bugtraq - Re: Oracle toplink mapping workbench password algorithm

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <$pOvi7A6QXGARxW7@peterfinnigan.demon.co.uk>
Date: Thu, 29 Jan 2004 20:59:38 +0000
From: Pete Finnigan <plsql@...efinnigan.com>
To: BUGTRAQ@...urityfocus.com
Subject: Re: Oracle toplink mapping workbench password algorithm


Hi Everyone,

Martin (broadcast@...l.ptraced.net) has written a perl script to decrypt
the passwords and has kindly allowed me to host his script on my Oracle
security tools page so if anyone would like to bookmark it for future
reference its on http://www.petefinnigan.com/tools.htm or directly a
link to the file is http://www.petefinnigan.com/oracletest.perl

Kind regards

Pete


In article <LREiMlBezvFARxra@...erfinnigan.demon.co.uk>, Pete Finnigan
<plsql@...efinnigan.com> writes
>Hi
>
>I thought readers here might be interested in this item. Today I found
>that a website has posted the algorithm and sample code for the
>encryption algorithm used in Oracles toplink mapping workbench. This
>code can be used to decrypt the passwords held in the xml file easily. A
>link to the details can be found on my website at
>http://www.petefinnigan.com/orasec.htm
>
>If you use this tool beware of this fact and protect the files used.
>
>kind regards
>
>Pete

-- 
Pete Finnigan
email:pete@...efinnigan.com
Web site: http://www.petefinnigan.com - Oracle security audit specialists
Book:Oracle security step-by-step Guide - see http://store.sans.org for details.