Oracle Applications - How to Hack Oracle Database Apps Password

Well, this post may not be liked by the DBA community. Here are the simple steps to hack the apps user database password for your ERP/oracle applications system. This will work most likely unless the implementer was smart enough when creating the Custom top/application

1. Create a new concurrent program, a HOST based concurrent program in your custom application

        a. Create a shell script HACK.prog as given below:

#/bin/ksh

#####################################################################

PROGRAM_NAME=`basename $0`

echo $PROGRAM_NAME "has started"

echo "Database user/passwd is $1"

#####################################################################

         b. Copy HACK.prog to $CUSTOM_TOP/bin


         c. Create an Concurrent Program Executable 'Test Conc Program' in Custom Application


         d. Create a Concurrent Program Definition 'Test Conc Program' in Custom Application using the

             executable created in Step c 

         e. Attach the concurrent program to the desired 'Request Group' and submit it.

The output of the concurrent program run will give you the apps database username/pwd.

PS: Internals are not exposed as part of this post.

-Suman
http://www.thotasuman.com/