# Enumeration

> Guides for enumerating Oracle TNS listeners, SIDs, and services

- **URL:** https://hackindex.io/services/oracle/enumeration
- **Service:** [Oracle](https://hackindex.io/services/oracle.md)
- **Published:** 2026-02-07
- **Updated:** 2026-03-29

Oracle enumeration targets the TNS listener on port 1521 to discover SIDs, service names, and version details. The listener itself often leaks the Oracle version, OS platform, and registered services before any authentication.

SID guessing and brute-forcing with tools like odat and sidguess reveal database instances. Once a valid SID is known, enumerate users, roles, and privileges. Default accounts (SCOTT, DBSNMP, SYSTEM) with known passwords are common on unpatched or development instances.

## Guides

- [Nmap Oracle TNS Listener Enumeration](https://hackindex.io/services/oracle/enumeration/nmap-tns-listener-enumeration.md)
- [Oracle Listener Enumeration with ODAT](https://hackindex.io/services/oracle/enumeration/oracle-listener-enumeration-with-odat.md)
- [tnsping and sqlplus Connectivity Checks](https://hackindex.io/services/oracle/enumeration/tnsping-and-sqlplus-connection-checks.md)