Pete Finnigan's Oracle security weblog /weblog/entries PeteFinnigan.com's weblog is the only weblog dedicated to Oracle security. en-gb Copyright PeteFinnigan.com Ltd 2005, All rights reserved. All trademarks are the property of their respective owners and are hereby acknowledged 2026-07-23T12:05:55Z Pete Finnigan (mailto:webmaster\@petefinnigan.com) Pete Finnigan (mailto:pete\@petefinnigan.com) Pete Finnigan's Oracle security weblog PeteFinnigan.com's weblog is the only weblog dedicated to Oracle security. Pete Finnigan's Oracle security weblog http://www.petefinnigan.com/images/company_logo_1.gif /weblog/entries Can local LLM AI generate the top 100 most common passwords? /weblog/archives/00001632.htm I am working on a simple password audit tool for Oracle Apex and I have written a simple password cracker in PL/SQL to test if a password is found or not; i.e. is the password weak or not. To allow....<a href="/weblog/archives/00001632.htm">[Read More]</a> <p>Posted by Pete On 23/07/26 At 12:01 PM</p> Cluster Objects in the Oracle Database /weblog/archives/00001631.htm Sometimes in forensic analysis of an Oracle database it is necessary to understand how data is stored on disk. Actually we must understand that if we were to create our own database we might start with a file that holds....<a href="/weblog/archives/00001631.htm">[Read More]</a> <p>Posted by Pete On 13/07/26 At 09:11 AM</p> AI Comparison for Oracle Security Code Generation /weblog/archives/00001630.htm I am running a Mac Book Pro M5 with 64gb of RAM and a 2tb SSD. I wanted to use local LLMs to generate Oracle security related PL/SQL to see how good these models are at generating PL/SQL code and....<a href="/weblog/archives/00001630.htm">[Read More]</a> <p>Posted by Pete On 07/07/26 At 10:43 AM</p> AI /weblog/archives/00001629.htm My day job is Oracle security and that covers a massive area of topics from performing security audits, helping customers secure data in their Oracle databases, forensics, building and designing audit trails and reports, secure coding in PL/SQL, encryption of....<a href="/weblog/archives/00001629.htm">[Read More]</a> <p>Posted by Pete On 06/07/26 At 12:56 PM</p> Forensic Analysis for records in Oracle with no Timestamp /weblog/archives/00001628.htm If we have an Oracle database table with no timestamp can we still get a date/time stamp when something happened? For instance if a table has a date/time column then yes of course we can know when the records changed....<a href="/weblog/archives/00001628.htm">[Read More]</a> <p>Posted by Pete On 25/06/26 At 10:53 AM</p> DV_SECANALYST Analyse Database Vault Views /weblog/archives/00001627.htm I have been involved with Oracle Database Vault recently with a deployment and I was asked how can someone view the database vault dictionary views when DV is installed. So, if we start with no DV enabled in our database....<a href="/weblog/archives/00001627.htm">[Read More]</a> <p>Posted by Pete On 02/06/26 At 12:49 PM</p> I forgot my Oracle Database Vault owner Password /weblog/archives/00001626.htm Let us imagine that I have a 21c database that has Database Vault (DV) enabled and I have forgotten my Database Vault owner password. In my case C##DVO. This user as well as a backup (That I have also forgotten....<a href="/weblog/archives/00001626.htm">[Read More]</a> <p>Posted by Pete On 28/05/26 At 02:17 PM</p> World Password Day and Oracle Security /weblog/archives/00001625.htm I am slightly late with this one as the event itself was on the 7th May 2026. The World Password Day 2026 is a day to try and highlight that passwords are weak. An article I saw on line said....<a href="/weblog/archives/00001625.htm">[Read More]</a> <p>Posted by Pete On 11/05/26 At 12:37 PM</p>