Instantly share code, notes, and snippets.

Embed
What would you like to do?
Decrypt passwords stored in Oracle SQL Developer.
import javax.crypto.*;
import javax.crypto.spec.*;
import java.security.*;
/**
* Decrypt passwords stored in Oracle SQL Developer.
* This is intended for password recovery.
*
* Passwords are stored in ~/.sqldeveloper/system2.1.1.64.39/o.jdeveloper.db.connection.11.1.1.2.36.55.30/connections.xml
*/
public class Decrypt {
public static byte[] decryptPassword(byte[] result) throws GeneralSecurityException {
byte constant = result[0];
if (constant != (byte)5) {
throw new IllegalArgumentException();
}
byte[] secretKey = new byte[8];
System.arraycopy(result, 1, secretKey, 0, 8);
byte[] encryptedPassword = new byte[result.length - 9];
System.arraycopy(result, 9, encryptedPassword, 0, encryptedPassword.length);
byte[] iv = new byte[8];
for (int i = 0; i < iv.length; i++) {
iv[i] = 0;
}
Cipher cipher = Cipher.getInstance("DES/CBC/PKCS5Padding");
cipher.init(Cipher.DECRYPT_MODE, new SecretKeySpec(secretKey, "DES"), new IvParameterSpec(iv));
return cipher.doFinal(encryptedPassword);
}
public static void main(String [] args) {
if (args.length != 1) {
System.err.println("Usage: java Decrypt <password>");
System.exit(1);
}
if (args[0].length() % 2 != 0) {
System.err.println("Password must consist of hex pairs. Length is odd (not even).");
System.exit(2);
}
byte [] secret = new byte[args[0].length() / 2];
for (int i = 0; i < args[0].length(); i += 2) {
String pair = args[0].substring(i, i + 2);
secret[i / 2] = (byte)(Integer.parseInt(pair,16));
}
try {
System.out.println(new String(decryptPassword(secret)));
} catch (GeneralSecurityException e) {
e.printStackTrace();
System.exit(3);
}
}
}
@maaaaz

This comment has been minimized.

Show comment
Hide comment
@maaaaz

maaaaz Jul 23, 2015

Great snippet, thank you.

FYI I managed to produce a Python version of it, along with the version 4 support https://github.com/maaaaz/sqldeveloperpassworddecryptor

Cheers.

maaaaz commented Jul 23, 2015

Great snippet, thank you.

FYI I managed to produce a Python version of it, along with the version 4 support https://github.com/maaaaz/sqldeveloperpassworddecryptor

Cheers.

@dipack-v

This comment has been minimized.

Show comment
Hide comment
@dipack-v

dipack-v Aug 8, 2017

Worked ! Thanks for sharing

dipack-v commented Aug 8, 2017

Worked ! Thanks for sharing

@Priyabrata169

This comment has been minimized.

Show comment
Hide comment
@Priyabrata169

Priyabrata169 Oct 7, 2017

I am not getting how to execute this code..I am not so good at java..just let me know where to put my hexadecimal password

Priyabrata169 commented Oct 7, 2017

I am not getting how to execute this code..I am not so good at java..just let me know where to put my hexadecimal password

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment