[dbsec] Extracting password hashes from raw oracle DB files

Hi silent list readers :)

I`m looking for possible ways to extract/modify password hashes of oracle
users directly from database binary files.  Any comment about this topic is
highly appreciated .

This would be useful in cases where we have access to oracle server on
file-system
but we do not have any privileged OS access , nor password of any of
oracle users.
having access to a linux shell with 'oracle' user is a real-world
example of this.

Of course there are many tricks to obtain some passwords by checking
random local
files, logs , backups , etc ...  but I`d like to hear about direct
extraction of hashes from database files.


Sincerely
Hamid K

Other related posts: