Created
April 14, 2020 23:08
-
-
Save james-ni/c23b0e7c1fd5ee5df83d39d62aa82afa to your computer and use it in GitHub Desktop.
retrieve password stored in DBeaver
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
import javax.crypto.*; | |
import javax.crypto.spec.IvParameterSpec; | |
import javax.crypto.spec.SecretKeySpec; | |
import java.io.ByteArrayInputStream; | |
import java.io.IOException; | |
import java.io.InputStream; | |
import java.nio.file.Files; | |
import java.nio.file.Paths; | |
import java.security.*; | |
public class DecryptDbeaver { | |
// from the DBeaver source 8/23/19 https://github.com/dbeaver/dbeaver/blob/57cec8ddfdbbf311261ebd0c7f957fdcd80a085f/plugins/org.jkiss.dbeaver.model/src/org/jkiss/dbeaver/model/impl/app/DefaultSecureStorage.java#L31 | |
private static final byte[] LOCAL_KEY_CACHE = new byte[] { -70, -69, 74, -97, 119, 74, -72, 83, -55, 108, 45, 101, 61, -2, 84, 74 }; | |
static String decrypt(byte[] contents) throws InvalidAlgorithmParameterException, InvalidKeyException, IOException, NoSuchPaddingException, NoSuchAlgorithmException { | |
try (InputStream byteStream = new ByteArrayInputStream(contents)) { | |
byte[] fileIv = new byte[16]; | |
byteStream.read(fileIv); | |
Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5Padding"); | |
SecretKey aes = new SecretKeySpec(LOCAL_KEY_CACHE, "AES"); | |
cipher.init(Cipher.DECRYPT_MODE, aes, new IvParameterSpec(fileIv)); | |
try (CipherInputStream cipherIn = new CipherInputStream(byteStream, cipher)) { | |
return inputStreamToString(cipherIn); | |
} | |
} | |
} | |
static String inputStreamToString(java.io.InputStream is) { | |
java.util.Scanner s = new java.util.Scanner(is).useDelimiter("\\A"); | |
return s.hasNext() ? s.next() : ""; | |
} | |
public static void main(String[] args) throws Exception { | |
if (args.length != 1) { | |
System.err.println("syntax: param1: full path to your credentials-config.json file"); | |
System.exit(1); | |
} | |
System.out.println(decrypt(Files.readAllBytes(Paths.get(args[0])))); | |
} | |
} | |
Pass it the path of your credentials-config.json file on local filesystem, for me it was | |
javac DecryptDbeaver.java |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
javac DecryptDbeaver.java # compile it | |
java DecryptDbeaver ~/Library/DBeaverData/workspace6/General/.dbeaver/credentials-config.json |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment