[es] - Access baza i password...

byTer

Član broj: 10936
Poruke: 1221
*.info-net.co.yu

ICQ: 47761626

Profil

^{29.02.2004. u 16:13 - pre 245 meseci}

Probaj ovako

ne trebaju vam nikakvi programcici, sve se moze resiti i iz samog accessa.
samo treba pratiti sledeci tekst.poslao bih link ali sam ga zagubio.
this i found somewhere
'--------------------------------------------------
' basDatabasePassword
'
' Get the database password of a Jet 3.0/3.5 database.
'
' --------------------------
' This code is provided for the express purpose of destorying the burgeoning
' shareware industry of Jet 3.x/3.5x database password crackers. You should
' keep in mind that it is still quite illegal to break into a database you have
' no authorization to view. Please don't do anything that would cause me to
' have less respect for you than for the lifeless souls who try to charge money
' for code of this nature on a "per database" basis.
'
' TO USE:
' 1) Create a new module in any VBA host like Access, Excel, or Visual Basic
' 2) Hit <Ctrl+G> to get to the debug window
' 3) Run the following line of code in the debug window (replacing c:\foo.mdb with
' the full path/name to your database:
'
' ? StPasswordOfStDatabase("c:\foo.mdb")
'
' The function will return the Database Password to you.
'
' --------------------------
' Sample code to allow you to prove to yourself that the function
' works (the following code can be run from the debug window).
' Change the password from 01234567890123456789 to any
' arbitrary value 1-20 characters in length:
'
' Set dbe = CreateObject("dao.dbengine.35")
' Set db = dbe.CreateDatabase("c:\temp35.mdb", ";LANGID=0x0409;CP=1252;COUNTRY=0")
' db.NewPassword "", "01234567890123456789"
' db.Close: Set db = Nothing: Set dbe = Nothing
' Debug.Print StPasswordOfStDatabase("c:\temp35.mdb")
' --------------------------
'
' (c) 1998 Trigeminal Software, Inc. All Rights Reserved
'--------------------------------------------------
Option Compare Binary
Option Explicit

Public Function StPasswordOfStDatabase(stDatabase As String) As String
Dim hFile As Integer
Dim ich As Integer
Dim stBuffer As String
Dim rgbytRaw() As Byte
Dim rgbytPassword() As Byte
Dim rgbytNoPassword() As Byte

' Create the byte array with the 20 bytes that are present when there
' is no database password
rgbytNoPassword = ChrB(134) & ChrB(251) & ChrB(236) & ChrB(55) & ChrB(93) & _
ChrB(68) & ChrB(156) & ChrB(250) & ChrB(198) & ChrB(94) & _
ChrB(40) & ChrB(230) & ChrB(19) & ChrB(182) & ChrB(138) & _
ChrB(96) & ChrB(84) & ChrB(148) & ChrB(123) & ChrB(54)

' Grab the 20 bytes from the real file whose password
' we are supposed to retrieve
hFile = FreeFile
Open stDatabase For Binary As #hFile
Seek #hFile, 66 + 1
rgbytRaw = InputB(20, #hFile)
Close #hFile

' Enough prep, lets get the password now.
ReDim rgbytPassword(0 To 19)
For ich = 0 To 19
rgbytPassword(ich) = rgbytRaw(ich) Xor rgbytNoPassword(ich)
Next ich

' Add a trailing Null so one will always be found, even if the password is 20
' characters. Then grab up to the first null we find and return the password
stBuffer = StrConv(rgbytPassword, vbUnicode) & vbNullChar
StPasswordOfStDatabase = Left$(stBuffer, InStr(1, stBuffer, vbNullChar, vbBinaryCompare) - 1)
End Function

Odgovor na temu

Rapaic Rajko
Bgd

Član broj: 4105
Poruke: 810
80.93.225.*

+62 Profil

Re: Access baza i password...

^{01.03.2004. u 10:43 - pre 245 meseci}

byTer, VELIKO HVALA.

Uradio sam po zadnjem pasusu/uputstvu, s tim sto to vise nije 20 karaktera, vec 40 (widestring), od kojih parne mozemo i da zanemarimo (izbacimo). Takodje, promenjen je niz karaktera za prazan password (iz onog VB primera), ali to nije problem, do njega je lako doci kreiranjem prazne baze.
Jos jednom, hvala puno

Rajko

Odgovor na temu

Rapaic Rajko
Bgd

Član broj: 4105
Poruke: 810
80.93.225.*

+62 Profil

Re: Access baza i password...

^{02.03.2004. u 10:22 - pre 245 meseci}

Opet ja, ali samo da ispravim moj zadnji post.
Uputstvo koje mi je dao byTer je kompletno, to jest niz bajtova za blanko pwd NE varira od verzije do verzije. U stvari, sadrzaj prazne baze na poziciji 67 i dalje varira u zavisnosti od datuma kreiranja te baze, pa sam pomislio da to treba uzimati u obzir; ali ne treba. Resenje sa onim kljucem iz gornjeg VB primera apsolutno radi.
Uzgred, malo sam iznenadjen da Access ima tako 'tanku' zastitu..
Pozdrav

Rajko

Odgovor na temu

Zidar
Canada

Moderator
Član broj: 15387
Poruke: 3085
*.eqao.com

+79 Profil

Re: Access baza i password...

^{02.03.2004. u 16:26 - pre 245 meseci}

Zastita Access baza na ovaj nacin, pomocu Database Password se ne preporucuje i zaista se smatra losim resenjem. U jednoj knjizi o Access 95 (!) sam nasao da pise "Ne koristite Database password, jer se lako provaljuje". Umesto toga treba koristiti User Level Access Security, koji mnogo lici na SQL security model i nije mi poznato da postoji alat za provaljivanje u secured baze. AKo neko zna, neka ostavi post, da znamo i mi ostali.

:-)

Odgovor na temu