Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am trying to recover the password for one of the logins on a SQL 2005 (SP3) database. There seem to be a large number of tools out there to do this.

I'm a little nervous of running a tool against a live database server that I don't know much about.

What tools would you recommend?

share|improve this question
add comment

3 Answers

up vote 2 down vote accepted

NGS Squirrel.

This load the passwords hashes out of sysxlogins (or whatever the new view is :-) and cracks them: it does not load the live server

(not to be confused with SQuireL, the client tools)

share|improve this answer
    
I have used this and it works great. –  Steve Jones Jun 4 '09 at 15:22
add comment

Are you recovering because someone lost a password or because you need to recreate this on a new server? If it's the former, use the NGS tool above. If it's the latter, you can script the login with a hashed password, and run the script on the new server, securely moving the password without needing to know it.

Search sp_help_revlogin for a script.

share|improve this answer
add comment

Damn, beaten to it, I was about to suggest NGS :-)

This URL, http://www.ngssoftware.com/papers/cracking-sql-passwords.pdf, describes how their cracker works. They even helpfully supply C++ source that you can compile yourself. I've used the NGS software and it works provided the password isn't too hard.

The NGS software just takes the password hash from the row in syslogins, so it doesn't tinker with master.mdf. Like you, I'd be pretty nervous about anything that hacked the master database, and I'd use it only as a last resort.

JR

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.