Shulou(Shulou.com)06/01 Report--

This article is about how to crack the Navicat password offline. The editor thinks it is very practical, so I share it with you. I hope you can get something after reading this article. Let's take a look at it.

Note: Navicat Premium 12.x is used in this article. There are some differences between the encryption methods of Navicat 11.x and 12.x. In fact, it can be decrypted in the way of 11.x.

0x01 introduction

Navicat is a fast, reliable and inexpensive database management tool designed to simplify database management and reduce system management costs. It is designed to meet the needs of database administrators, developers and small and medium-sized enterprises. Navicat is built with an intuitive graphical user interface that allows you to create, organize, access, and share information in a secure and simple way.

Balabala, anyway, is a commonly used database connection tool. If you encounter it in the real environment, it will be a great blessing. There will certainly be a lot of server database connection passwords stored in it. At this time, how to extract it is a very important thing.

0x02 extract password

First of all, we need to make it clear that Navicat is stored in different locations for different databases.

MySQL HKEY_CURRENT_USER\ Software\ PremiumSoft\ Navicat\ Servers\ MariaDB HKEY_CURRENT_USER\ Software\ NavicatMARIADB\ Servers\ MicrosoftSQL HKEY_CURRENT_USER\ Software\ PremiumSoft\ NavicatMSSQL\ Servers\ Oracle HKEY_CURRENT_USER\ Software\ PremiumSoft\ NavicatOra\ Servers\ PostgreSQL HKEY_CURRENT_USER\ Software\ PremiumSoft\ NavicatPG\ Servers\ SQLite HKEY_CURRENT_USER\ Software\ PremiumSoft\ NavicatSQLite\ Servers\

Let's take MySQL as an example.

Let's visit the registry first.

Since it is in the registry, we can export its contents directly.

IP reg query HKEY_CURRENT_USER\ SOFTWARE\ PremiumSoft\ Navicat\ Servers / s / v host username reg query HKEY_CURRENT_USER\ SOFTWARE\ PremiumSoft\ Navicat\ Servers / s / v UserName password reg query HKEY_CURRENT_USER\ SOFTWARE\ PremiumSoft\ Navicat\ Servers / s / v pwd

Similarly, you can also extract the IP, account number and password hash of other databases.

When we get this content, the next thing we do is to crack it offline.

We use the python3 script in it

First install the dependent pycryptodome

Usage has also been given.

The above is how to crack the Navicat password offline. The editor believes that there are some knowledge points that we may see or use in our daily work. I hope you can learn more from this article. For more details, please follow the industry information channel.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.