10-27-2015, 04:04 AM
Oracle 12c uses the "12a" type, Spiderlabs posted sample cracking code in python on github. By default Oracle also stores the S: hash as well which is already supported, and would be far easier to crack. A network capture might only get the T: type though.
https://www.trustwave.com/Resources/Spid...rd-hashes/
https://github.com/SpiderLabs/oracle_pwd_tools
https://www.trustwave.com/Resources/Spid...rd-hashes/
https://github.com/SpiderLabs/oracle_pwd_tools