Tag Info

New answers tagged

0

Here you can find how to generate the password hash. (This algorithm worked both on version 11.2 and 12.1 when I tried with some simple examples.) The next challenge is - as already mentioned -, to try all possible combinations of lowercase and uppercase letters in a password, if you want to cover everything. This will not be a single query, but some PL/SQL ...


1

I don't think this is possible for current versions of Oracle. What I understand happens is that Oracle generates an instance-specific salt and adds this to the passwords being hashed using the SHA1 algorithm, the result of which is stored as the hashed password. See for example http://marcel.vandewaters.nl/oracle/security/password-hashes for information ...


1

What if user has login "SCOTT" and password "ScoTt"? Do you still need to find this one? I think what you really need is to set password_verify_function in users profile. See http://docs.oracle.com/cd/E25054_01/network.1111/e16543/authentication.htm#i1007341 for more info.


3

If you only need to track database access, maybe collecting schema stability locks with extended events is enough. I blogged this idea last week for a totally different reason (tracking unused objects) but the script can be adapted to fit your needs. You can find it here. Basically, it reads an extended events session using the streaming api and then ...



Top 50 recent answers are included