Wednesday, March 1, 2017

Decoding WebSphere's {xor} passwords


The following bash/sh commands can be used to decode WebSphere's {xor} passwords. Execute the commands on a host with WebSphere installed:

export WAS_HOME=/opt/ibm/bpm/85/AppServer_x64
export MYCLASSPATH=$WAS_HOME/plugins/com.ibm.ws.runtime.jar:$WAS_HOME/lib/bootstrap.jar:$WAS_HOME/plugins/com.ibm.ws.emf.jar:$WAS_HOME/lib/ffdc.jar:$WAS_HOME/plugins/org.eclipse.emf.ecore.jar:$WAS_HOME/plugins/org.eclipse.emf.common.jar
$WAS_HOME/java/bin/java -cp $MYCLASSPATH com.ibm.ws.security.util.PasswordDecoder {xor}NzozMzA=