RE: Pete Finnigan's Oracle database password checker
Date: Wed, 8 Oct 2008 12:13:15 -0500 (CDT)
Message-ID: <39153.12.17.117.251.1223485995.squirrel@12.17.117.251>
If English, the word lists and links here should be a good start:
Of course it won't work for crackable dialects like l33t (or "1337", which at least one prominent Oracle pass hacker can check) and the wordlist is undoubtedly out-of-date, but as I said, it's a good start.
Enjoy!
Rich
Disclaimer: teh n00bz r pwnzorz!!!!!
Disdisclaimer: At my age, typing the above made me physically ill.
> I ran it in two of my development environments. My question is how do I
> extend the dictionary that Pete included in the routine. His Web page
> states that it can be extended. Anybody have any ideas about how to get a
> dictionary loaded into an Oracle database?
>
> -----Original Message-----
> From: oracle-l-bounce_at_freelists.org [mailto:oracle-l-bounce_at_freelists.org]
> On Behalf Of John.Hallas_at_morrisonsplc.co.uk
> Sent: Wednesday, October 08, 2008 3:06 AM
> To: guillermo.bort_at_eds.com
> Cc: oracle-l_at_freelists.org
> Subject: RE: Pete Finnigan's Oracle database password checker
>
> This is a neat PL/SQL routine which is very easy to customise to your
> requirements
>
> http://www.pentest.co.uk/cgi-bin/viewcat.cgi?cat=downloads
>
> I downloaded the tool yesterday but I am stil looking for a suitable
> sandpit environment to test it on
-- http://www.freelists.org/webpage/oracle-lReceived on Wed Oct 08 2008 - 12:13:15 CDT