RE: Reverse engineer passwords

From: Vincent Ruger <Vincent.Ruger_at_nos.nl>
Date: Fri, 14 Jul 2000 13:38:02 +0200
Message-Id: <10558.112047@fatcity.com>

This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible.

------_=_NextPart_001_01BFED87.FD2D8550
Content-Type: text/plain;

charset="iso-8859-1"

hi,

look into dba_users, there y'll find the encrypted password.

Vincent

-----Oorspronkelijk bericht-----
Van: root_at_fatcity.com [mailto:root_at_fatcity.com]Namens Siva_Chintalapati Verzonden: vrijdag 14 juli 2000 14:09
Aan: Multiple recipients of list ORACLE-L Onderwerp: RE: Reverse engineer passwords

Where does this passwords store.What is that file.Will it be in encrypted form??
Siva

From: Vincent Ruger[SMTP:Vincent.Ruger_at_nos.nl] Reply To: ORACLE-L_at_fatcity.com
Sent: Friday, July 14, 2000 4:35 PM

To:     Multiple recipients of list ORACLE-L 
Subject:        RE: Reverse engineer passwords 

	Hi, 

	You can store the encrypted password in a table, change your

password as you like, test your application, if it fails then you know where to look because probably the password will be somewhere in the application or you can put the encrypted pasword back in de original table.

good luck

Vicnent Ruger
(Oracle DBA)

-----Oorspronkelijk bericht-----
Van: root_at_fatcity.com [ mailto:root_at_fatcity.com <mailto:root_at_fatcity.com> ]Namens Eric Lansu
Verzonden: vrijdag 14 juli 2000 12:15
Aan: Multiple recipients of list ORACLE-L Onderwerp: Re: Reverse engineer passwords

I hope it's not possible to do this reverse engeneering for it would mean a
serious security-problem.

Eric Lansu

Original Message ----- To: "Multiple recipients of list ORACLE-L" <ORACLE-L_at_fatcity.com> Sent: Thursday, 13 July 2000 22:17

> Some passwords are lost, others are in clear text, others are
operational
> (somewhere in production), but not known due to turnover. Rather than > possibly break running systems by changing passwords, we (dba staff) would

> like to reverse engineer the passwords in dba_users. 
> 
> Has anyone done this, and if so, will you send the key to me?  Referrals

> documentation are appreciated. 
> 
> Thank you. 
> 
> Linda Hagedorn 
> 
> -- 
> Author: Linda Hagedorn 
>   INET: Linda_at_pets.com 
> 
> Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051 
> San Diego, California        -- Public Internet access / Mailing Lists 
> -------------------------------------------------------------------- 
> To REMOVE yourself from this mailing list, send an E-Mail message 
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in 
> the message BODY, include a line containing: UNSUB ORACLE-L 
> (or the name of mailing list you want to be removed from).  You may 
> also send the HELP command for other information (like subscribing). 

	--

Author: Eric Lansu
INET: eric.lansu_at_quicknet.nl

	Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051 
San Diego, California        -- Public Internet access / Mailing Lists 
--------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).

------_=_NextPart_001_01BFED87.FD2D8550
Content-Type: text/html;

charset="iso-8859-1"

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>RE: Reverse engineer passwords</TITLE>

<META content="MSHTML 5.00.2314.1000" name=GENERATOR></HEAD>

<BODY>
<DIV>hi,</DIV> <DIV> </DIV> <DIV>look into dba_users, there y'll find the encrypted password.</DIV> <DIV> </DIV> <DIV> </DIV> <DIV>Vincent</DIV> <DIV> </DIV> <BLOCKQUOTE>
 <DIV align=left class=OutlookMessageHeader dir=ltr>-----Oorspronkelijk bericht----- Van: root_at_fatcity.com [mailto:root_at_fatcity.com]Namens Siva_Chintalapati Verzonden: vrijdag 14 juli 2000 14:09 Aan: Multiple recipients of list ORACLE-L Onderwerp: RE: Reverse engineer passwords </DIV>
 Where does this passwords store.What is that file.Will it be in encrypted form?? Siva 
 <UL>
 ---------- From:   Vincent Ruger[SMTP:Vincent.Ruger_at_nos.nl] Reply To:       ORACLE-L_at_fatcity.com Sent:   Friday, July 14, 2000 4:35 PM <FONT face="MS Sans Serif"

    size=1>To:</FONT></B> &nbsp;&nbsp;&nbsp; <FONT face="MS Sans Serif" 
    size=1>Multiple recipients of list ORACLE-L</FONT> <BR><B><FONT 
    face="MS Sans Serif" size=1>Subject:</FONT></B>

RE: Reverse engineer passwords Hi, You can store the encrypted password in a table, change your password as you like, test your application, if it fails then you know where to look because probably the password will be somewhere in the application or you can put the encrypted pasword back in de original table.

    <P><FONT face=Arial size=2>good luck</FONT><FONT face=Arial> </FONT></P>
    <P><FONT face=Arial size=2>Vicnent Ruger</FONT><FONT face=Arial> 
    </FONT><BR><FONT face=Arial size=2>(Oracle DBA)</FONT><FONT face=Arial> 
    </FONT></P>
    <P><FONT face=Arial size=2>-----Oorspronkelijk bericht-----</FONT><FONT

face=Arial> Van: root_at_fatcity.com [ <A href="mailto:root_at_fatcity.com">mailto:root_at_fatcity.com</A>]Namens Eric Lansu Verzonden: vrijdag 14 juli 2000 12:15 Aan: Multiple recipients of list ORACLE-L Onderwerp: Re: Reverse engineer passwords I hope it's not possible to do this reverse engeneering for it would mean a serious security-problem.

    </FONT></P>
    <P><FONT face=Arial size=2>Eric Lansu</FONT><FONT face=Arial> </FONT></P>
    <P><FONT face=Arial size=2>----- Original Message -----</FONT><FONT

face=Arial> To: "Multiple recipients of list ORACLE-L" <ORACLE-L_at_fatcity.com> Sent: Thursday, 13 July 2000 22:17 > Some passwords are lost, others are in clear text, others are operational > (somewhere in production), but not known due to turnover.  Rather than > possibly break running systems by changing passwords, we (dba staff) would > like to reverse engineer the passwords in dba_users. > > Has anyone done this, and if so, will you send the key to me?  Referrals to > documentation are appreciated. > > Thank you. > > Linda Hagedorn > > -- > Author: Linda Hagedorn <FONT face=Arial

    size=2>&gt;&nbsp;&nbsp; INET: Linda_at_pets.com</FONT><FONT face=Arial> 
    </FONT><BR><FONT face=Arial size=2>&gt;</FONT><FONT face=Arial> 
    </FONT><BR><FONT face=Arial size=2>&gt; Fat City Network

Services    -- (858) 538-5051  FAX: (858) 538-5051 > San Diego, California        -- Public Internet access / Mailing Lists >

    --------------------------------------------------------------------</FONT><FONT

face=Arial> > To REMOVE yourself from this mailing list, send an E-Mail message > to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in > the message BODY, include a line containing: UNSUB ORACLE-L > (or the name of mailing list you want to be removed from).  You may > also send the HELP command for other information (like subscribing). 
-- Author: Eric Lansu   INET: eric.lansu_at_quicknet.nl Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051 San Diego, California        -- Public Internet access / Mailing Lists <FONT face=Arial

    size=2>--------------------------------------------------------------------</FONT><FONT

face=Arial> To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from).  You may also send the HELP command Received on Fri Jul 14 2000 - 06:38:02 CDT