Finnigan's Wake

From: Mladen Gogala <mladen_at_wangtrading.com>
Date: Fri, 26 Mar 2004 10:22:09 -0500
Message-ID: <20040326152209.GA5827@mladen.wangtrading.com>

Pete, I visited your page and I downloaded Martin's password cracker. The script is useless and doesn't work. I'd appreciate if you told me which one of the papers describes Oracle's encryption algorithm. This script is written by using what I call "stream of consciousness scripting technique" and the same applies to the links to "descriptive" papers. That is why the post was given this title. If you don't want to give information about the oracle encryption algorithm, but, please, don't make me lose an hour trying to find something hidden. This particular snippet decrypts every password which has the same encryption as the one hardcocded in the script.

---

$string = "A7FCAA504BA7E4FC";                                                                                 

sub usage {

        print " Usage: $0 <password to decrypt>\n";


        }

                                                                                
if ($#ARGV != 0) {
        usage();


        }

                                                                                
else {
        $encrypted = $ARGV[0];
        $encrypted =~ s/$string$/ / or die ("Invalid Password\n");
*************************************************************************

This brings me to the conclusion that you haven't really tested the script before putting the link on your website, have you?

---

Please see the official ORACLE-L FAQ: http://www.orafaq.com

---

To unsubscribe send email to: oracle-l-request_at_freelists.org put 'unsubscribe' in the subject line.

--
Archives are at http://www.freelists.org/archives/oracle-l/
FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------

Received on Fri Mar 26 2004 - 09:20:57 CST