600 Oracle default usernames/passwords available

[Pete Finnigan]

Hi Everyone,

I have just added a page to my site that lists 596 default Oracle users
and their passwords. The list is available as HTML, CSV, SQL insert
statements to load the data into a table, MS Excel spreadsheet and Open
Office spreadsheet. The list can be used to audit your database for
existing default accounts and to check that their passwords are not
still the defaults.

I have also updated the default password check script archive to include
the much bigger list of default users.

The Oracle default password lists can be found here:-
http://www.petefinnigan.com/default/default_password_list.htm
and the tool to check for default passwords can be found here:-
http://www.petefinnigan.com/default/default_password_checker.htm

kind regards

Pete
--
Pete Finnigan (email:pete@petefinnigan.com)
Web site: http://www.petefinnigan.com - Oracle security audit specialists
Oracle security blog: http://www.petefinnigan.com/weblog/entries/index.html
Book:Oracle security step-by-step Guide - see http://store.sans.org for details.