RE: Pete Finnigan's Oracle database password checker

  • From: "Adams, Matthew (GE Indust, ConsInd)" <MATT.ADAMS@xxxxxx>
  • To: <Thomas.Mercadante@xxxxxxxxxxxxxxxxx>
  • Date: Wed, 8 Oct 2008 09:44:04 -0400

There are a myriad of tools out there for 
scanning unix passwords 
(SATAN was one I used in the 90s, not sure if it's still around).   

I would think that the dictionaries of words that comes with any 
of these utilities would be a good starting point.

Matt

-----Original Message-----
From: oracle-l-bounce@xxxxxxxxxxxxx
[mailto:oracle-l-bounce@xxxxxxxxxxxxx] On Behalf Of Mercadante, Thomas F
(LABOR)
Sent: Wednesday, October 08, 2008 9:34 AM
To: Bort, Guillermo; John.Hallas@xxxxxxxxxxxxxxxxxx
Cc: oracle-l@xxxxxxxxxxxxx
Subject: RE: Pete Finnigan's Oracle database password checker

Guillermo,

I know.  But anybody have a clue of where to get a list of dictionary
words to load into a database?

Tom

-----Original Message-----
From: Bort, Guillermo [mailto:guillermo.bort@xxxxxxx]
Sent: Wednesday, October 08, 2008 9:00 AM
To: Mercadante, Thomas F (LABOR); John.Hallas@xxxxxxxxxxxxxxxxxx
Cc: oracle-l@xxxxxxxxxxxxx
Subject: RE: Pete Finnigan's Oracle database password checker

If you read the file you downloaded you'll see that there is a procedure
that loads an array (procedure init_dicts) and you can add lines there.
Also, init_hashes loads the hashes database.

You could certainly modify the procedure to load the array from a table
with something like:

Procedure init_dicts is
J number;
Begin
J:=1;
For i in (select * from table) loop
Dicts(J):=i.word;
J:=J+1;
End loop;
End;
  

Guillermo Alan Bort
EDS - ITO DBA Main Group

-----Original Message-----
From: Mercadante, Thomas F (LABOR)
[mailto:Thomas.Mercadante@xxxxxxxxxxxxxxxxx]
Sent: Wednesday, October 08, 2008 9:15 AM
To: John.Hallas@xxxxxxxxxxxxxxxxxx; Bort, Guillermo
Cc: oracle-l@xxxxxxxxxxxxx
Subject: RE: Pete Finnigan's Oracle database password checker

I ran it in two of my development environments.  My question is how do I
extend the dictionary that Pete included in the routine.  His Web page
states that it can be extended.  Anybody have any ideas about how to get
a dictionary loaded into an Oracle database?




--
//www.freelists.org/webpage/oracle-l


--
//www.freelists.org/webpage/oracle-l


Other related posts: