RE: Pete Finnigan's Oracle database password checker
- From: "Rich Jesse" <rjoralist@xxxxxxxxxxxxxxxxxxxxx>
- To: oracle-l@xxxxxxxxxxxxx
- Date: Wed, 8 Oct 2008 12:13:15 -0500 (CDT)
If English, the word lists and links here should be a good start:
http://icon.shef.ac.uk/Moby/
Of course it won't work for crackable dialects like l33t (or "1337", which
at least one prominent Oracle pass hacker can check) and the wordlist is
undoubtedly out-of-date, but as I said, it's a good start.
Enjoy!
Rich
Disclaimer: teh n00bz r pwnzorz!!!!!
Disdisclaimer: At my age, typing the above made me physically ill.
> I ran it in two of my development environments. My question is how do I
> extend the dictionary that Pete included in the routine. His Web page
> states that it can be extended. Anybody have any ideas about how to get a
> dictionary loaded into an Oracle database?
>
> -----Original Message-----
> From: oracle-l-bounce@xxxxxxxxxxxxx [mailto:oracle-l-bounce@xxxxxxxxxxxxx]
> On Behalf Of John.Hallas@xxxxxxxxxxxxxxxxxx
> Sent: Wednesday, October 08, 2008 3:06 AM
> To: guillermo.bort@xxxxxxx
> Cc: oracle-l@xxxxxxxxxxxxx
> Subject: RE: Pete Finnigan's Oracle database password checker
>
> This is a neat PL/SQL routine which is very easy to customise to your
> requirements
>
> http://www.pentest.co.uk/cgi-bin/viewcat.cgi?cat=downloads
>
> I downloaded the tool yesterday but I am stil looking for a suitable
> sandpit environment to test it on
--
//www.freelists.org/webpage/oracle-l
Other related posts:
