标签 ‘Password’ 下的日志

Database Password Hashes Cracking

信息来源: WEB安全手册
作者: sid
SQL Server 2000:-
SELECT password from master.dbo.sysxlogins where name='sa'
0×010034767D5C0CFA5FDCA28C4A56085E65E882E71CB0ED250341
2FD54D6119FFF04129A1D72E7C3194F7284A7F3A

0×0100- constant header
34767D5C- salt
0CFA5FDCA28C4A56085E65E882E71CB0ED250341- case senstive hash
2FD54D6119FFF04129A1D72E7C3194F7284A7F3A- upper case hash
crack the upper case hash in 'cain and abel' and then work the case sentive hash

Oracle 11g Password Sniffing and Cracking

信息来源: Tr4c3

It’s now possible for us to do sniffing oracle 11g password and cracking at the same time. If the old version of Cain & abel doesn’t support oracle 11g , just try the newest version of it , Cain & Abel 4.9.25 . It supports oracle 11g sniffing and password extractor. The thing that makes it works is the new module for Oracle TNS 11g (AES-192) in Oracle TNS sniffer filter has been recently added.