RE: Pete Finnigan's Oracle database password checker

There are a myriad of tools out there for scanning unix passwords
(SATAN was one I used in the 90s, not sure if it's still around).

I would think that the dictionaries of words that comes with any of these utilities would be a good starting point.

Matt

-----Original Message-----

From: oracle-l-bounce_at_freelists.org
[mailto:oracle-l-bounce_at_freelists.org] On Behalf Of Mercadante, Thomas F (LABOR)
Sent: Wednesday, October 08, 2008 9:34 AM To: Bort, Guillermo; John.Hallas_at_morrisonsplc.co.uk Cc: oracle-l_at_freelists.org
Subject: RE: Pete Finnigan's Oracle database password checker

Guillermo,

I know. But anybody have a clue of where to get a list of dictionary words to load into a database?

Tom

-----Original Message-----

From: Bort, Guillermo [mailto:guillermo.bort_at_eds.com] Sent: Wednesday, October 08, 2008 9:00 AM To: Mercadante, Thomas F (LABOR); John.Hallas_at_morrisonsplc.co.uk Cc: oracle-l_at_freelists.org
Subject: RE: Pete Finnigan's Oracle database password checker

If you read the file you downloaded you'll see that there is a procedure that loads an array (procedure init_dicts) and you can add lines there. Also, init_hashes loads the hashes database.

You could certainly modify the procedure to load the array from a table with something like:

Procedure init_dicts is
J number;
Begin
J:=1;
For i in (select * from table) loop
Dicts(J):=i.word;
J:=J+1;
End loop;
End;   

Guillermo Alan Bort
EDS - ITO DBA Main Group

-----Original Message-----

From: Mercadante, Thomas F (LABOR)
[mailto:Thomas.Mercadante_at_labor.state.ny.us] Sent: Wednesday, October 08, 2008 9:15 AM To: John.Hallas_at_morrisonsplc.co.uk; Bort, Guillermo Cc: oracle-l_at_freelists.org
Subject: RE: Pete Finnigan's Oracle database password checker

I ran it in two of my development environments. My question is how do I extend the dictionary that Pete included in the routine. His Web page states that it can be extended. Anybody have any ideas about how to get a dictionary loaded into an Oracle database?

--

http://www.freelists.org/webpage/oracle-l

--

http://www.freelists.org/webpage/oracle-l Received on Wed Oct 08 2008 - 08:44:04 CDT