Retrieve Oracle password from Toad for Oracle

转载 2015年11月17日 18:06:44

One of the oldest feature Dell Toad has is saving login passwords. This is accomplish easy with enabling check box "Save passwords" on login screen. 

The whole connection process is defined through three files located in %USERPROFILE%\AppData\Roaming\Quest Software\Toad for Oracle\11.6\User Files\, where "11.6" is Toad version and may vary in your cases: 
Passwords are stored in encrypted way in CONNECTIONPWDS.INI file. However they are not exposed in any normal way (you can read them) but only to use them as login without knowing password, which was once placed. This may raised some security issue, which I'll cover at the end. But having stored passwords allow Toad many beautiful automation and wide a lot actions that might need password as input. However, saving passwords also gave me additional feature (which is originally mine trick)-a way to retrieve Oracle passwords from any saved connection.

The solution

The trick is based on another Toad for Oracle feature-get SQL for any kind of DDL action, which was performed through GUI, in this case creating db link. Here is what you have to do to retrieve scott password:
  1. Connect in Toad as any user for which you DO NOT WANT TO RETRIEVE password (in mine case this is vadas user)
  2. Choose Database|Create|DB Link menu item
  3. Fill data as shown in the picture: 

    As you can see I have chosen scott user and password is automatically retrieved from saved passwords file.
  4. Choose Show SQL as shown in the picture and you'll get pure SQL which contains password 

And that's it! Pretty cool isn't it? 
The trick is working for every user's password. In next case I'm showing how to retrieve sys password, retrieved through scott connection. 

The End

Someone might say this is security issue, but I do strongly think it is not! Mentioned file with stored passwords is encrypted with two keys:
  1. Domain user name
  2. Some kind of workstation unique hash value
These ensures that password file cannot be copied to another workstation and Domain admins (or other privileged users on that workstation) cannot use that file in any way! For me this is more then fair insurance. 

Keep in mind that newer releases of Toad do not use "workstation unique hash value", but only domain username as a pattern for hashing. Check and test before dropping old laptop data. For the end let me tell that if someone find storing password as a security issue regardless motioned, he/she can always disable that option and live with shorter 
Hope this helps someone. 



查看并修改Oracle用户的密码(适用于11g) 上一篇 / 下一篇  2010-11-10 10:56:59 / 个人分类:Oracle 查看( 784 ) / 评论( 0 ) / 评分( 0...
  • haiross
  • haiross
  • 2014年03月15日 11:41
  • 13011


在我上一篇博客《oracle性能优化二——操作系统优化》中介绍了如何操作系统优化,本文将介绍如何使用toad监控数据库的优化。      通过合理的分配内存大小,合理的设置表空间体系和内部空间参数。可...
  • tang_huan_11
  • tang_huan_11
  • 2015年09月24日 14:28
  • 4311

用toad for oracle将excel数据导入数据库

用toad for oracle将excel数据导入数据库 连接想要导入的数据库 ,然后Database->Import->Table Data打开了导入窗口,选择一个数据库表,点击Show Da...
  • yangwenxue_admin
  • yangwenxue_admin
  • 2016年01月22日 09:54
  • 4021

获取MySQL加密密码并验证用户输入(登录界面),retrieve hashpwd from mysql and compare with input password on login

获取MySQL加密密码并验证用户输入(登录界面),retrieve hashpwd from mysql and compare with input password on login...
  • squirrelnald
  • squirrelnald
  • 2016年11月23日 17:13
  • 761

Toad for Oracle9.7中导入数据库以后,数据有中文乱码:

昨天,在阿里云服务器上安装了Oracle10g的数据库后,又安装了Toad for Oracle9.7工具,之后导入数据后发现数据的中文是乱码,最后经过多方查找,终于解决了,现在总结一下,以供后来的人...
  • sxdtzhaoxinguo
  • sxdtzhaoxinguo
  • 2013年10月16日 10:10
  • 2855

Toad for Oracle工具的使用(一)

在Oracle应用程序的开发过程中,访问数据库对象和编写SQL程序是一件乏味且耗费时间的工作,对数据库进行日常管理也是需要很多SQL脚本才能完成的。Quest Software为此提供了高效的Orac...
  • liqfyiyi
  • liqfyiyi
  • 2014年10月02日 09:56
  • 13637

Toad for Oracle工具的使用

Toad for Oracle工具的使用 在Oracle应用程序的开发过程中,访问数据库对象和编写SQL程序是一件乏味且耗费时间的工作,对数据库进行日常管理也是需要很多SQL脚本...
  • dzkdtty
  • dzkdtty
  • 2013年10月06日 13:42
  • 1220

Toad for Oracle 介绍

软件名称:《Toad for Oracle》 软件语言: 英语 运行环境: 2000/XP 软件大小: 53677K 软件分类: 编程开发/数据库工具 Toad for Oracl...
  • dragonxiangfu
  • dragonxiangfu
  • 2012年03月08日 11:14
  • 406

toad for oracle(导入导出实例)

【转】toad for oracle(导入导出实例) 收藏   toad for oracle(导入导出实例) 收藏  例: create user his identified...
  • lzp_lrp
  • lzp_lrp
  • 2013年05月30日 10:41
  • 12485

Toad for Oracle工具的使用

转自:   Toad for Oracle工具的使用 出处:转载 [注意:单击图片可...
  • jackljf
  • jackljf
  • 2012年07月31日 10:23
  • 1130
您举报文章:Retrieve Oracle password from Toad for Oracle