Downloaded and installed the tool.
Not terribly sophistcated.
If the word is not in the dictionary, it won't find it.
For instance, a password of 'SHOE' will be discovered,
but changing the O to a zero so that it reads 'SH0E', and
the password cracker will not find it.
If this were to be used as a serious security tool, you would
be better off studying some of the well known password crackers
and duplicating the algorithms in PL/SQL.
Jared
"Mark Leith" <[EMAIL PROTECTED]>
Sent by: [EMAIL PROTECTED]
12/18/2002 01:28 AM
Please respond to ORACLE-L
To: Multiple recipients of list ORACLE-L <[EMAIL PROTECTED]>
cc:
Subject: RE: password
And that is what it *should* be used for :)
-----Original Message-----
[EMAIL PROTECTED]
Sent: 17 December 2002 19:35
To: Multiple recipients of list ORACLE-L
Yes, it's a dictionary based cracker.
Could be useful for checking for weak passwords.
For $4, I'm going to see what it does. :)
Jared
John Kanagaraj <[EMAIL PROTECTED]>
Sent by: [EMAIL PROTECTED]
12/17/2002 10:08 AM
Please respond to ORACLE-L
To: Multiple recipients of list ORACLE-L
<[EMAIL PROTECTED]>
cc:
Subject: RE: password
Jared,
This seems to be a 'brute force' dictionary based attack, as I believe the
Oracle password is a one-way trapdoor (just as UNIX). I don't think this
will be able to crack a strong password created from say a combination of
the first characters of an arbitrary sentence.
John Kanagaraj
Oracle Applications DBA
DBSoft Inc
(W): 408-970-7002
So WHO is the Reason for the Season?! Write me for details!
** The opinions and statements above are entirely my own and not those of
my
employer or clients **
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, December 17, 2002 9:09 AM
> To: Multiple recipients of list ORACLE-L
> Subject: RE: password
>
>
> Hmm...
>
> Well maybe you *can* crack oracle passwords.
>
> I've just ordered the full version of this product. ( $4, I don't
> think I need to bother the purchasing department ).
>
> I'll let you know how it works.
>
> Jared
>
--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: John Kanagaraj
INET: [EMAIL PROTECTED]
Fat City Network Services -- 858-538-5051 http://www.fatcity.com
San Diego, California -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author:
INET: [EMAIL PROTECTED]
Fat City Network Services -- 858-538-5051 http://www.fatcity.com
San Diego, California -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Mark Leith
INET: [EMAIL PROTECTED]
Fat City Network Services -- 858-538-5051 http://www.fatcity.com
San Diego, California -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author:
INET: [EMAIL PROTECTED]
Fat City Network Services -- 858-538-5051 http://www.fatcity.com
San Diego, California -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
