Hacking the Oracle SYS password

[email protected] 16 Feb 2007 22:43:27 -0000

Newsgroups	gmane.comp.security.vulnerabilities
Message-ID	<[email protected]>

Hi Everyone,

I have just posted a new paper written by Miladin Modrakovic to my website that demonstrates how to use the BBED Block Editor tool to change the SYS password to a known hash value without connecting to the database. The paper is at http://www.petefinnigan.com/bbed_used_to_change_sys_password.doc 

cheers

Pete