What is the default Oracle administrator?

Recently, the new version of JDeveloper 11g has just been released. by reading the relevant Oracle documents, we found that the deployment and release methods of the ADF application have made some changes in the new version. So I want to conduct research and testing today, start WebLogic that comes with JDeveloper and open the console page. Enter the username and password weblogic/weblogic to log on. However, the user name and password are incorrect. After a few unsuccessful tests, I tried to help the Oracle official documents. In e13852.pdf, I found a description of the user name and password.

The default administrator password of Oracle was modified in WebLogic 11g, namely WebLogic10.3.1). Here, welcome1 is provided. However, after testing on the console logon page, it is still found that the logon fails, then go to boot. properties file... \ System11.1.1.1.33.54.07 \ DefaultDomain \ servers \ DefaultServer \ security) to check whether the previous version has changed. we found the difference from the previous version. The user name and password of the previous version adopt the 3DES encryption method, while the new version adopts the AES encryption.

Finally, after verification, in the new version of WebLogic, the user's password must contain numbers. Therefore, Oracle sets the default administrator password of WebLogic to weblogic1, rather than welcome1, as described in this document, that is, the username and password are weblogic/weblogic1. However, the above content is all tested in WebLogic of the new version of JDeveloper 11g, and the independent version of WebLogic still needs to be verified later.

When installing ORACLE, if the password is not reset for the following users, the default password is as follows:
Username/password: sys/change_on_install logon identity: SYSDBA or SYSOPER
Note: NORMAL logon is not allowed. It can be used as the Oracle default system administrator system/manager. SYSDBA or NORMAL cannot be used as the SYSOPER logon. It can be used as the Oracle default system administrator sysman/oem_temp. sysman is the oms user name.

By default, the administrator password of Oracle is fixed to facilitate installation and debugging. In the Oracle database, two users with DBA permissions, Sys and System. I found that Oracle databases on many Chinese websites did not change the passwords of these two users, including many large e-commerce websites, we can use this default password to find things we are interested in.

Before testing, we first need to know some relevant knowledge. When we connect to an Oracle database, we need to know its service_name or Sid value, just like mssql. We need to know the database name. So how can we know? Obviously, this is not the case. Here we will first talk about oracle's TNSlistener, which is located between the database Client and the database Server. By default, it listens to port 1521, which can be changed. However, if you use a tcp session to connect to port 1521, oracle will not return its banner. If you enter something, it may even kick you out. Here we need to use tnscmd. pl is a perl program. It can query whether the remote oracle database is enabled (that is, ping), query the version, and query its service name, service status, and database service name, and the accuracy is very high.

If there is anything you don't know about the theory, you can find the relevant materials. Start testing now. The required tools include ActivePerl, Oracle client, Superscan or other software for port scanning, Tnscmd. pl. we first use Superscan to scan hosts opened on port 1521, assuming its IPxx. xx.110.110. What we need to do is to use Tnscmd. pl to query the service name of the remote database. from the above information, we can see that the database service is named ORCL, and then we can remotely connect to it through the sqlplus tool, use the default system/manager or sys/manager (Oracle Default Administrator) as the username and password, and use other commands such as mdsys/mdsys and ctxsys/ctxsys, the Default User and password change with the version.

If the password is correct, the system will prompt connected. If not, change the default user name and password. After my attempt, dbsnmp and dbsnmp can be used. Of course, if the other party has changed the default password, we can only change to another target. However, I found that many of them do not change. This is a security awareness problem.

Appendix Oracle Default Administrator Password
1. Username: sys password: change_on_install
2. User name: system password: manager
3. Username: scott password: tiger

1. Database security risks caused by default Oracle Administrators
2. How to retrieve the Oracle user password
3. Demonstration of left-connected Oracle instances
4. How to optimize Oracle SQL Performance
5. Seven types of Oracle parameters and parameter files