search

sadshade / veeam-creds

Collection of scripts to retrieve stored passwords from Veeam Backup
GNU General Public License v3.0
99 stars 28 forks source link

Could check if your script work with B&R 12 ? #3

Open gauthi3r opened 1 year ago

gauthi3r commented 1 year ago

Hi, After upgrading on Veeam B&R 12, i try to execute the script, it failed. The output :

" PS C:\Users\Administrator\Downloads\veeam-creds-main> .\Veeam-Get-Creds.ps1

Found Veeam DB on \@, connecting... Can't connect to DB, exit. "

Thanks,

NeffIsBack commented 1 year ago

This is because veeam changed the configuration Path. Replace the path in line with this Path: HKLM:\SOFTWARE\Veeam\Veeam Backup and Replication\DatabaseConfigurations\MsSql\ and it will work again.

@sadshade do you have any idea how to extract the credentials (or at first access connect) from the newly introduced postgresql database? The registry schema is pretty similar to MsSql but i have no idea how i could connect to postgresql with powershell.

ZredamanJ commented 3 months ago

PS C:\tools> .\Veeam-Get-Creds.ps1

Found Veeam DB on DESKTOP-TPTNF54\@VeeamBackup, connecting... OK

Here are some passwords for you, have fun: Exception occurred when calling "Unprotect" with "3" arguments: "Invalid data. " Location C:\tools\1.ps1:4 Characters: 2

Exception while calling 'GetString' with '1' argument: 'Array cannot be empty. Parameter name: bytes” Location C:\tools\1.ps1:6 Characters: 2

User name Password

daa VmVlYW1TYWx0ZWRQcm90ZWN0aW9uzql1lVA+50K2UiS7tMNXwAEAAADQjJ3fARXREYx6AMBPwpfrAQAAANR7lAEezipKohgFbHXEAeEEAA... da VmVlYW1TYWx0ZWRQcm90ZWN0aW9uzql1lVA+50K2UiS7tMNXwAEAAADQjJ3fARXREYx6AMBPwpfrAQAAANR7lAEezipKohgFbHXEAeEEAA...

ZredamanJ commented 3 months ago

I think the veeam encryption method has changed in version 12 and the password cannot be decrypted using DPAPI

konstntin-l2w commented 3 months ago

Hi,

Sorry, don't have one