WlsDecrypt is a tiny Java class that decrypts AES encrypted strings by WebLogic Servers, e.g. admin console users.
The WlsDecrypt project is sponsored by CGI.
You can download WlsDecrypt by cloning the Git repository:
git clone https://github.com/p33kab00/WlsDecrypt.git
Compile the class with dependencies from WebLogic Server:
$ WLS="/oracle/middleware/wlserver_10.3/server/lib"
$ javac -cp "$WLS/cryptoj.jar;$WLS/weblogic.jar;" WlsDecrypt.java
Find e.g. the bootstrap admin console user's credentials:
$ cat /oracle/domains/DefaultDomain/servers/DefaultServer/security/boot.properties
# Generated by Configuration Wizard on Fri Dec 01 10:20:13 CET 2017
username={AES}wOsx/JrVWezGwFi1qMmUgOYEfqYTPfy0YwNWrYmewDM=
password={AES}Gmmlr3pH5sXt4grGybvmeG80dOhaC0pf7KhHEm2c3cU=
Decrypt the username with WlsDecrypt:
$ WLS="/oracle/middleware/wlserver_10.3/server/lib"
$ java -cp "$WLS/cryptoj.jar;$WLS/weblogic.jar;" WlsDecrypt "/oracle/domains/DefaultDomain/" {AES}wOsx/JrVWezGwFi1qMmUgOYEfqYTPfy0YwNWrYmewDM=
[*] WlsDecrypt 0.1
[*] by p33kab00 (mudnorb@gmail.com)
Decrypted value: weblogic
Decrypt the password with WlsDecrypt:
$ java -cp "$WLS/cryptoj.jar;$WLS/weblogic.jar;" WlsDecrypt "/oracle/domains/DefaultDomain/" {AES}Gmmlr3pH5sXt4grGybvmeG80dOhaC0pf7KhHEm2c3cU=
[*] WlsDecrypt 0.1
[*] by p33kab00 (mudnorb@gmail.com)
Decrypted value: manager1