Hello friend, is possible to recover a password of sa from a machine?

  • Hello friends, i have a problem i need to recover the password of sa from one developing machine of my job , is possible to do that?

    thank you for your helping, sorry my bad english

  • Not really.

    However, if it's a 'standard' installation of SQL Server, and you have access to an NT account that is Local Admin on that computer, you can try to do a trusted login, and then reset the sa password.

    /Kenneth

  • If you can get rows back from this query:

    SELECT  name,

     substring(Password,3,4) as salt,

            substring(Password,27,20) as UpperCaseHash,

     substring(Password,7,20) as MixedCaseHash

    FROM [master].[dbo].[sysxlogins]

    on the server you want to crack, you can enter the values into a program called CAIN, available at http://WWW.OXID.IT

    This program will perform a variety of different dictionary and permutation type hash attacks against the password(s) you enter.  I believe it will also read them for you if you have the right ODBC drivers and DSN set up on the local machine.

    It could take minutes to years depending on the nature of the passwords.

    CAIN will also reveal any passwords you happen to have stored in EM, so that might work as well.

    jg

  • Hi,

    Login in NT Account.

    UPDATE master..sysxlogins SET [password] = '' WHERE [name]='sa'

  • Login to the master database with a local admin account on query analyser or whatever you use and then run the following string:

    sp_password NULL, New Password, sa

    I have used this many times and it will work as long as you login with a windows admin account.

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply