Penetration Testing: Re: Oracle hash rainbowtables

[Fabien Kraemer <kraemer () darwin2 dyndns org>]

Hello,

The problem is that Oracle hash depend on the login name. So you have to 
 generate rainbow table for each login. A good idea is to create 
rainbow table for the defaults system account like : sys, system etc...
I made a patch for rainbowcrack but i did not have time to optimize it 
so it s pretty slow: 300 000 C/s on a pentium M 1.6 ghz compared to more 
than 600 000 c/s for orabf.
Good luck ;)


Carl-Johan Bostorp wrote:
> Hello peeps,
>
> Does anybody have the patch to rainbowcrack to build Oracle
> rainbowtables? Or does anybody know of any service that does what
> rainbowcrack-online does but with a SYS/SYSTEM Oracle-hash?
>
> /C-J
>
> ------------------------------------------------------------------------------
> Audit your website security with Acunetix Web Vulnerability Scanner: 
>
> Hackers are concentrating their efforts on attacking applications on your 
> website. Up to 75% of cyber attacks are launched on shopping carts, forms, 
> login pages, dynamic content etc. Firewalls, SSL and locked-down servers are 
> futile against web application hacking. Check your website for vulnerabilities 
> to SQL injection, Cross site scripting and other web attacks before hackers do! 
> Download Trial at:
> http://www.securityfocus.com/sponsor/pen-test_050831
> -------------------------------------------------------------------------------

------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner: 

Hackers are concentrating their efforts on attacking applications on your 
website. Up to 75% of cyber attacks are launched on shopping carts, forms, 
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are 
futile against web application hacking. Check your website for vulnerabilities 
to SQL injection, Cross site scripting and other web attacks before hackers do! 
Download Trial at:
http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------