2

I am trying to recover the password for one of the logins on a SQL 2005 (SP3) database. There seem to be a large number of tools out there to do this.

I'm a little nervous of running a tool against a live database server that I don't know much about.

What tools would you recommend?

2

NGS Squirrel.

This load the passwords hashes out of sysxlogins (or whatever the new view is :-) and cracks them: it does not load the live server

(not to be confused with SQuireL, the client tools)

1
  • I have used this and it works great. – Steve Jones Jun 4 '09 at 15:22
0

Damn, beaten to it, I was about to suggest NGS :-)

This URL, http://www.ngssoftware.com/papers/cracking-sql-passwords.pdf, describes how their cracker works. They even helpfully supply C++ source that you can compile yourself. I've used the NGS software and it works provided the password isn't too hard.

The NGS software just takes the password hash from the row in syslogins, so it doesn't tinker with master.mdf. Like you, I'd be pretty nervous about anything that hacked the master database, and I'd use it only as a last resort.

JR

0

Are you recovering because someone lost a password or because you need to recreate this on a new server? If it's the former, use the NGS tool above. If it's the latter, you can script the login with a hashed password, and run the script on the new server, securely moving the password without needing to know it.

Search sp_help_revlogin for a script.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.