How-to decrypt password from boot.properties

Script:

import os

import weblogic.security.internal.SerializedSystemIni

import weblogic.security.internal.encryption.ClearOrEncryptedService

 

def decryptString(domainPath, encryptedString):

    es = weblogic.security.internal.SerializedSystemIni.getEncryptionService(domainPath)

    ces = weblogic.security.internal.encryption.ClearOrEncryptedService(es)

    decryptedString = ces.decrypt(encryptedString)

    print "=" * 40

    print " " * 10 +"Decrypted Password:" + decryptedString

    print "=" * 40

 

try:

    os.system('clear')

    if len(sys.argv) == 3:

        decryptString(sys.argv[1], sys.argv[2])

    else:

        print "=" * 40

        print "INVALID ARGUMENTS"

        print "Usage: java weblogic.WLST %s <ABSOLUTE DOMAIN_HOME PATH> <ENCRYPTED_PASSWORD>" %sys.argv[0]

        print "e.g.:"

        print "    java weblogic.WLST %s /domains/your_domain/ {AES}xxx-hash-xxx" %sys.argv[0]

        print "=" * 40

except:

    print "Unexpected error: ", sys.exc_info()[0]

    dumpStack()

    raise

https://github.com/rosset/weblogic_scripts/blob/master/decryptPassword.py

Execute the command: 

/products/oracle/middleware/wlserver_10.3/common/bin/wlst.sh /home/weblogic/decryptPassword.py /domains/your_domain {AES}nfl21M2WbTxBApGTvanLsrHenVvSNLTznQtIl0f2JsY\=

Output:

CLASSPATH=/products/oracle/middleware/patch_wls1036/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/products/oracle/middleware/jdk/lib/tools.jar:/products/oracle/middleware/wlserver_10.3/server/lib/weblogic_sp.jar:/products/oracle/middleware/wlserver_10.3/server/lib/weblogic.jar:/products/oracle/middleware/modules/features/weblogic.server.modules_10.3.6.0.jar:/products/oracle/middleware/wlserver_10.3/server/lib/webservices.jar:/products/oracle/middleware/modules/org.apache.ant_1.7.1/lib/ant-all.jar:/products/oracle/middleware/modules/net.sf.antcontrib_1.1.0.0_1-0b2/lib/ant-contrib.jar::/products/oracle/middleware/utils/config/10.3/config-launch.jar::/products/oracle/middleware/wlserver_10.3/common/derby/lib/derbynet.jar:/products/oracle/middleware/wlserver_10.3/common/derby/lib/derbyclient.jar:/products/oracle/middleware/wlserver_10.3/common/derby/lib/derbytools.jar::

Initializing WebLogic Scripting Tool (WLST) ...

Welcome to WebLogic Server Administration Scripting Shell

Type help() for help on available commands

========================================

          Decrypted Password:weblogic

========================================