Penetration Testing mailing list archives

Re: Oracle toplink mapping workbench password algorithm


From: Pete Finnigan <plsql () petefinnigan com>
Date: Thu, 29 Jan 2004 20:58:50 +0000

Hi Everyone,

Martin has kindly allowed me to host his script on my Oracle security
tools page so if anyone would like to bookmark it for future reference
its on http://www.petefinnigan.com/tools.htm or directly a link to the
file is http://www.petefinnigan.com/oracletest.perl

Kind regards

Pete

In article <40185986.9080400 () mail ptraced net>, Martin
<broadcast () mail ptraced net> writes
Read the link, really interesting. There's a tiny mistake there tho, on
the example. 97 + 112 does not equal 224, no matter what. I was coding a
PERL script to decrypt the passwords, and I took the 'pa' '74E0'
example, since I was a bit lazy to code a "crypter". Well, here's a PERL
script that will decode the password, email me if you can improve it, or
if you find any errors (Im pretty sure it has, it's pretty ugly).



[ A MIME application / x-perl part was included here. ]

---------------------------------------------------------------------------
----------------------------------------------------------------------------

-- 
Pete Finnigan
email:pete () petefinnigan com
Web site: http://www.petefinnigan.com - Oracle security audit specialists
Book:Oracle security step-by-step Guide - see http://store.sans.org for details.


---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: