Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeOur CommunityOur CommunityGeneral Discuss...General Discuss...Extracting users passwordsExtracting users passwords
Previous
 
Next
New Post
7/27/2007 3:45 PM
 

Is there a simple way to extract user passwords?

 
New Post
7/27/2007 4:19 PM
 

There might be an easier way then this but DotNetNuke uses 3DES for its encoding.  If you look in the web.config file you will see a field called Machine Key.  You will notice the valadation key which I beleave is used to encrypt the password and the Decription key which is used to Decrypt the password.  With that information you can look in your DotNetNuke database and locate where the passwords are stored at.  They should be located in the aspnet_membership table.  They are of course stored in there encrypted values.  After you have that the easiest way I can think of is to write a program that does 3DES decoding.  If you use the decryption key on the password it should give you the plaintext password back.

 

hope this helps

Mike

 
New Post
7/27/2007 4:28 PM
 

not that I know of, but I did find a module out on SnowCovered that lets you log in as different users and you don't need to know their passwords. The module is called user chamelon.

____________________________

Stephanie
www.FEECO.com | http://Ethanol.feeco.com

 
New Post
7/30/2007 9:26 AM
 

Depending on the reason for this, there are several solutions available. What is it you are looking to do, exactly?


Vitaly Kozadayev
Principal
Viva Portals, L.L.C.
 
New Post
7/30/2007 10:10 AM
 

I wanted an easy way to get into users profiles to edit the, I bought DNN Fusion's User Profile Module, but had no way of editing a user's profile if they added something inappropriate on their page. The chameleon module was an excellent solution. It was cheap too!

 
Previous
 
Next
HomeHomeOur CommunityOur CommunityGeneral Discuss...General Discuss...Extracting users passwordsExtracting users passwords


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out