RE: password

Downloaded and installed the tool.

Not terribly sophistcated.

If the word is not in the dictionary, it won't find it.

For instance, a password of 'SHOE' will be discovered, but changing the O to a zero so that it reads 'SH0E', and the password cracker will not find it.

If this were to be used as a serious security tool, you would be better off studying some of the well known password crackers and duplicating the algorithms in PL/SQL.

Jared

"Mark Leith" <mark_at_cool-tools.co.uk>
Sent by: root_at_fatcity.com
 12/18/2002 01:28 AM
 Please respond to ORACLE-L  

        To:     Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com>
        cc: 
        Subject:        RE: password

And that is what it *should* be used for :)

-----Original Message-----
Jared.Still_at_radisys.com
Sent: 17 December 2002 19:35
To: Multiple recipients of list ORACLE-L

Yes, it's a dictionary based cracker.

Could be useful for checking for weak passwords.

For $4, I'm going to see what it does. :)

Jared

John Kanagaraj <john.kanagaraj_at_hds.com>
Sent by: root_at_fatcity.com
 12/17/2002 10:08 AM
 Please respond to ORACLE-L  

        To: Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com>

        cc: 
        Subject:        RE: password

Jared,

This seems to be a 'brute force' dictionary based attack, as I believe the Oracle password is a one-way trapdoor (just as UNIX). I don't think this will be able to crack a strong password created from say a combination of the first characters of an arbitrary sentence.

John Kanagaraj
Oracle Applications DBA
DBSoft Inc
(W): 408-970-7002

So WHO is the Reason for the Season?! Write me for details!

• The opinions and statements above are entirely my own and not those of my employer or clients **

> -----Original Message-----
> From: Jared.Still_at_radisys.com [mailto:Jared.Still_at_radisys.com]
> Sent: Tuesday, December 17, 2002 9:09 AM
> To: Multiple recipients of list ORACLE-L
> Subject: RE: password
>
>
> Hmm...
>
> Well maybe you *can* crack oracle passwords.
>
> I've just ordered the full version of this product. ( $4, I don't
> think I need to bother the purchasing department ).
>
> I'll let you know how it works.
>
> Jared
>

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: John Kanagaraj
  INET: john.kanagaraj_at_hds.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).




-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: 
  INET: Jared.Still_at_radisys.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Mark Leith
  INET: mark_at_cool-tools.co.uk

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).




-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: 
  INET: Jared.Still_at_radisys.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).