SIDGuesser

Guess Oracle database SIDs.

KaliParrotlow

pkg: sidguesser

SIDGuesser brute-forces Oracle SIDs against a TNS listener — a prerequisite for further Oracle attacks.

Syntax

sidguesser -i {host} -p {port}

Example

sidguesser -i 10.0.0.5 -p 1521

Brute-forces valid SIDs on the Oracle listener.

Advantages
  • Unlocks Oracle enumeration
  • Simple
Disadvantages
  • Oracle-only
  • Wordlist-bound
Tags
#oracle#database

Official docs: SIDGuesser

Related commands

Frequently asked questions

What is SIDGuesser used for?
SIDGuesser brute-forces Oracle SIDs against a TNS listener — a prerequisite for further Oracle attacks.
What is an example SIDGuesser command?
A common example is: sidguesser -i 10.0.0.5 -p 1521 — Brute-forces valid SIDs on the Oracle listener.
Is SIDGuesser part of Kali Linux?
Yes. SIDGuesser ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install sidguesser.
What category of security tool is SIDGuesser?
SIDGuesser is a Database Assessment tool with a low-risk profile when run against a live target.

Try recon tools live

Run real scans against a domain you control, stage by stage.

Open the lab →