Penetration Testing mailing list archives

Re: Oracle hash rainbowtables


From: Fabien Kraemer <kraemer () darwin2 dyndns org>
Date: Fri, 03 Feb 2006 11:16:27 +0100

Hello,

The problem is that Oracle hash depend on the login name. So you have to generate rainbow table for each login. A good idea is to create rainbow table for the defaults system account like : sys, system etc...

I made a patch for rainbowcrack but i did not have time to optimize it so it s pretty slow: 300 000 C/s on a pentium M 1.6 ghz compared to more than 600 000 c/s for orabf.

Good luck ;)


Carl-Johan Bostorp wrote:
Hello peeps,

Does anybody have the patch to rainbowcrack to build Oracle
rainbowtables? Or does anybody know of any service that does what
rainbowcrack-online does but with a SYS/SYSTEM Oracle-hash?

/C-J

------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner: Hackers are concentrating their efforts on attacking applications on your website. Up to 75% of cyber attacks are launched on shopping carts, forms, login pages, dynamic content etc. Firewalls, SSL and locked-down servers are futile against web application hacking. Check your website for vulnerabilities to SQL injection, Cross site scripting and other web attacks before hackers do! Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------


------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner: Hackers are concentrating their efforts on attacking applications on your website. Up to 75% of cyber attacks are launched on shopping carts, forms, login pages, dynamic content etc. Firewalls, SSL and locked-down servers are futile against web application hacking. Check your website for vulnerabilities to SQL injection, Cross site scripting and other web attacks before hackers do! Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------


Current thread: