Nmap Development mailing list archives

[NSE] Dumping Oracle and ms-sql password hashes


From: Patrik Karlsson <patrik () cqure net>
Date: Wed, 10 Aug 2011 23:20:18 +0200

Hi list,

I'm attaching two new scripts that attempt to dump the database password hashes from Oracle and MS-SQL.
The results are returned in format suitable for John the ripper and both scripts support storing the results to file.
This way the files can be passed directly to JTR for cracking.
As with the oracle-query script I would appreciate *a lot* if people could help out testing as it makes use of the new 
query functionality.

Cheers,
Patrik

Attachment: oracle-dump-hashes.nse
Description:

Attachment: ms-sql-dump-hashes.nse
Description:



--
Patrik Karlsson
http://www.cqure.net
http://www.twitter.com/nevdull77

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/

Current thread: