tag:blogger.com,1999:blog-18555569.post7256548273157928878..comments2023-06-04T08:07:03.642-03:00Comments on HEXALE (security & reverse engineering): How to decrypt Coldfusion datasource passwordshernanhttp://www.blogger.com/profile/12754761735106237455noreply@blogger.comBlogger6125tag:blogger.com,1999:blog-18555569.post-38099147324653704162012-02-04T11:16:40.743-03:002012-02-04T11:16:40.743-03:00Thanks for the post, it demonstrates the whole pro...Thanks for the post, it demonstrates the whole procedure in details.<br /><a href="http://www.expertsfromindia.com/hire-coldfusion-developers-programmers.htm" rel="nofollow">coldfusion 9 developer</a>CisAnubhavhttps://www.blogger.com/profile/02569005289059360563noreply@blogger.comtag:blogger.com,1999:blog-18555569.post-68599781598281695442011-01-18T07:33:12.809-03:002011-01-18T07:33:12.809-03:00How about Coldfusion MX version 6 ? Is it the same...How about Coldfusion MX version 6 ? Is it the same ?Tomshttp://tom@tomtom.comnoreply@blogger.comtag:blogger.com,1999:blog-18555569.post-63606026286625194782009-04-17T18:36:00.000-03:002009-04-17T18:36:00.000-03:00great info! thanks to anonymous for the script and...great info! thanks to anonymous for the script and thanks to hernan for getting this thread out onto the interweb.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-18555569.post-51530604839976924592008-11-18T19:50:00.000-02:002008-11-18T19:50:00.000-02:00Good stuff. To do the same decryption on UNIX with...Good stuff. To do the same decryption on UNIX with openssl:<BR/><BR/>echo Zn0oZAYvGeTWGA8xe7rd4w==|openssl des-ede3 -a -d -K 30794A21403124723870304C4072312436794A214031726A -iv 30794A2140312472; echoelliotkendallhttps://www.blogger.com/profile/16155737011781977610noreply@blogger.comtag:blogger.com,1999:blog-18555569.post-24967283464307996172008-07-09T06:51:00.000-03:002008-07-09T06:51:00.000-03:00try this : <cfscript> o= createobject("java","c...try this : <BR/><BR/><cfscript><BR/> o= createobject("java","coldfusion.server.ServiceFactory").getDatasourceService().getDatasources();<BR/>for(i in o) {<BR/>if(len(o[i]["password"])){<BR/> dp=Decrypt(o[i]["password"], generate3DesKey("0yJ!@1$r8p0L@r1$6yJ!@1rj"), "DESede", "Base64") ;<BR/> writeoutput(i & " = "& dp&"<br>");<BR/> }<BR/>}<BR/></cfscript>Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-18555569.post-13057104194985769852008-07-02T20:06:00.000-03:002008-07-02T20:06:00.000-03:00Great information, thanks for sharing!Great information, thanks for sharing!Kurt Grutzmacherhttps://www.blogger.com/profile/07238514087343942495noreply@blogger.com