OraFAQ Forum: Security » how decrypt oracle user's password

Home » RDBMS Server » Security » how decrypt oracle user's password

Show: Today's Messages :: Polls :: Message Navigator
E-mail to friend

how decrypt oracle user's password [message #255680]

Wed, 01 August 2007 08:37

zokho
Messages: 1
Registered: August 2007
Location: Iran

Junior Member

hi.
i am a new member to this site.
i have a question which it is one of my university's assignment.
how can i decrypt user's password in oracle 9i?
i've read several guides related to it, but they have not been useful at all!!!!
best regards....

Report message to a moderator

Re: how decrypt oracle user's password [message #255681 is a reply to message #255680]

Wed, 01 August 2007 08:41

JRowbottom
Messages: 5933
Registered: June 2006
Location: Sunny North Yorkshire, ho...

Senior Member

Basically, you can't.
What would be the point of a password that you could decrypt?

There have been some exploits cracking short (8chr or less) passwords by a brute force lookup table attack, but I know of no major weaknesses in the Oracle password.

(there - a statement that definitive should get me proved wrong in short order).

Report message to a moderator

Re: how decrypt oracle user's password [message #255684 is a reply to message #255680]

Wed, 01 August 2007 08:50

Michel Cadot
Messages: 68767
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

You can't decrypt an Oracle password as it is not crypted.
The password is hashed, this means one way.

Regards
Michel

Report message to a moderator

Re: how decrypt oracle user's password [message #255733 is a reply to message #255680]

Wed, 01 August 2007 10:50

Michel Cadot
Messages: 68767
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

In addition, do you think if someone knows how to "decrypt" Oracle passwords he'd post it forum?

Regards
Michel

[Updated on: Wed, 01 August 2007 10:51]

Report message to a moderator

Re: how decrypt oracle user's password [message #255764 is a reply to message #255680]

Wed, 01 August 2007 12:37

pablolee
Messages: 2882
Registered: May 2007
Location: Scotland

Senior Member

The only way I know of is to look over the person's shoulder (just so that you can see what they've written on the post-it note that is stuck to their monitor - seriously, I've seen it done)

Report message to a moderator

Re: how decrypt oracle user's password [message #255765 is a reply to message #255680]

Wed, 01 August 2007 12:55

BlackSwan
Messages: 26766
Registered: January 2009
Location: SoCal

Senior Member

There is a well documented procedure to never need to reverse engineer an Oracle password, but I'm not going to be the one who publishes the details here.

There is a Bad Guy who frequently trolls the CDOS Usenet forum claiming he can crack the SYSTEM schema password.
My advice is to keep away from him, but it will be your DB that is in danger if/when you interact with him & not my DBs.

Report message to a moderator

Re: how decrypt oracle user's password [message #255767 is a reply to message #255765]

Wed, 01 August 2007 13:07

Michel Cadot
Messages: 68767
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

Amjad Daoud aka Omlet a well known troll in cdos usenet newsgroup, said many and many things for years but never proved any one.
Daniel Morgan gave him a hash value and asked him to give the clear password, no return.

Regards
Michel

Report message to a moderator