Database Software

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

600 Oracle default usernames/passwords available

PeteFinniganNov 16 2004 — edited Jan 12 2005

Hi Everyone,

I have just added a page to my site that lists 596 default Oracle users
and their passwords. The list is available as HTML, CSV, SQL insert
statements to load the data into a table, MS Excel spreadsheet and Open
Office spreadsheet. The list can be used to audit your database for
existing default accounts and to check that their passwords are not
still the defaults.

I have also updated the default password check script archive to include
the much bigger list of default users.

The Oracle default password lists can be found here:-
http://www.petefinnigan.com/default/default_password_list.htm
and the tool to check for default passwords can be found here:-
http://www.petefinnigan.com/default/default_password_checker.htm

kind regards

Pete
--
Pete Finnigan (email:pete@petefinnigan.com)
Web site: http://www.petefinnigan.com - Oracle security audit specialists
Oracle security blog: http://www.petefinnigan.com/weblog/entries/index.html
Book:Oracle security step-by-step Guide - see http://store.sans.org for details.

Locked Post

New comments cannot be posted to this locked post.

Locked on Feb 9 2005

Added on Nov 16 2004

#database-security, #database-security-general

1 comment

1,324 views