Oracle 11 Auth_session and Auth_password

[gbox26]

i think easiest way to crack is that we just hash our passwords and then try to decrypt auth_session with our hashed password and check for valid padding in begging of decrypted session. for ver 11.