2

I am trying to recover the password for one of the logins on a SQL 2005 (SP3) database. There seem to be a large number of tools out there to do this.

I'm a little nervous of running a tool against a live database server that I don't know much about.

What tools would you recommend?

Improve this question

3 Answers 3

Reset to default
2

NGS Squirrel.

This load the passwords hashes out of sysxlogins (or whatever the new view is :-) and cracks them: it does not load the live server

(not to be confused with SQuireL, the client tools)

Improve this answer
1
  • I have used this and it works great.
    – Steve Jones
    Jun 4, 2009 at 15:22
0

Damn, beaten to it, I was about to suggest NGS :-)

This URL, http://www.ngssoftware.com/papers/cracking-sql-passwords.pdf, describes how their cracker works. They even helpfully supply C++ source that you can compile yourself. I've used the NGS software and it works provided the password isn't too hard.

The NGS software just takes the password hash from the row in syslogins, so it doesn't tinker with master.mdf. Like you, I'd be pretty nervous about anything that hacked the master database, and I'd use it only as a last resort.

JR

Improve this answer
0

Are you recovering because someone lost a password or because you need to recreate this on a new server? If it's the former, use the NGS tool above. If it's the latter, you can script the login with a hashed password, and run the script on the new server, securely moving the password without needing to know it.

Search sp_help_revlogin for a script.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .