Penetration Testing mailing list archives
Re: Oracle toplink mapping workbench password algorithm
From: Pete Finnigan <plsql () petefinnigan com>
Date: Thu, 29 Jan 2004 20:58:50 +0000
Hi Everyone, Martin has kindly allowed me to host his script on my Oracle security tools page so if anyone would like to bookmark it for future reference its on http://www.petefinnigan.com/tools.htm or directly a link to the file is http://www.petefinnigan.com/oracletest.perl Kind regards Pete In article <40185986.9080400 () mail ptraced net>, Martin <broadcast () mail ptraced net> writes
Read the link, really interesting. There's a tiny mistake there tho, on the example. 97 + 112 does not equal 224, no matter what. I was coding a PERL script to decrypt the passwords, and I took the 'pa' '74E0' example, since I was a bit lazy to code a "crypter". Well, here's a PERL script that will decode the password, email me if you can improve it, or if you find any errors (Im pretty sure it has, it's pretty ugly). [ A MIME application / x-perl part was included here. ] --------------------------------------------------------------------------- ----------------------------------------------------------------------------
-- Pete Finnigan email:pete () petefinnigan com Web site: http://www.petefinnigan.com - Oracle security audit specialists Book:Oracle security step-by-step Guide - see http://store.sans.org for details. --------------------------------------------------------------------------- ----------------------------------------------------------------------------
Current thread:
- Oracle toplink mapping workbench password algorithm Pete Finnigan (Jan 28)
- <Possible follow-ups>
- Re: Oracle toplink mapping workbench password algorithm Martin (Jan 29)
- Re: Oracle toplink mapping workbench password algorithm Pete Finnigan (Jan 29)