Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> RE: Reverse engineer passwords

RE: Reverse engineer passwords

From: Vincent Ruger <Vincent.Ruger_at_nos.nl>
Date: Fri, 14 Jul 2000 11:56:22 +0200
Message-Id: <10558.112036@fatcity.com>


This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible.

------_=_NextPart_001_01BFED79.C8D69016
Content-Type: text/plain;

        charset="iso-8859-1"

Hi,

You can store the encrypted password in a table, change your password as you like, test your application, if it fails then you know where to look because probably the password will be somewhere in the application or you can put the encrypted pasword back in de original table.

good luck

Vicnent Ruger
(Oracle DBA)

-----Oorspronkelijk bericht-----
Van: root_at_fatcity.com [mailto:root_at_fatcity.com]Namens Eric Lansu Verzonden: vrijdag 14 juli 2000 12:15
Aan: Multiple recipients of list ORACLE-L Onderwerp: Re: Reverse engineer passwords

I hope it's not possible to do this reverse engeneering for it would mean a serious security-problem.

Eric Lansu

> Some passwords are lost, others are in clear text, others are operational
> (somewhere in production), but not known due to turnover. Rather than
> possibly break running systems by changing passwords, we (dba staff) would
> like to reverse engineer the passwords in dba_users.
>
> Has anyone done this, and if so, will you send the key to me? Referrals
to
> documentation are appreciated.
>
> Thank you.
>
> Linda Hagedorn
>
> --
> Author: Linda Hagedorn
> INET: Linda_at_pets.com
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).

-- 
Author: Eric Lansu
  INET: eric.lansu_at_quicknet.nl

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

------_=_NextPart_001_01BFED79.C8D69016
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Diso-8859-1">
<META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version =
5.5.2650.12">
<TITLE>RE: Reverse engineer passwords</TITLE>
</HEAD>
<BODY>

<P><FONT SIZE=3D2>Hi,</FONT>
</P>

<P><FONT SIZE=3D2>You can store the encrypted password in a table, =
change your password as you like, test your application, if it fails =
then you know where to look because probably the password will be =
somewhere in the application or you can put the encrypted pasword back =
in de original table.</FONT></P>

<P><FONT SIZE=3D2>good luck</FONT>
</P>

<P><FONT SIZE=3D2>Vicnent Ruger</FONT>
<BR><FONT SIZE=3D2>(Oracle DBA)</FONT>
</P>

<P><FONT SIZE=3D2>-----Oorspronkelijk bericht-----</FONT>
<BR><FONT SIZE=3D2>Van: root_at_fatcity.com [<A =
HREF=3D"mailto:root_at_fatcity.com">mailto:root_at_fatcity.com</A>]Namens =
Eric Lansu</FONT>
<BR><FONT SIZE=3D2>Verzonden: vrijdag 14 juli 2000 12:15</FONT>
<BR><FONT SIZE=3D2>Aan: Multiple recipients of list ORACLE-L</FONT>
<BR><FONT SIZE=3D2>Onderwerp: Re: Reverse engineer passwords</FONT>
</P>
<BR>

<P><FONT SIZE=3D2>I hope it's not possible to do this reverse =
engeneering for it would mean a</FONT>
<BR><FONT SIZE=3D2>serious security-problem.</FONT>
</P>

<P><FONT SIZE=3D2>Eric Lansu</FONT>
</P>

<P><FONT SIZE=3D2>----- Original Message -----</FONT>
<BR><FONT SIZE=3D2>To: &quot;Multiple recipients of list ORACLE-L&quot; =
&lt;ORACLE-L_at_fatcity.com&gt;</FONT>
<BR><FONT SIZE=3D2>Sent: Thursday, 13 July 2000 22:17</FONT>
</P>
<BR>

<P><FONT SIZE=3D2>&gt; Some passwords are lost, others are in clear =
text, others are operational</FONT>
<BR><FONT SIZE=3D2>&gt; (somewhere in production), but not known due to =
turnover.&nbsp; Rather than</FONT>
<BR><FONT SIZE=3D2>&gt; possibly break running systems by changing =
passwords, we (dba staff) would</FONT>
<BR><FONT SIZE=3D2>&gt; like to reverse engineer the passwords in =
dba_users.</FONT>
<BR><FONT SIZE=3D2>&gt;</FONT>
<BR><FONT SIZE=3D2>&gt; Has anyone done this, and if so, will you send =
the key to me?&nbsp; Referrals</FONT>
<BR><FONT SIZE=3D2>to</FONT>
<BR><FONT SIZE=3D2>&gt; documentation are appreciated.</FONT>
<BR><FONT SIZE=3D2>&gt;</FONT>
<BR><FONT SIZE=3D2>&gt; Thank you.</FONT>
<BR><FONT SIZE=3D2>&gt;</FONT>
<BR><FONT SIZE=3D2>&gt; Linda Hagedorn</FONT>
<BR><FONT SIZE=3D2>&gt;</FONT>
<BR><FONT SIZE=3D2>&gt; --</FONT>
<BR><FONT SIZE=3D2>&gt; Author: Linda Hagedorn</FONT>
<BR><FONT SIZE=3D2>&gt;&nbsp;&nbsp; INET: Linda_at_pets.com</FONT>
<BR><FONT SIZE=3D2>&gt;</FONT>
<BR><FONT SIZE=3D2>&gt; Fat City Network Services&nbsp;&nbsp;&nbsp; -- =
(858) 538-5051&nbsp; FAX: (858) 538-5051</FONT>
<BR><FONT SIZE=3D2>&gt; San Diego, =
California&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; -- Public Internet =
access / Mailing Lists</FONT>
<BR><FONT SIZE=3D2>&gt; =
--------------------------------------------------------------------</FO=
NT>
<BR><FONT SIZE=3D2>&gt; To REMOVE yourself from this mailing list, send =
an E-Mail message</FONT>
<BR><FONT SIZE=3D2>&gt; to: ListGuru_at_fatcity.com (note EXACT spelling =
of 'ListGuru') and in</FONT>
<BR><FONT SIZE=3D2>&gt; the message BODY, include a line containing: =
UNSUB ORACLE-L</FONT>
<BR><FONT SIZE=3D2>&gt; (or the name of mailing list you want to be =
removed from).&nbsp; You may</FONT>
<BR><FONT SIZE=3D2>&gt; also send the HELP command for other =
information (like subscribing).</FONT>
</P>

<P><FONT SIZE=3D2>-- </FONT>
<BR><FONT SIZE=3D2>Author: Eric Lansu</FONT>
<BR><FONT SIZE=3D2>&nbsp; INET: eric.lansu_at_quicknet.nl</FONT>
</P>

<P><FONT SIZE=3D2>Fat City Network Services&nbsp;&nbsp;&nbsp; -- (858) =
538-5051&nbsp; FAX: (858) 538-5051</FONT>
<BR><FONT SIZE=3D2>San Diego, =
California&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; -- Public Internet =
access / Mailing Lists</FONT>
<BR><FONT =
SIZE=3D2>---------------------------------------------------------------=
-----</FONT>
<BR><FONT SIZE=3D2>To REMOVE yourself from this mailing list, send an =
E-Mail message</FONT>
<BR><FONT SIZE=3D2>to: ListGuru_at_fatcity.com (note EXACT spelling of =
'ListGuru') and in</FONT>
<BR><FONT SIZE=3D2>the message BODY, include a line containing: UNSUB =
ORACLE-L</FONT>
<BR><FONT SIZE=3D2>(or the name of mailing list you want to be removed =
Received on Fri Jul 14 2000 - 04:56:22 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US