how-does-navicat-encrypt-password

How Does Navicat Encrypt Password?

This repo will tell you how Navicat encrypts password and offer a tool to reveal passwords encrypted by Navicat.

1. What is Navicat?

Navicat is a series of graphical database management and development software produced by PremiumSoft CyberTech Ltd. for MySQL, MariaDB, Oracle, SQLite, PostgreSQL and Microsoft SQL Server.

It has an Explorer-like graphical user interface and supports multiple database connections for local and remote databases. Its design is made to meet the needs of a variety of audiences, from database administrators and programmers to various businesses/companies that serve clients and share information with partners.

2. What does indicate that Navicat encrypts password?

If you use Navicat to manage one of your databases, the first thing you should do is to create a connection to the database. So that means you should fill textboxes on the window showed below with the database's information like Host name, User name, Password and so on.

If you check "Save Password", after you click "Ok" button, Navicat will encrypt the password and then save the connection configuration, containing encrypted password, in Windows Registry. The exact path is showed below:

The following is an example:

3. How does Navicat encrypt password?

See here.

4. How to use the sample code in python3 folder?

• Please make sure you have Python3.

• Please make sure you have following packages if you want to use navicat-cipher.py and ncx-dump.py:

  复制

  cryptography
  pywin32       // required if you want to get navicat_cred from Windows Credential Manager automatically

  You can install them via command:

  bash复制

  $ pip install cryptography pywin32

• Please make sure that you have package pywin32 if you want to use show-navicat.py.

  You can install package pywin32 via command:

  bash复制

  $ pip install pywin32

1. navicat-cipher.py

   复制

   usage: navicat-cipher.py enc [-h] (-v1 | -v2 | -v3) [--cred CRED] PASSWD
   
   positional arguments:
     PASSWD       the password in plaintext
   
   options:
     -h, --help   show this help message and exit
     -v1          use v1 algorithm
     -v2          use v2 algorithm
     -v3          use v3 algorithm
     --cred CRED  the value of navicat_cred, which is used by -v3

   复制

   usage: navicat-cipher.py dec [-h] (-v1 | -v2 | -v3) [--cred CRED] PASSWD
   
   positional arguments:
     PASSWD       the password in ciphertext
   
   options:
     -h, --help   show this help message and exit
     -v1          use v1 algorithm
     -v2          use v2 algorithm
     -v3          use v3 algorithm
     --cred CRED  the value of navicat_cred, which is used by -v3

   Example:

…

1. ncx-dump.py

   Show database servers' information inside *.ncx file.

   复制

   usage: ncx-dump.py [-h] FILE
   
   positional arguments:
     FILE        path to .ncx file
   
   options:
     -h, --help  show this help message and exit

   Example:

…

1. show-navicat.py

   Just run it on Windows.

   It will list all Navicat configurations stored in Windows Registry.

   Example:

…