Search code examples
passwordssybasesqlanywherepassword-recovery

Sybase database password "recovery"


I have DBA authority to a sybase database on Windows.

I have a another user that I don't know the password for.

I regularly use an application that does know the password, and it uses the password to automatically login to the application. However, I can't find a way to find that password anywhere in the application or its dlls/files/registry/etc.

I obviously don't want to just change the password of the user, as the password in the application can't be updated (that i know of).

I want to be able to login to the database as this user.

Are there any logging settings for the database server that will log the password in plaintext? Or any other methods I can use to obtain the password (maybe via login_procedure)? I'd also be okay with just obtaining the hash for the password(+salt).


Solution

  • There is no SAP Sybase supported way to get the password in plaintext. You can view the hashed password by querying master..syslogins.passwords column.

    A possible workaround would be to create a new user, and alias them to user in question inside the database.

    sp_addalias is the command you would use to do something like that.

    You can view the hashed password