Follow us on Twitter!
Imagination is more valuable than knowledge - Albert Einstein
Thursday, April 24, 2014
Navigation
Home
HellBoundHackers Main:
HellBoundHackers Find:
HellBoundHackers Information:
Learn
Communicate
Submit
Shop
Challenges
HellBoundHackers Exploit:
HellBoundHackers Programming:
HellBoundHackers Think:
HellBoundHackers Track:
HellBoundHackers Patch:
HellBoundHackers Other:
HellBoundHackers Need Help?
Other
Members Online
Total Online: 14
Guests Online: 13
Members Online: 1

Registered Members: 82889
Newest Member: Geriztul
Latest Articles
View Thread

HellBound Hackers | Computer General | Networking

Author

oracle auth sniffing


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 08-12-06 12:32
I have an application which connects to a oracle database server. I know the user name but I need a password. I've user Ethereal and sniffed something. I have a program to crack oracle hashes, but I don't know how to get the hash.

Thanks for help
Author

RE: oracle auth sniffing

Uber0n
Member



Posts: 1963
Location: Sweden‭‮
Joined: 13.06.06
Rank:
Hacker Level 3
Posted on 08-12-06 17:57
What have you found then?


img230.imageshack.us/img230/724/uber0nsig3hj6.gif
http://uber0n.web. . .
Nope http://uber0n.webs.com/
Author

RE: what I got


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 11-12-06 11:45
......AUTH_SESSKEY.@@902 0BCFB66E 26E30558 8B1DE971 BCBB139A EC7DCAD1 366FBACF 77C16816 BC369....AUTH_VFR_DATA.. .9.............. ................ .
Author

RE: oracle auth sniffing


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 11-12-06 12:56
Found lots of stuff. Check this out:
http://www.freelists.org/archives/dbsec/11-2006/msg00005.html

There's a code in there which decrypts your stuff.

Have fun

Cheers


Author

RE: problem


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 12-12-06 12:30
The problem is that I have to know the password hash. And I don't know it.
Author

RE: oracle auth sniffing


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 12-12-06 14:18
http://www.sans.org/reading_room/special/index.php?id=oracle_pass

is supposed to be a full paper/how-to. Give it a try.