From: Lukasz Szczepanski (securityfocus@o2.pl)
Date: Wed Sep 28 2005 - 03:37:14 EDT
Hello,
Personally i recomend 'checkpwd 1.1' - free dictionary-based tool for
Oracle DB's, which can be found under this link:
http://www.red-database-security.com/software/checkpwd.html
You can found there both windows compilation and linux sources and more
information :-). default/weak password list is also included.
Have fun :-)
---------------------------------------------------------------------------
SAMPLE OUTPUT:
---------------------------------------------------------------------------
Checkpwd 1.10 - (c) 2005 by Red-Database-Security GmbH
Oracle Security Consulting, Security Audits & Security Trainings
http://www.red-database-security.com
initializing Oracle client library
connecting to the database
retrieving users and password hash values
opening weak password list file
reading weak passwords list
checking passwords
MDSYS has weak password MDSYS [EXPIRED & LOCKED]
ORDSYS has weak password ORDSYS [EXPIRED & LOCKED]
DUMMY123 has weak password DUMMY123 [OPEN]
DBSNMP OK [OPEN]
SCOTT has weak password TIGER [OPEN]
CTXSYS has weak password CHANGE_ON_INSTALL [EXPIRED & LOCKED]
SH has weak password CHANGE_ON_INSTALL [EXPIRED & LOCKED]
OUTLN has weak password OUTLN [EXPIRED & LOCKED]
DIP has weak password DIP [EXPIRED & LOCKED]
DUMMY321 has weak password 123YMMUD [OPEN]
[...]
SYS OK [OPEN]
SYSTEM OK [OPEN]
Done. Summary:
Passwords checked : 13900828
Weak passwords found : 23
Elapsed time (min:sec) : 1:24
Passwords / second : 165486
---------------------------------------------------------------------------
PS. Standalone version doesnt need oracle client to run.
> Hi to all.
>
> Some day ago I was quite surprised to see that on a server that was
> scanned with nessus and with emaze scanner that revealed no relevant
> security hole, there was oracle installed and active with all the
> default oracle user/password activated (i.e. system/manager,
> scott/tiger, etc).
>
> What VA tool can find default user on oracle? Is it possible to find
> that info with Nessus (perhaps I can't use it at its best)?
>
> Best Regards,
> Massimo
> PS
> I usually activate all the check on nessus and emaze.
>
> ------------------------------------------------------------------------------
>
> Audit your website security with Acunetix Web Vulnerability Scanner:
> Hackers are concentrating their efforts on attacking applications on
> your website. Up to 75% of cyber attacks are launched on shopping
> carts, forms, login pages, dynamic content etc. Firewalls, SSL and
> locked-down servers are futile against web application hacking. Check
> your website for vulnerabilities to SQL injection, Cross site
> scripting and other web attacks before hackers do! Download Trial at:
>
> http://www.securityfocus.com/sponsor/pen-test_050831
> -------------------------------------------------------------------------------
>
>
>
>
------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner:
Hackers are concentrating their efforts on attacking applications on your
website. Up to 75% of cyber attacks are launched on shopping carts, forms,
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
futile against web application hacking. Check your website for vulnerabilities
to SQL injection, Cross site scripting and other web attacks before hackers do!
Download Trial at:
http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:55:00 EDT