Pete Finnigan's Oracle Security Weblog

I just saw on orablogs Tug's post to his Oracle blog titled "Do not remember the default password... here a list..." and went over to comment but couldn't find how to comment. I wanted to concur that the cirt default password page is excellent for covering many types of software. The page says it has passwords for 271 vendors and 1386 default passwords.

I just want to also mention here that I have probably the biggest list of Oracle default passwords on the net. There is also a simple tool for checking your databases for existence of any of these Oracle default username / passwords.

Thanks for the tip Tug on the Cirt site.