DB - Hack password

Versao Portuguesa

In this post i'm sharing how to unlock database accounts  - even when the password is not known.

Unlock Account

The aproach is to get the password encrypted, then reset by values, next  you can find the commands to do that .

.SQL>  select username, account_status from dba_users where username in ('DBSNMP','SYSMAN');

USERNAME                       ACCOUNT_STATUS
------------------------------ --------------------------------
DBSNMP                         EXPIRED(GRACE)
SYSMAN                         EXPIRED(GRACE)

SQL> set lines 300
SQL> SELECT 'ALTER USER '|| name ||' IDENTIFIED BY VALUES '''|| spare4 ||';'|| password ||''';' 
FROM sys.user$ WHERE name in ('DBSNMP','SYSMAN');

'ALTERUSER'||NAME||'IDENTIFIEDBYVALUES'''||SPARE4||';'||PASSWORD||''';'
-------------------------------------------------------------------------
ALTER USER DBSNMP IDENTIFIED BY VALUES 'S:2187C6176DE1C89581C55DA01FD8F1339008DD5D9B459CC6CDF0D8FCA5DE;FFF45BB2C0C327EC';
ALTER USER SYSMAN IDENTIFIED BY VALUES 'S:90F0F31AE7896B739AA54CD7CA2A1DC4848F242E3920C6463E8041DFCA6E;2CA614501F09FCCC';

SQL> ALTER USER DBSNMP IDENTIFIED BY VALUES 'S:2187C6176DE1C89581C55DA01FD8F1339008DD5D9B459CC6CDF0D8FCA5DE;FFF45BB2C0C327EC';
User altered.

SQL> ALTER USER SYSMAN IDENTIFIED BY VALUES 'S:90F0F31AE7896B739AA54CD7CA2A1DC4848F242E3920C6463E8041DFCA6E;2CA614501F09FCCC';
User altered.

SQL> select username, account_status from dba_users where username in ('DBSNMP','SYSMAN');

USERNAME                       ACCOUNT_STATUS
------------------------------ --------------------------------
DBSNMP                         OPEN
SYSMAN                         OPEN

Thank you for reading, hope this post was helpful.
Rogerio