• 软件测试技术
  • 软件测试博客
  • 软件测试视频
  • 开源软件测试技术
  • 软件测试论坛
  • 软件测试沙龙
  • 软件测试资料下载
  • 软件测试杂志
  • 软件测试人才招聘
    暂时没有公告

字号: | 推荐给好友 上一篇 | 下一篇

Decrypt encrypted stored procedures

发布: 2007-7-02 11:08 | 作者: admin | 来源: | 查看: 15次 | 进入软件测试论坛讨论

领测软件测试网
http://searchdatabase.techtarget.com/tip/1,289483,sid13_gci837799,00.html



This SP will decrypt Stored Procedures, Views or Triggers that were encrypted using "with encryption". It is adapted from a script by Joseph Gama and ShoeBoy. There are two versions: one for SP@#s only and the other one for SP@#s, triggers and views. For version 1, the input is object name (stored procedure, view or trigger), and for version 2, the input is object name (stored procedure, view or trigger), object type (@#T@#-trigger, @#P@#-stored procedure or @#V@#-view). From Pl.netSourceCode.com.


create PROCEDURE sp_decrypt_sp (@objectName varchar(50))ASDECLARE @OrigSpText1 nvarchar(4000), @OrigSpText2 nvarchar(4000) , @OrigSpText3 nvarchar(4000), @resultsp nvarchar(4000)declare @i int , @t bigint--get encrypted dataSET @OrigSpText1=(SELECT ctext FROM syscomments WHERE id = object_id(@objectName))SET @OrigSpText2=@#ALTER PROCEDURE @#+ @objectName +@# WITH ENCRYPTION AS @#+REPLICATE(@#-@#, 3938)EXECUTE (@OrigSpText2)SET @OrigSpText3=(SELECT ctext FROM syscomments WHERE id = object_id(@objectName))SET @OrigSpText2=@#CREATE PROCEDURE @#+ @objectName +@# WITH ENCRYPTION AS @#+REPLICATE(@#-@#, 4000-62)--start counterSET @i=1--fill temporary variableSET @resultsp = replicate(N@#A@#, (datalength(@OrigSpText1) / 2))--loopWHILE @i<=datalength(@OrigSpText1)/2BEGIN--reverse encryption (XOR original+bogus+bogus encrypted)SET @resultsp = stuff(@resultsp, @i, 1, NCHAR(UNICODE(substring(@OrigSpText1, @i, 1)) ^ (UNICODE(substring(@OrigSpText2, @i, 1)) ^ UNICODE(substring(@OrigSpText3, @i, 1))))) SET @i=@i+1END--drop original SPEXECUTE (@#drop PROCEDURE @#+ @objectName)--remove encryption--preserve caseSET @resultsp=REPLACE((@resultsp),@#WITH ENCRYPTION@#, @#@#)SET @resultsp=REPLACE((@resultsp),@#With Encryption@#, @#@#)SET @resultsp=REPLACE((@resultsp),@#with encryption@#, @#@#)IF CHARINDEX(@#WITH ENCRYPTION@#,UPPER(@resultsp) )>0 SET @resultsp=REPLACE(UPPER(@resultsp),@#WITH ENCRYPTION@#, @#@#)--replace Stored procedure without enryptionexecute( @resultsp)GO



Reader Feedback


Joakim M. writes: I tried this script with mixed results. It works for some encrypted procedures, but for others I get error meassages like:

Server: Msg 512, Level 16, State 1, Procedure sp_decrypt_sp, Line 7.Subquery returned more than 1 value. This is not permitted when the subquery follows =, !=, <, <= , >, >= or when the subquery is used as an expression.

Karl C writes: I got the same message as Joakim M. but upon further investigation I found that this happens only when stored procedures exceed 4000 characters. When this happens, SQL Server stores the procedure across multiple rows so you get the error @#subquery returne more than 1 row@#. To get around that you can change the statement

SELECT ctext FROM syscomments WHERE id = object_id(@objectNameto SELECT top 1 ctext FROM syscomments WHERE id = object_id(@objectName order by colid

That will get you the first part of the stored procedure, which can@#t be created because it is missing the end part and is not a valid syntax but you can print @resultsp out to see it.

For More Information

Feedback: E-mail the editor with your thoughts about this tip. More tips: Hundreds of free SQL Server tips and scripts. Tip contest: Have a SQL Server tip to offer your fellow DBAs and developers? The best tips submitted will receive a cool prize -- submit your tip today! Best Web Links: SQL Server tips, tutorials, scripts, and more. Forums: Ask your technical SQL Server questions--or help out your peers by answering them--in our active forums. Ask the Experts: Our SQL, Database Design, Oracle, SQL Server, DB2, metadata, and data warehousing gurus are waiting to answer your toughest questions.

文章来源于领测软件测试网 https://www.ltesting.net/


关于领测软件测试网 | 领测软件测试网合作伙伴 | 广告服务 | 投稿指南 | 联系我们 | 网站地图 | 友情链接
版权所有(C) 2003-2010 TestAge(领测软件测试网)|领测国际科技(北京)有限公司|软件测试工程师培训网 All Rights Reserved
北京市海淀区中关村南大街9号北京理工科技大厦1402室 京ICP备10010545号-5
技术支持和业务联系:info@testage.com.cn 电话:010-51297073

软件测试 | 领测国际ISTQBISTQB官网TMMiTMMi认证国际软件测试工程师认证领测软件测试网