Try this sql script:
/*
* DBA Skeleton Key
*
* This script will allow one to crash into any Oracle account.
* The only restriction is that the invoker must have the
* 'alter any user' system priviledge.
*/
accept usrname char prompt 'Enter account name to crack: '
set verify off
break on name
column gname new_value _name noprint
select substr(global_name,1,instr(global_name,'.')-1)gname
from global_name;
clear breaks
break on password
column password new_value _pwd noprint
select password from dba_users
where username = upper('&usrname');
alter user &usrname identified by dummy;
connect &usrname/dummy@&_name
alter user &usrname identified by values '&_pwd';
@login
____________________Reply Separator____________________
Author: "Mark Leith" <[EMAIL PROTECTED]>
Date: 12/17/2002 3:34 AM
Check the post-it note on their monitor?
:)
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Paulo Gomes
Sent: 17 December 2002 10:55
To: Multiple recipients of list ORACLE-L
Subject: RE: password
he can't but he can change it to a new one and then put the old back on
-----Original Message-----
From: faisal ahmad [mailto:[EMAIL PROTECTED]]
Sent: ter�a-feira, 17 de Dezembro de 2002 4:09
To: Multiple recipients of list ORACLE-L
Subject: password
how can a dba see the password of a user.
----------------------------------------------------------------------------
The new MSN 8: smart spam protection and 2 months FREE* -- Please see
the official ORACLE-L FAQ: http://www.orafaq.com -- Author: faisal ahmad
INET: [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051
http://www.fatcity.com San Diego, California -- Mailing list and web hosting
services -------------------------------------------------------------------
-- To REMOVE yourself from this mailing list, send an E-Mail message to:
[EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message
BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list
you want to be removed from). You may also send the HELP command for other
information (like subscribing).
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=iso-8859-1" http-equiv=Content-Type>
<META content="MSHTML 5.00.3510.1100" name=GENERATOR></HEAD>
<BODY>
<DIV><FONT color=#0000ff face=Arial size=2><SPAN class=923033611-17122002>Check
the post-it note on their monitor? </SPAN></FONT></DIV>
<DIV><FONT color=#0000ff face=Arial size=2><SPAN
class=923033611-17122002></SPAN></FONT> </DIV>
<DIV><FONT color=#0000ff face=Arial size=2><SPAN
class=923033611-17122002>:)</SPAN></FONT></DIV>
<BLOCKQUOTE style="MARGIN-RIGHT: 0px">
<DIV align=left class=OutlookMessageHeader dir=ltr><FONT face=Tahoma
size=2>-----Original Message-----<BR><B>From:</B> [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]<B>On Behalf Of </B>Paulo Gomes<BR><B>Sent:</B> 17
December 2002 10:55<BR><B>To:</B> Multiple recipients of list
ORACLE-L<BR><B>Subject:</B> RE: password<BR><BR></DIV></FONT>
<DIV><FONT color=#0000ff face=Arial size=2><SPAN class=201495710-17122002>he
can't but he can change it to a new one and then put the old back
on</SPAN></FONT></DIV>
<BLOCKQUOTE>
<DIV align=left class=OutlookMessageHeader dir=ltr><FONT face=Tahoma
size=2>-----Original Message-----<BR><B>From:</B> faisal ahmad
[mailto:[EMAIL PROTECTED]]<BR><B>Sent:</B> ter�a-feira, 17 de
Dezembro de 2002 4:09<BR><B>To:</B> Multiple recipients of list
ORACLE-L<BR><B>Subject:</B> password<BR><BR></DIV></FONT>
<DIV>
<DIV>how can a dba see the password of a user.</DIV></DIV><BR clear=all>
<HR>
The new <A href="http://g.msn.com/8HMAEN/2018">MSN 8:</A> smart spam
protection and 2 months FREE* -- Please see the official ORACLE-L FAQ:
http://www.orafaq.com -- Author: faisal ahmad INET:
[EMAIL PROTECTED] Fat City Network Services -- 858-538-5051
http://www.fatcity.com San Diego, California -- Mailing list and web hosting
services
--------------------------------------------------------------------- To
REMOVE yourself from this mailing list, send an E-Mail message to:
[EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message
BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list
you want to be removed from). You may also send the HELP command for other
information (like subscribing). </BLOCKQUOTE></BLOCKQUOTE></BODY></HTML>
--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author:
INET: [EMAIL PROTECTED]
Fat City Network Services -- 858-538-5051 http://www.fatcity.com
San Diego, California -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).