DB - Password Hack

EnglishVersion


Neste post escrevo como restaurar contas "lockadas" - mesmo quando nao se sabe a password do utilizador.


Password reset


A abordagem passa por ir buscar a password actual encriptada, e fazer um reset by values, partilho em seguida os comandos e como fazer isso.



.SQL>  select username, account_status from dba_users where username in ('DBSNMP','SYSMAN');

USERNAME                       ACCOUNT_STATUS
------------------------------ --------------------------------
DBSNMP                         EXPIRED(GRACE)
SYSMAN                         EXPIRED(GRACE)

SQL> set lines 300
SQL> SELECT 'ALTER USER '|| name ||' IDENTIFIED BY VALUES '''|| spare4 ||';'|| password ||''';' 
FROM sys.user$ WHERE name in ('DBSNMP','SYSMAN');

'ALTERUSER'||NAME||'IDENTIFIEDBYVALUES'''||SPARE4||';'||PASSWORD||''';'
-------------------------------------------------------------------------
ALTER USER DBSNMP IDENTIFIED BY VALUES 'S:2187C6176DE1C89581C55DA01FD8F1339008DD5D9B459CC6CDF0D8FCA5DE;FFF45BB2C0C327EC';
ALTER USER SYSMAN IDENTIFIED BY VALUES 'S:90F0F31AE7896B739AA54CD7CA2A1DC4848F242E3920C6463E8041DFCA6E;2CA614501F09FCCC';

SQL> ALTER USER DBSNMP IDENTIFIED BY VALUES 'S:2187C6176DE1C89581C55DA01FD8F1339008DD5D9B459CC6CDF0D8FCA5DE;FFF45BB2C0C327EC';
User altered.

SQL> ALTER USER SYSMAN IDENTIFIED BY VALUES 'S:90F0F31AE7896B739AA54CD7CA2A1DC4848F242E3920C6463E8041DFCA6E;2CA614501F09FCCC';
User altered.

SQL> select username, account_status from dba_users where username in ('DBSNMP','SYSMAN');

USERNAME                       ACCOUNT_STATUS
------------------------------ --------------------------------
DBSNMP                         OPEN
SYSMAN                         OPEN


Obrigado pela leitura, espero que este post o tenha ajudado.
Rogerio

Comments