OraFAQ Forum: Windows

Home » Infrastructure » Windows » OScanner

Show: Today's Messages :: Polls :: Message Navigator
E-mail to friend

OScanner [message #499894]

Wed, 16 March 2011 10:46

Shabz
Messages: 4
Registered: March 2011
Location: London

Junior Member

I have recently downloaded (the zip file for) OScanner (1.0.6) and have Java JRE installed on my machine. However, I am experiencing some difficulty in running the scanner. Please can someone explain in laymans terms on how I should start to use this tool, once I have downloaded the zip file.

Thanks in advance.

Report message to a moderator

Re: OScanner [message #499897 is a reply to message #499894]

Wed, 16 March 2011 10:57

Mahesh Rajendran
Messages: 10708
Registered: March 2002
Location: oracleDocoVille

Senior Member
Account Moderator

As usual,
Exact installation and usage depends on your OS.
OScanner is pretty straight forward.

Install Jre.
Unzip the OScanner thingy.
Make sure you environment is using the correct Java.
Call Oscanner from the unzip directory.

Here is an example.
http://www.vulnerabilityassessment.co.uk/oscanner.htm

Report message to a moderator

Re: OScanner [message #499898 is a reply to message #499894]

Wed, 16 March 2011 10:58

Littlefoot
Messages: 21826
Registered: June 2005
Location: Croatia, Europe

Senior Member
Account Moderator

No idea; I never even heard of OScanner before. Google returned this page which says:
Quote:

To do: documentation!

Bad luck, eh?

Though, this page mentions "OScanner installation". Does it look like anything you have on your computer?

Report message to a moderator

Re: OScanner [message #499899 is a reply to message #499898]

Wed, 16 March 2011 11:05

Shabz
Messages: 4
Registered: March 2011
Location: London

Junior Member

Thanks for the prompt responses.

I have installed the current version of JRE and I am using Windows. I have then unzipped the OScanner folder. But after this I am not getting anywhere. In the first instance I did find the link that was sent through, but this did not help. A couple of follow on questions:

1. How do I make sure the environment is using the correct java?
2. How do I call the OScanner from the unzipped directory?

In anticipation of your reponse.

Report message to a moderator

Re: OScanner [message #499906 is a reply to message #499899]

Wed, 16 March 2011 11:59

Mahesh Rajendran
Messages: 10708
Registered: March 2002
Location: oracleDocoVille

Senior Member
Account Moderator

1) set your environment variables.
2) oscanner -s servername or ip.

It is all in the links provided.

Report message to a moderator

Re: OScanner [message #499910 is a reply to message #499906]

Wed, 16 March 2011 12:25

Shabz
Messages: 4
Registered: March 2011
Location: London

Junior Member

In the attached file it states the following:

JAVA=/usr/java/j2re1.4.2_08/bin/java
chmod 744 oscanner.sh
chmod 744 reportviewer.sh

Where am I supposed to input this? Also what do I need to change from it/how?

The following command:

C:\Oracle\oscanner_bin>oscanner

For this, I have created this folder and stored the appropriate files within it.

When I go to cmd.exe and input the oscanner command, I am presented with the appropriate fields shown in the attachment. Now seeing if the report worked as well.

Thanks,

Report message to a moderator

Re: OScanner [message #499916 is a reply to message #499910]

Wed, 16 March 2011 12:42

Mahesh Rajendran
Messages: 10708
Registered: March 2002
Location: oracleDocoVille

Senior Member
Account Moderator

chmod is meant for unix/linux.

Go ahead and check for other stuff.
If it complains anything about java, set JAVA to JRE_HOME you are using ( your environment variable in windows. use set command or goto mycomputer/environment variables? NOt sure. I am not a windows user).

Report message to a moderator

Re: OScanner [message #499918 is a reply to message #499910]

Wed, 16 March 2011 12:43

BlackSwan
Messages: 26766
Registered: January 2009
Location: SoCal

Senior Member

do as below so we can know complete Oracle version & OS name.

Post via COPY & PASTE complete results of
SELECT * from v$version;

Report message to a moderator

Re: OScanner [message #520625 is a reply to message #499916]

Tue, 23 August 2011 13:59

Shabz
Messages: 4
Registered: March 2011
Location: London

Junior Member

Hi again,

I have attempted to following the instructions from the link below:

vulnerabilityassessment.co.uk/oscanner.htm

However, when I run the command:

C:\Oracle\oscanner_bin>oscanner -s 172.x.x.x

I get the message below:

Oracle Scanner 1.0.6 by ....
-------------------------------------------
[-] Checking host 172.x.x.x
[x] Failed to enumerate sids from host
[-] Loading services/sids from service file
Plugin ork.plugins.CheckOracleVersion failed
Plugin ork.plugins.GetPrivilegesForAccounts failed
Plugin ork.plugins.GetRoles failed
Plugin ork.plugins.GetPasswordPolicy failed
Plugin ork.plugins.GetPasswordPolicyForAccounts failed
Plugin ork.plugins.GetAccountHashes failed
Plugin ork.plugins.GetPrivilegesForRoles failed
Plugin ork.plugins.GetAuditInfo failed

Some background ...

I am attempting to run this tool from a Windows client accessing a server hosting an Oracle product. I have the host name and IP address which I believe is the same as the servername?

In all honesty, I did not know how to make sure the environment is using the correct Java (as relayed in the previous thread, so this is also probably another problem).

Any help/input would be much appreciated.

Report message to a moderator

Previous Topic:	Diff b/w standby database and clone database
Next Topic:	which version of 32 bit oracle client should I install (2 threads merged by bb)

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Sat Aug 22 08:17:26 CDT 2026