Miladin Modrakovic's blog

"Fixing" SYS for hacking purposes


How does one change Oracle's SYS password without having to login into the database? Is it possible?
The answer is, YES! All you need is a binary fiile editor and some knowledge of Oracle's internals.

This document is to be used only for testing purposes and should not be used in a production environment. The purpose is to show the audience how hackers can gain access to your system without knowing it - and how to prevent it.

Subscribe to RSS - Miladin Modrakovic's blog