Decryption of Weblogic 8 3DES passwords in config.xml…

So, yesterday I couldn’t find the password that is used to connect to one of the Oracle DBs for an application…

The password is saved in config.xml for this weblogic domain, but it’s encrypted…

I can see the hash “{3DES}vx1VMjDei4ur7Ews12m4zQ==” in the config.xml file…

I’ve read a few threads that mentioned that the decryption key is in SerializedSystemIni.dat located in the domain folder…

I tried to use OpenSSL to do the work, but couldn’t get it working, and BEA’s dev2dev portal is no longer working so that I can check anything out…

Continue reading