Penetration Testing mailing list archives

Re: Oracle hash-list?

From: "Jeroen" <jeroen () isvet nl>
Date: Wed, 16 Mar 2005 18:59:05 +0100

Steven DeFord <mailto:security.willworker () gmail com> wrote:

1)  What's the hashing algorithm?


Unknown, it's proprietary.

2)  Does Oracle not use salts in their passwords?

Also unknown...


Badger, Jared <mailto:Jared.Badger () acs-inc com> wrote:

You may want to check out rainbowcrack.com.  They have
precomputed hashes up to 14 characters long on an amazing
character set.  No specific mention of Oracle, but perhaps
Oracle uses MD5?


So no, unfortunately this isn't the case :(

Greets,

Jeroen

Current thread:

Oracle hash-list? Jeroen (Mar 15)
- Re: Oracle hash-list? Pieter Danhieux (Mar 16)
  - Re: Oracle hash-list? Steven DeFord (Mar 16)
    - Re: Oracle hash-list? Joshua Wright (Mar 21)
- <Possible follow-ups>
- Re: Oracle hash-list? Jeroen (Mar 16)
  - Re: Oracle hash-list? Nexus (Mar 21)
- RE: Oracle hash-list? McAllister, Andrew (Mar 21)
- Re: Oracle hash-list? James Hackett (Mar 21)