Alex has just released an update to his excellent Oracle dictionary passwod cracker. Oracle Password Checker (Cracker) is updated to version 1.22. This version has been compiled against the Intel tuned openssl libraries that I talked about the other day. This has made checkpwd around 30% faster. Checkpwd can be used on Linux or Windows. It can also be used standalone (without an Oracle client) and with an Oracle client so that it can connect to the database and extract the usernames and hashes to be cracked.
Alex has also updated his page Benchmark Oracle Password Cracker which shows some benchmark tests of the most popular Oracle password crackers available. This page makes interesting reading. orabf is shown to blow all away on its brute force timings but is slower in dictionary mode. I emailed orabf's author the other day to point out the intel tuning in openssl, i hope that he will respond with a recompiled orabf.
Blog
Pete Finnigan's Oracle Security Weblog
This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.
[Previous entry: "Oracle password crackers just got faster"] [Next entry: "Transparent Data Encryption (TDE) certified for Apps 11i"]
January 2007
- Stealing Oracle passwords from the wire - 01/01/2007 by 01/01/2007
- A good blog to watch for Oracle internals and hard to find info - 01/03/2007 by 01/03/2007
- 10 steps to creating your own security audit - 01/04/2007 by 01/04/2007
- Teaching an Old Dog New Tricks - 01/05/2007 by 01/05/2007
- Great paper on Oracle Applications 11i password weaknesses and decryption - 01/10/2007 by 01/10/2007
- Oracle have announced a CPU pre-release feature - 01/12/2007 by 01/12/2007
- Oracle emulates Microsoft with advance patch notice - 01/14/2007 by 01/14/2007
- new paper on oracle as sysdba connection weakness - 01/15/2007 by 01/15/2007
- Critical Patch Update January 2007 is out - 01/16/2007 by 01/16/2007
- Details Oracle Critical Patch Update January 2007 - V1.02 released - 01/18/2007 by 01/18/2007
- Toolkit of generators and brute force tools - 01/19/2007 by 01/19/2007
- Secure Passwords Keep You Safer - 01/21/2007 by 01/21/2007
- Oracle password crackers just got faster - 01/22/2007 by 01/22/2007
- Transparent Data Encryption (TDE) certified for Apps 11i - 01/24/2007 by 01/24/2007
- Download some free chapters from the Oracle Hackers Handbook - 01/30/2007 by 01/30/2007
- BBED - Oracle Block Browser and EDitor - A hacker tool? - 01/31/2007 by 01/31/2007
Archives
Syndication
Powered by gm-rss 2.0.0
