Hi, I have just added a new tool to my web site that will test your database for known default users and more importantly for known default passwords. The tool is a set of PL/SQL scripts that loads a list of 474 known default users to a table. A package procedure is then used to loop through all of the databases users to test if they are default and have known passwords. The list of passwords and users is supplied in a spreadsheet that includes details of what most of the users are used for as well as a severity rating for them. This is probably the biggest list of default users available on the net. The scripts were written by Marcel-Jan Krijgsman and are available from http://www.petefinnigan.com/default/default_password_checker.htm Kind regards Pete -- Pete Finnigan (email:pete@xxxxxxxxxxxxxxxx) Web site: http://www.petefinnigan.com - Oracle security audit specialists Oracle security blog: http://www.petefinnigan.com/weblog/entries/index.html Book:Oracle security step-by-step Guide - see http://store.sans.org for details. -- //www.freelists.org/webpage/oracle-l