Call: +44 (0)1904 557620 Call

Pete Finnigan's Oracle Security Weblog

This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.

[Previous entry: "Oracle Database security checklist from Oracle"] [Next entry: "Pete Finnigan is back after a week away from blogging!"]

orabf the Oracle password cracker">0rm has updated orabf the Oracle password cracker

I just saw that 0rm has updated his excellent Oracle password cracker orabf to version 0.7.4. The cracker has had some new features added. These can be summarised as follows:

An option has been added to allow arbitary character sets to be specified from a file
An option has been added to try Oracle passwords, i.e. ascii + digits + #$_
The name of the resume file has been changed to avoid leaking the hash when running the cracker

If you use this great crackre then it is worth going and getting an update version