to turnover. Rather = than=20
> possibly break running systems by changing passwords, we (dba staff) = would

> like to reverse engineer the passwords in dba_users.=20
>=20
> Has anyone done this, and if so, will you send the key to me?  =

Referrals=20
to=20

> documentation are appreciated.=20
>=20
> Thank you.=20
>=20
> Linda Hagedorn=20
>=20
> --=20
> Author: Linda Hagedorn=20
>   INET: Linda_at_pets.com=20
>=20
> Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051=20
> San Diego, California        -- Public Internet access / Mailing =

Lists=20

> --------------------------------------------------------------------=20
> To REMOVE yourself from this mailing list, send an E-Mail message=20
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in=20
> the message BODY, include a line containing: UNSUB ORACLE-L=20

> (or the name of mailing list you want to be removed from). You may=20 > also send the HELP command for other information (like subscribing).=20

        --=20
Author: Eric Lansu=20
  INET: eric.lansu_at_quicknet.nl=20

        Fat City Network Services -- (858) 538-5051 FAX: (858) = 538-5051=20
San Diego, California -- Public Internet access / Mailing Lists=20

--------------------------------------------------------------------=20

To REMOVE yourself from this mailing list, send an E-Mail message=20 to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in=20 the message BODY, include a line containing: UNSUB ORACLE-L=20 (or the name of mailing list you want to be removed from). You may=20 also send the HELP command for other information (like subscribing).=20

--=20
Author: Linda Hagedorn
  INET: Linda_at_pets.com=20

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may Received on Fri Jul 14 2000 - 13:47:28 CDT