Retrieve Oracle password from Toad for Oracle

转载 2015年11月17日 18:06:44

One of the oldest feature Dell Toad has is saving login passwords. This is accomplish easy with enabling check box "Save passwords" on login screen. 

The whole connection process is defined through three files located in %USERPROFILE%\AppData\Roaming\Quest Software\Toad for Oracle\11.6\User Files\, where "11.6" is Toad version and may vary in your cases: 
Passwords are stored in encrypted way in CONNECTIONPWDS.INI file. However they are not exposed in any normal way (you can read them) but only to use them as login without knowing password, which was once placed. This may raised some security issue, which I'll cover at the end. But having stored passwords allow Toad many beautiful automation and wide a lot actions that might need password as input. However, saving passwords also gave me additional feature (which is originally mine trick)-a way to retrieve Oracle passwords from any saved connection.

The solution

The trick is based on another Toad for Oracle feature-get SQL for any kind of DDL action, which was performed through GUI, in this case creating db link. Here is what you have to do to retrieve scott password:
  1. Connect in Toad as any user for which you DO NOT WANT TO RETRIEVE password (in mine case this is vadas user)
  2. Choose Database|Create|DB Link menu item
  3. Fill data as shown in the picture: 

    As you can see I have chosen scott user and password is automatically retrieved from saved passwords file.
  4. Choose Show SQL as shown in the picture and you'll get pure SQL which contains password 

And that's it! Pretty cool isn't it? 
The trick is working for every user's password. In next case I'm showing how to retrieve sys password, retrieved through scott connection. 

The End

Someone might say this is security issue, but I do strongly think it is not! Mentioned file with stored passwords is encrypted with two keys:
  1. Domain user name
  2. Some kind of workstation unique hash value
These ensures that password file cannot be copied to another workstation and Domain admins (or other privileged users on that workstation) cannot use that file in any way! For me this is more then fair insurance. 

Keep in mind that newer releases of Toad do not use "workstation unique hash value", but only domain username as a pattern for hashing. Check and test before dropping old laptop data. For the end let me tell that if someone find storing password as a security issue regardless motioned, he/she can always disable that option and live with shorter 
Hope this helps someone. 


[oracle][toad] 无法登陆 ORA-01017: invalid username/password; logon denied

问题现象:用SQLPLUS可以连接但是用toad死活连不上,报错为:ORA-01017: invalid username/password; logon denied但是密码用户名是对的啊,因为用相...
  • xys_777
  • xys_777
  • 2010年08月03日 09:48
  • 5949

安装配置toad for oracle

Win7 64安装oracle client 、 toad 1. 下载 oracle instant client ; win7 64位版本上可以使用32为oralce instant clie...
  • qq435967718
  • qq435967718
  • 2016年05月10日 09:12
  • 4388

Toad for Oracle 使用说明

一.Toad功能综述 二.系统需求 三.安装指南 四.快速入门     1.Schema browser的用法简介     2.SQ Editor的使用介绍     3.Procedure...
  • dragonxiangfu
  • dragonxiangfu
  • 2012年03月08日 11:02
  • 1414

Toad For Oracle的用法介绍

1 产品功能 1.1 功能概述 TOAD 提供直观的用户界面来帮助开发人员和DBA有效地完成他们的工作。它是一个功能强大的、低负载的开发工具,集成了模式浏览、SQL编程、PL/SQL的开发和调试,...
  • dragonxiangfu
  • dragonxiangfu
  • 2012年09月26日 16:18
  • 1470


配置toad远程连接oracle 在oracle服务器上: C:\app\Administrator\product\11.2.0\dbhome_1\NETWORK\ADMIN目录 文件:lis...
  • catontower
  • catontower
  • 2015年01月14日 16:17
  • 2262

为toad或pl/sql developer配置oracle InstantClient客户端

Oracle官方从oracle 10G开始有提供精简版的Oracle Client,就是InstantClient,不用安装,解压缩即可使用。 配置步骤: 1.下载地址: http://www.or...
  • fengyie007
  • fengyie007
  • 2013年12月27日 19:53
  • 2147


在本机用Toad远程连接Oracle数据库     在本机利用Toad连接远程数据库,需要以下操作步骤。 第一步:安装Oracle数据库 安装Oracle数据库的时候,需要注意以下几点: ...
  • yichangzyh
  • yichangzyh
  • 2012年11月10日 19:11
  • 18981

Toad for Oracle工具的使用(一)

在Oracle应用程序的开发过程中,访问数据库对象和编写SQL程序是一件乏味且耗费时间的工作,对数据库进行日常管理也是需要很多SQL脚本才能完成的。Quest Software为此提供了高效的Orac...
  • liqfyiyi
  • liqfyiyi
  • 2014年10月02日 09:56
  • 14593

toad 汉化包
  • tan_yj
  • tan_yj
  • 2014年10月22日 22:10
  • 1549

oracle迷你客户端 toad免安装oracle

一、下载 下载地址: ...
  • QQ38397892
  • QQ38397892
  • 2015年03月28日 22:49
  • 2194
您举报文章:Retrieve Oracle password from Toad for Oracle