RE: OPS$ / default accounts

On closer examination it appears that some of the hash values for the passwords may be incorrect.

The hash for SYSTEM is correct, but the hash for MDSYS is incorrect.

Jared

Jared.Still_at_radisys.com
Sent by: root_at_fatcity.com
02/01/02 02:19 PM
Please respond to ORACLE-L  

        To:     Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com>
        cc: 
        Subject:        RE: OPS$  / default accounts

Thank you Steve, this is a great resource, as it will save duplicating effort.

I'll go update my script now...

Jared

Steve Main <smain_at_iceboxllc.com>
Sent by: root_at_fatcity.com
02/01/02 01:51 PM
Please respond to ORACLE-L  

        To: Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com>

        cc: 
        Subject:        RE: OPS$  / default accounts

You might also want to check out this web site

http://www.pentest-limited.com/default-user.htm

Steve

-----Original Message-----
Sent: Thursday, January 31, 2002 9:41 AM To: Multiple recipients of list ORACLE-L

James McCann wrote:
>
> Speaking of default accounts with default passwords, here is my list
that
I
> check for. Anyone want to compare notes :) i.e. have I missed any?
>
> Thanks,
>
> Jim
>
> perfstat/perfstat
> TRACESVR ??? is only used with 7.x Databases
> REPADMIN ???
> CTXSYS/CTXSYS
> DBSNMP/DBSNMP
> INTERNAL/ORACLE
> MDSYS/MDSYS
> MTSSYS/MTSSYS
> ORDPLUGINS/ORDPLUGINS
> ORDSYS/ORDSYS
> OUTLN/OUTLN
> SYS/CHANGE_ON_INSTALL
> SYSTEM/MANAGER
> SCOTT/TIGER
>

There are many others in the various demos which may or may not have been run.
Here here my additional passwords (when no password is specified, it means that the default is identical to the username) BTW it's TRACESVR/TRACE and REPADMIN/REPADMIN

List compiled by searching 8.1.7 and 9i directories.

RMAN/XXXXXX
VRR1
VIDEOUSER
USER0 to USER9
TEST
SECDEMO
SAMPLES
PUBSUB
PRIMARY
POWERCARTUSER
PO
OSE$HTTP$ADMIN/FOO
ORDMEDIADEMO
ODS
OCITEST
MOREAU
MONITOR
MODTEST/YES
MMO2
MILLER
MIGRATE
MFG
MDSYS
JONES/STEEL
JOE/WELCOME (Logminer ;-) ?)
JMSUSER
IMAGEUSER
GPLD
GPFD
FND
FINANCE
EVENT
DUMMY
DEPLOYER
DEMO8
CSMIG
COMPANY
CLARK/CLOTH
CDEMOUCB
CDEMORID
CDEMOCOR
CDEMO82
BLAKE/PAPER"
AURORA$ORB$UNAUTHENTICATED/INVALID
AURORA$JIS$UTILITY$
AUDIOUSER
AQUSER
AQJAVA
ADLDEMO
ADAMS/WOOD You can add TEST/TEST, DBA, ADMIN, ORACLE etc. to the list.

-- 
Regards,

Stephane Faroult
Oriole Ltd
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Stephane Faroult
  INET: sfaroult_at_oriole.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Steve Main
  INET: smain_at_iceboxllc.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).



-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: 
  INET: Jared.Still_at_radisys.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).



-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: 
  INET: Jared.Still_at_radisys.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).