Comments for These go to eleven!

Comment on Decryption of configuration passwords in WebLogic by Decrypting 3DES in weblogic 8.1 configuration « takie tam dyrdymały

Decrypting 3DES in weblogic 8.1 configuration « takie tam dyrdymały — Mon, 26 Oct 2009 12:07:52 +0000

[...] http://gustlik.wordpress.com/2008/08/06/decryption-of-configuration-passwords-in-weblogic/ [...]

Comment on Decryption of configuration passwords in WebLogic by Mahesh

Mahesh — Tue, 06 Oct 2009 16:04:56 +0000

This rocks !!!

I had an issue with node.getTextContent(). Probably my xml jars are old. Copied the password part from xml to properties file. It worked. Thanks.

Comment on Cross-site scripting and HttpOnly attribute by Ivan

Ivan — Sat, 03 Oct 2009 18:57:14 +0000

Thanks for publishing this. I have been looking for a cross-app-server approach to get the JSESSIONID as an HttpOnly cookie. Having the second HttpOnly factor protect the first is a great workaround.

Cheers,

Ivan

Comment on Decryption of configuration passwords in WebLogic by Zbigniew Cyktor

Zbigniew Cyktor — Tue, 01 Sep 2009 18:13:27 +0000

You just need to add weblogic.jar (which is part of you server installation) to the classpath while running the code.

Comment on Decryption of configuration passwords in WebLogic by Harsha

Harsha — Tue, 01 Sep 2009 16:42:45 +0000

Steven,

How did you get around this one?

Exception in thread “main” java.lang.NoClassDefFoundError: weblogic/security/internal/encryption/ClearOrEncryptedService
at WebLogicDecryptor.main(WebLogicDecryptor.java:23)

Thanks.

Comment on Decryption of configuration passwords in WebLogic by Andy

Andy — Fri, 03 Jul 2009 00:26:25 +0000

Thank you guys for the wonderful postings, it works.

Comment on Decryption of configuration passwords in WebLogic by Skely

Skely — Fri, 19 Jun 2009 18:35:43 +0000

I tried to decrypt a given text by using:
ClearOrEncryptedService ces2 = new ClearOrEncryptedService(SerializedSystemIni.getEncryptionService(domainDir.getAbsolutePath()));
System.out.println(ces2.decrypt(“{3DES}C7IknhvOSWU=”));

I got the following exception any ideas:

com.rsa.jsafe.JSAFE_PaddingException: Could not perform unpadding: invalid pad byte.
at com.rsa.jsafe.JA_PKCS5Padding.performUnpadding(Unknown Source)
at com.rsa.jsafe.JG_BlockCipher.decryptFinal(Unknown Source)
at weblogic.security.internal.encryption.JSafeEncryptionServiceImpl.decryptBytes(JSafeEncryptionServiceImpl.java:67)
at weblogic.security.internal.encryption.JSafeEncryptionServiceImpl.decryptString(JSafeEncryptionServiceImpl.java:93)
at weblogic.security.internal.encryption.ClearOrEncryptedService.decrypt(ClearOrEncryptedService.java:56)
at edu.play.WebLogicDecryptor.run(WebLogicDecryptor.java:40)
at edu.play.WebLogicDecryptor.main(WebLogicDecryptor.java:32)
————— nested within: ——————
weblogic.security.internal.encryption.EncryptionServiceException – with nested exception:
[com.rsa.jsafe.JSAFE_PaddingException: Could not perform unpadding: invalid pad byte.]
at weblogic.security.internal.encryption.JSafeEncryptionServiceImpl.decryptBytes(JSafeEncryptionServiceImpl.java:77)
at weblogic.security.internal.encryption.JSafeEncryptionServiceImpl.decryptString(JSafeEncryptionServiceImpl.java:93)
at weblogic.security.internal.encryption.ClearOrEncryptedService.decrypt(ClearOrEncryptedService.java:56)
at edu.play.WebLogicDecryptor.run(WebLogicDecryptor.java:40)
at edu.play.WebLogicDecryptor.main(WebLogicDecryptor.java:32)

Comment on Decryption of configuration passwords in WebLogic by senthil

senthil — Wed, 13 May 2009 14:35:47 +0000

How to decrypt suppose if the password starting with {AES}HvuAQSKr5aG….

Comment on Decryption of configuration passwords in WebLogic by PerfTester

PerfTester — Wed, 01 Apr 2009 09:01:29 +0000

Hi,
I get the below exception when i was trying to run

weblogic.security.internal.encryption.EncryptionServiceException: com.rsa.jsafe.
JSAFE_PaddingException: Could not perform unpadding: invalid pad byte.
at weblogic.security.internal.encryption.JSafeEncryptionServiceImpl.decr
yptBytes(JSafeEncryptionServiceImpl.java:78)
at weblogic.security.internal.encryption.JSafeEncryptionServiceImpl.decr
yptString(JSafeEncryptionServiceImpl.java:94)
at weblogic.security.internal.encryption.ClearOrEncryptedService.decrypt
(ClearOrEncryptedService.java:87)
at WebLogicDecryptor.processLine(WebLogicDecryptor.java:68)
at WebLogicDecryptor.processFile(WebLogicDecryptor.java:49)
at WebLogicDecryptor.run(WebLogicDecryptor.java:36)
at WebLogicDecryptor1.main(WebLogicDecryptor1.java:28)
Caused by: com.rsa.jsafe.JSAFE_PaddingException: Could not perform unpadding: in
valid pad byte.
at com.rsa.jsafe.JA_PKCS5Padding.a(Unknown Source)
at com.rsa.jsafe.JG_BlockCipher.decryptFinal(Unknown Source)
at weblogic.security.internal.encryption.JSafeEncryptionServiceImpl.decr
yptBytes(JSafeEncryptionServiceImpl.java:68)
… 6 more

Any idea why this happens

Comment on Decryption of configuration passwords in WebLogic by Decryption of Weblogic 8 3DES passwords in config.xml… « Sameh M. Shaker’s Weblog

Tue, 31 Mar 2009 06:31:17 +0000

[...] for me, I’ve found this post, he got this working for Weblogic 10, however, the config file structure is a bit different, so I [...]