This small wizard will crack all the username and password combinations for all ColdFusion 5 and 4.5x datasources and return them in clear text. It uses a brute force approach by simply trying all possible patterns for passwords up to 16 characters by default (modifiable) having characters from ASCI 33 to 126, which includes the alphanumeric range. It requires that the CFREGISTRY tag is enabled.


I wrote it for someone that had lost their passwords after someone else left the company and trashed all the records the company had regarding the CFAdmin settings.


Download