Alex has just let me know that he has upgraded Checkpwd his dictionary based Oracle password cracker. It has been upgraded to version 1.1. The changes are summarised as follows:
"History
1.0 - Initial Version
1.1 - Smaller Changes
Show Oracle Account Status (OPEN, EXPIRED, LOCKED)
Check for weak password = username
Linux Version (static, shared and standalone)
Dictionary file can now contain \n or \r\n
Dictionary converted to upper case"
The password cracker page - Oracle Password Checker (Cracker) has been updated with new links for the version 1.1 tools for Windows and Linux.
I have updated my Oracle Security Tools page with the new links.
Blog
Pete Finnigan's Oracle Security Weblog
This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.
[Previous entry: "Full disclosure list: Summary of the password algorithm and a C code plug-in for John The Ripper password cracker"] [Next entry: "1.02 Million hashes/second Oracle dictionary and brute force password cracker available"]
August 2005
- Demystifying MS SQL Server & Oracle database server security - 08/01/2005 by 08/01/2005
- 10g Release 2 is available for download for Windows - 08/04/2005 by 08/04/2005
- Database Vendors Shouldn't Kill the Messenger - 08/05/2005 by 08/05/2005
- 10gR2 the CONNECT role has finally been sanitized - 08/06/2005 by 08/06/2005
- slashdot discussion about Mary Ann Davidsons recent news article - 08/08/2005 by 08/08/2005
- Oracle simplifies SOAs - 08/09/2005 by 08/09/2005
- Hashattack - Oracle password tool update to version 2.0 - 08/11/2005 by 08/11/2005
- Prime number researchers put encryption algorithms such as RSA at risk - 08/12/2005 by 08/12/2005
- The rise of Oracle blogging - 08/14/2005 by 08/14/2005
- Two excellent papers on a new method to combat parameter validation and SQL Injection - 08/15/2005 by 08/15/2005
- OPatch, wherefore art thou? - 08/16/2005 by 08/16/2005
- My site and Blog are available again - 08/17/2005 by 08/17/2005
- Doug talks again about ? and catpatch.sql - 08/18/2005 by 08/18/2005
- Radoslav Rusinov's Blog and mod_plsql passwords in clear text - 08/19/2005 by 08/19/2005
- Red Database Security has released a standalone Oracle password cracker - 08/22/2005 by 08/22/2005
- A second thread on c.d.o.s. about the Oracle password algorithm - 08/23/2005 by 08/23/2005
- A perl script to brute force database connections - 08/24/2005 by 08/24/2005
- Full disclosure list: Summary of the password algorithm and a C code plug-in for John The Ripper password cracker - 08/25/2005 by 08/25/2005
- Alex has released version 1.1 of Checkpwd - the Oracle dictionary password cracker - 08/26/2005 by 08/26/2005
- 1.02 Million hashes/second Oracle dictionary and brute force password cracker available - 08/27/2005 by 08/27/2005
- A career change and some site revamping - 08/29/2005 by 08/29/2005
- Alex has added a page to compare the available Oracle password crackers - 08/31/2005 by 08/31/2005
Archives
Syndication
Powered by gm-rss 2.0.0
