I just saw on orablogs Tug's post to his Oracle blog titled http://www.grallandco.com/blog/archives/2005/01/do_not_remember.html - (broken link) Do not remember the default password... here a list... and went over to comment but couldn't find how to comment. I wanted to concur that the http://www.cirt.net/cgi-bin/passwd.pl - (broken link) cirt default password page is excellent for covering many types of software. The page says it has passwords for 271 vendors and 1386 default passwords.
I just want to also mention here that I have probably the biggest list of Oracle default passwords on the net. There is also a simple tool for checking your databases for existence of any of these Oracle default username / passwords.
http://www.grallandco.com/blog/archives/2005/01/do_not_remember.html - (broken link) Thanks for the tip Tug on the Cirt site.
Blog
Pete Finnigan's Oracle Security Weblog
This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.
[Previous entry: "Brian talks about site registration"] [Next entry: "Steve talked about an undocumented page on his site"]
January 2005
- Oracle security and content management - 01/01/2005 by 01/01/2005
- Some updates to the Oracle default password list - 01/02/2005 by 01/02/2005
- Nice article on SQL Injection - 01/03/2005 by 01/03/2005
- Frank has a review of Bruce Schneier book "Beyond Fear" - 01/04/2005 by 01/04/2005
- We have moved - 01/05/2005 by 01/05/2005
- Schema difference tool - 01/07/2005 by 01/07/2005
- CREATE SCHEMA - does it do what it says on the tin? - 01/08/2005 by 01/08/2005
- Becoming another user - 01/09/2005 by 01/09/2005
- A nice simple DBMS_OBFUSCATION_TOOLKIT example by Nimzo Benoni - 01/10/2005 by 01/10/2005
- Howard Rogers has a good article about database links - 01/11/2005 by 01/11/2005
- Amis blog has an entry all about OpenVPN - 01/12/2005 by 01/12/2005
- Sarbanes Oxley and Oracle - 01/13/2005 by 01/13/2005
- Adam Martins Oracle password cracker seems to not be available - 01/14/2005 by 01/14/2005
- Great tool for security checking a PC - 01/15/2005 by 01/15/2005
- Penetration testing research and cost effective security - 01/16/2005 by 01/16/2005
- HTML Kit - 01/17/2005 by 01/17/2005
- Security alert released by Pete Finnigan - 01/18/2005 by 01/18/2005
- Alexander Kornbrust has an advisory for CPU - January 2005 - 01/19/2005 by 01/19/2005
- Search Oracle talks about the Critical Patch Update - 01/20/2005 by 01/20/2005
- Translation of www.Heise.de German news article - 01/21/2005 by 01/21/2005
- oops missed off the link - 01/22/2005 by 01/22/2005
- Steve Kost has released an Integrigy advisory for CPU - January 2005 - 01/23/2005 by 01/23/2005
- Tom talks about proxy users - 01/24/2005 by 01/24/2005
- Updated internals and Oracle applications security page - 01/25/2005 by 01/25/2005
- default passwords and Oracle default passwords - 01/26/2005 by 01/26/2005
- Frank has a great blog entry about web application security - 01/27/2005 by 01/27/2005
- Interesting thread on Oracle-l about ftp'ing data into the database - 01/28/2005 by 01/28/2005
- Some interesting comments about CPU - Jan 2005 on c.d.o.s - 01/29/2005 by 01/29/2005
- Andrej Koelewijn talks about google stopping comment spam - 01/30/2005 by 01/30/2005
- Happy birthday to orablogs.com - 01/31/2005 by 01/31/2005
Archives
Syndication
Powered by gm-rss 2.0.0
