Pete Finnigan's Oracle Security Weblog
This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.
I just saw on orablogs Tug's post to his Oracle blog titled "Do not remember the default password... here a list..." and went over to comment but couldn't find how to comment. I wanted to concur that the cirt default password page is excellent for covering many types of software. The page says it has passwords for 271 vendors and 1386 default passwords.
I just want to also mention here that I have probably the biggest list of Oracle default passwords on the net. There is also a simple tool for checking your databases for existence of any of these Oracle default username / passwords.
Thanks for the tip Tug on the Cirt site.
Simply connect PFCLScan to your Oracle database and it will automatically discover the security issues that could make your Oracle database vulnerable to attack and to the potential loss of your data.
PFCLObfuscate is the only tool available that can automatically add license controls to your PL/SQL code. PFCLObfuscate protects your Intellectual Property invested in your PL/SQL database code.
PFCLTraining is a set of expert training classes for you, aimed at teaching how to audit your own Oracle database, design audit trails, secure code in PL/SQL and secure and lock down your Oracle database.
Choose PFCLServices to add PeteFinnigan.com Ltd to your team for your Oracle Security needs. We are experts in performing detailed security audits, data security design work and policy creation