mailing list archives
Re: [PEN-TEST] Oracle USER$ password hashes
From: Michael Owen <mowen () COSTCO COM>
Date: Thu, 9 Nov 2000 16:44:36 -0800
- is there really a salt (just install two users with the same PW)
Yes. I created 10 users with the same PW, and all had different hashes.
- some more plain-text/ciphertext pairs. maybe some special
sequences (e.g. aaaaaaaa, a) would also help.
126.96.36.199.0 on NT
With this data some more research could be done.
The other method would be the disassembling of the cryptocode in the
Oracle program (which I'm not really eager to do).
Neither am I, which is why I'm posting this so someone else can do the work
:) In January I might have time to take a look into it if anyone still has
an interest in it.
Re: [PEN-TEST] Oracle USER$ password hashes Pawel Krawczyk (Nov 11)
[PEN-TEST] Oracle USER$ password hashes (Summary) Olle Segerdahl (Nov 14)
Re: [PEN-TEST] Oracle USER$ password hashes Michael Owen (Nov 11)