How does one change Oracle's SYS password without having to login into the database? Is it possible?
The answer is, YES! All you need is a binary fiile editor and some knowledge of Oracle's internals.

This document is to be used only for testing purposes and should not be used in a production environment. The purpose is to show the audience how hackers can gain access to your system without knowing it - and how to prevent it.