openfire_decrypt

Little java tool to decrypt passwords from Openfire embedded-db.
Originally published at https://hashcat.net/forum/archive/index.php?thread-2399.html

Compilation:

javac OpenFireDecryptPass.java

Launch & output:

java OpenFireDecryptPass 08f62fb6091259a2be869ae0ace90f600ec3729a9d5d4683 UaNTQtUV6S7kwm9

hashcat (hex: 0068006100730068006300610074)

Known issue:

Failure to decrypt due to lack of unlimited strength files. Example of error:

Exception in thread "main" java.security.InvalidKeyException: Illegal key size

... at OpenFireDecryptPass.main(OpenFireDecryptPass.java:26)

Solution:

Download the necessary files and install them in ${java.home}/jre/lib/security/

URLs to download:

Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files 6

Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files 7

Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files 8