---
id: 8217
title: "Decrypting WebLogic Passwords"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/web-application-pentesting/decrypting-weblogic-passwords/"
published_at: "2015-04-06T00:00:00Z"
tags: ["pentesting", "lateral-movement", "oracle", "credential-recovery", "weblogic", "password-decryption"]
phying_url: "https://phying.com/item/8217"
lang: en
---

# Decrypting WebLogic Passwords

## Summary

An exposed Samba share revealed a WebLogic install during an internal pentest; this walkthrough decrypts credentials from WebLogic configs to pivot to Oracle databases and other systems.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2015-04-06T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/web-application-pentesting/decrypting-weblogic-passwords/
- **Phying News:** https://phying.com/item/8217