Login Name and Password are sameDisable browser 'Save Password' functionalityHow to secure database passwords in PHP?Secure hash and salt for PHP passwordsBest way to store password in databasepassword security questionHow should I ethically approach user password storage for later plaintext retrieval?Why is char[] preferred over String for passwords?What methods are there for hacking my own PHP login form? Is it secure enough?Ruby on Rails and Oracle sequencesORA-28000: account is locked error in expdp
Interaction between Leyline of Anticipation and Teferi, Time Raveler
What's currently blocking the construction of the wall between Mexico and the US?
Why aren't cotton tents more popular?
Apply brace expansion in "reverse order"
Fedora boot screen shows both Fedora logo and Lenovo logo. Why and How?
When to remove insignificant variables?
Reused Nested Decision Logic - CTE vs Copying Code
Can any NP-Complete Problem be solved using at most polynomial space (but while using exponential time?)
C-152 carb heat on before landing in hot weather?
Why do all the teams that I have worked with always finish a sprint without completion of all the stories?
How can I politely work my way around not liking coffee or beer when it comes to professional networking?
How to get cool night-vision without lame drawbacks?
Swapping rooks in a 4x4 board
Why do some games show lights shine thorugh walls?
What is the origin of Scooby-Doo's name?
What does an Input layer of shape=(None,) or (None,12) actually mean?
Why the feminine "la" in "à la Leonardo DiCaprio", though he is a man?
How does a blind passenger not die, if driver becomes unconscious
What is the better way to use Optional in conditions?
How do I turn off a repeating trade?
How to make clear to people I don't want to answer their "Where are you from?" question?
What reason would an alien civilization have for building a Dyson Sphere (or Swarm) if cheap Nuclear fusion is available?
Why do some professors with PhDs leave their professorships to teach high school?
How much will studying magic in an academy cost?
Login Name and Password are same
Disable browser 'Save Password' functionalityHow to secure database passwords in PHP?Secure hash and salt for PHP passwordsBest way to store password in databasepassword security questionHow should I ethically approach user password storage for later plaintext retrieval?Why is char[] preferred over String for passwords?What methods are there for hacking my own PHP login form? Is it secure enough?Ruby on Rails and Oracle sequencesORA-28000: account is locked error in expdp
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty margin-bottom:0;
We are using Oracle 11gR2 [11.2.0.4] mostly, for package deployment a specific ID's password was needed and at that I put a blind guess with username and as same (password=username),
This was alarming for me, now i want to check same for other users, i have googled but found nothing but to check individual users with their password, Hopefully you got my point?
How can i check this ID's password=username? Any script of code/cursors to check username=password?
Regards,
oracle security oracle11g
edited Mar 25 at 12:04
APC
123k17 gold badges125 silver badges232 bronze badges
asked Mar 25 at 9:36
TaoqirTaoqir
683 gold badges3 silver badges9 bronze badges
add a comment |
We are using Oracle 11gR2 [11.2.0.4] mostly, for package deployment a specific ID's password was needed and at that I put a blind guess with username and as same (password=username),
This was alarming for me, now i want to check same for other users, i have googled but found nothing but to check individual users with their password, Hopefully you got my point?
How can i check this ID's password=username? Any script of code/cursors to check username=password?
Regards,
oracle security oracle11g
edited Mar 25 at 12:04
APC
123k17 gold badges125 silver badges232 bronze badges
asked Mar 25 at 9:36
TaoqirTaoqir
683 gold badges3 silver badges9 bronze badges
One way is that you could follow this link oracle_get_hash_password use sysdba to get a text file with create all users sql script, then write a script (programming language, powershell....) to check if exists one user having hash(username) = hash_password in that text file.
– Pham X. Bach
Mar 26 at 1:20
add a comment |
We are using Oracle 11gR2 [11.2.0.4] mostly, for package deployment a specific ID's password was needed and at that I put a blind guess with username and as same (password=username),
This was alarming for me, now i want to check same for other users, i have googled but found nothing but to check individual users with their password, Hopefully you got my point?
How can i check this ID's password=username? Any script of code/cursors to check username=password?
Regards,
oracle security oracle11g
edited Mar 25 at 12:04
APC
123k17 gold badges125 silver badges232 bronze badges
asked Mar 25 at 9:36
TaoqirTaoqir
683 gold badges3 silver badges9 bronze badges
We are using Oracle 11gR2 [11.2.0.4] mostly, for package deployment a specific ID's password was needed and at that I put a blind guess with username and as same (password=username),
This was alarming for me, now i want to check same for other users, i have googled but found nothing but to check individual users with their password, Hopefully you got my point?
How can i check this ID's password=username? Any script of code/cursors to check username=password?
Regards,
oracle security oracle11g
oracle security oracle11g
edited Mar 25 at 12:04
APC
123k17 gold badges125 silver badges232 bronze badges
asked Mar 25 at 9:36
TaoqirTaoqir
683 gold badges3 silver badges9 bronze badges
edited Mar 25 at 12:04
APC
123k17 gold badges125 silver badges232 bronze badges
asked Mar 25 at 9:36
TaoqirTaoqir
683 gold badges3 silver badges9 bronze badges
edited Mar 25 at 12:04
APC
123k17 gold badges125 silver badges232 bronze badges
edited Mar 25 at 12:04
APC
123k17 gold badges125 silver badges232 bronze badges
edited Mar 25 at 12:04
APC
123k17 gold badges125 silver badges232 bronze badges
123k17 gold badges125 silver badges232 bronze badges
asked Mar 25 at 9:36
TaoqirTaoqir
683 gold badges3 silver badges9 bronze badges
asked Mar 25 at 9:36
TaoqirTaoqir
683 gold badges3 silver badges9 bronze badges
asked Mar 25 at 9:36
TaoqirTaoqir
683 gold badges3 silver badges9 bronze badges
683 gold badges3 silver badges9 bronze badges
One way is that you could follow this link oracle_get_hash_password use sysdba to get a text file with create all users sql script, then write a script (programming language, powershell....) to check if exists one user having hash(username) = hash_password in that text file.
– Pham X. Bach
Mar 26 at 1:20
add a comment |
One way is that you could follow this link oracle_get_hash_password use sysdba to get a text file with create all users sql script, then write a script (programming language, powershell....) to check if exists one user having hash(username) = hash_password in that text file.
– Pham X. Bach
Mar 26 at 1:20
One way is that you could follow this link oracle_get_hash_password use sysdba to get a text file with create all users sql script, then write a script (programming language, powershell....) to check if exists one user having hash(username) = hash_password in that text file.
– Pham X. Bach
Mar 26 at 1:20
One way is that you could follow this link oracle_get_hash_password use sysdba to get a text file with create all users sql script, then write a script (programming language, powershell....) to check if exists one user having hash(username) = hash_password in that text file.
– Pham X. Bach
Mar 26 at 1:20
add a comment |
1 Answer
1
active
oldest
votes
The way you should be able to check this is by extrating a list of usernames from the database and try to initiate a session with the databases where you use the extracted username as both the username and the password you try to login with.
You could use a bash loop to do so for example.
answered Mar 25 at 13:56
Johan LouwersJohan Louwers
32 bronze badges
add a comment |
Your Answer
StackExchange.ifUsing("editor", function ()
StackExchange.using("externalEditor", function ()
StackExchange.using("snippets", function ()
StackExchange.snippets.init();
);
);
, "code-snippets");
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "1"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55334833%2flogin-name-and-password-are-same%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
The way you should be able to check this is by extrating a list of usernames from the database and try to initiate a session with the databases where you use the extracted username as both the username and the password you try to login with.
You could use a bash loop to do so for example.
answered Mar 25 at 13:56
Johan LouwersJohan Louwers
32 bronze badges
add a comment |
The way you should be able to check this is by extrating a list of usernames from the database and try to initiate a session with the databases where you use the extracted username as both the username and the password you try to login with.
You could use a bash loop to do so for example.
answered Mar 25 at 13:56
Johan LouwersJohan Louwers
32 bronze badges
add a comment |
The way you should be able to check this is by extrating a list of usernames from the database and try to initiate a session with the databases where you use the extracted username as both the username and the password you try to login with.
You could use a bash loop to do so for example.
answered Mar 25 at 13:56
Johan LouwersJohan Louwers
32 bronze badges
The way you should be able to check this is by extrating a list of usernames from the database and try to initiate a session with the databases where you use the extracted username as both the username and the password you try to login with.
You could use a bash loop to do so for example.
answered Mar 25 at 13:56
Johan LouwersJohan Louwers
32 bronze badges
answered Mar 25 at 13:56
Johan LouwersJohan Louwers
32 bronze badges
answered Mar 25 at 13:56
Johan LouwersJohan Louwers
32 bronze badges
answered Mar 25 at 13:56
Johan LouwersJohan Louwers
32 bronze badges
32 bronze badges
add a comment |
add a comment |
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55334833%2flogin-name-and-password-are-same%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
One way is that you could follow this link oracle_get_hash_password use sysdba to get a text file with create all users sql script, then write a script (programming language, powershell....) to check if exists one user having hash(username) = hash_password in that text file.
– Pham X. Bach
Mar 26 at 1:20