cracking Oracle passwds

I can think of several ways to 'crack' oracle passwords.

1> get a big crack dict and try connect statements until you hit.

   a simple shell wrap over sqlplus could do it.    very slow.

2> as sys get the encrypted string version of the password from

   dba_users, figure out the crypt calls from oracle    start crypting and comparing to the encrypted string.

version one is slow but anyone that can hit the instance can do it from any platform.

version two is more like the unix 'crack' program but just needs a little work.

-- 


---------------------------------------------------------

Steven Hauser 
email: hause011@tc.umn.edu   URL: http://www.tc.umn.edu/~hause011


---------------------------------------------------------