List of ColdFusion DataSources Usernames and Passwords

In ColdFusion settings, database connections can be configured in the admin panel under the DataSources section. But what do you do if the passwords for several or all users have been lost?

Oddly enough, CF itself will help you decrypt them from what it already has.

Here’s a script that will hand you, on a silver platter - well, in a table - the list of all users and their passwords.

In the C:\inetpub\wwwroot\CFIDE folder you can create a file called decrypt.cfm with this content:

Script body

  <cfset objDS = createobject("java","coldfusion.server.ServiceFactory")
  .getDatasourceService().getDatasources() />
  
    
    <cfif len(objDS[Key]["password"])>
    <cfset password = Decrypt(objDS[Key]["password"],generate3DesKey("0yJ!@1$r8p0L@r1$6yJ!@1rj"), "DESede","Base64") />
    
    </cfif>
    

    

      
DataSource
      
Username
      
Password
    
    

      
#objDS[key].name#
      
#objDS[key].username#
      
#password#
    
    
  
  

Next open a link like this one and take a look: http://your_server_ip_address/CFIDE/decrypt.cfm