Showing posts with label oracle. Show all posts
Showing posts with label oracle. Show all posts
Monday, April 24, 2017
Oracle Password Auditor Oracle Password Recovery Auditing Tool
Oracle Password Auditor Oracle Password Recovery Auditing Tool
Oracle Password Auditor is the FREE Oracle database password recovery and auditing software.
It not only helps you to recover lost or forgotten Oracle database password but also audit Oracle database setup in an corporate environment by discovering the weak password configurations.
During auditing operation, it detects special cases such as Account Lockout, Incorrect Oracle SID, Session Limit problems etc. In such cases it stops the operation rather than blindly continuing with the errors. Penetration testers can use this feature to detect any account lockout issues and further verify if it is susceptible to such DDOS attacks.
It uses simple & faster dictionary based password recovery method. Also in the beginning it can automatically check for well known default user/password combinations.
It is very easy to use with a cool GUI interface and a handy tool for IT administrators & Penetration Testers.
It works on wide range of platforms starting from Windows XP to Windows 8.
Download Oracle Password Auditor
Go to link download
Saturday, April 1, 2017
ODAT Oracle Database Attacking Tool
ODAT Oracle Database Attacking Tool
ODAT (Oracle Database Attacking Tool) is an open source penetration testing tool that test the security of Oracle Databases remotely.
Usage examples of ODAT:
- You have an Oracle database listening remotely and want to find valid SIDs and credentials in order to connect to the database
- You have a valid Oracle account on a database and want to escalate your privileges (ex: SYSDBA)
- You have a valid Oracle account and want to execute commands on the operating system hosting this DB (ex: reverse shell)
Features
Thanks to ODAT, you can:
Thanks to ODAT, you can:
- search valid SID on a remote Oracle Database listener via:
- a dictionary attack
- a brute force attack
- ALIAS of the listener
- search Oracle accounts using:
- a dictionary attack
- each Oracle user like the password (need an account before to use this attack)
- execute system commands on the database server using:
- DBMS_SCHEDULER
- JAVA
- external tables
- oradbg
- download files stored on the database server using:
- UTL_FILE
- external tables
- CTXSYS
- upload files on the database server using:
- UTL_FILE
- DBMS_XSLPROCESSOR
- DBMS_ADVISOR
- delete files using:
- UTL_FILE
- send/reveive HTTP requests from the database server using:
- UTL_HTTP
- HttpUriType
- scan ports of the local server or a remote server using:
- UTL_HTTP
- HttpUriType
- UTL_TCP
- exploit the CVE-2012-313 (http://cvedetails.com/cve/2012-3137)
- pickup the session key and salt for arbitrary users
- attack by dictionary on sessions
Download ODAT
Go to link download
Friday, March 3, 2017
Oracle Virtualbox Crack For Windows 10 Operating Systems
Oracle Virtualbox Crack For Windows 10 Operating Systems
Oracle Virtualbox Crack For Windows 10 Operating Systems
Go to link download
Subscribe to:
Posts (Atom)