Reset/crack admin passwords for common programs (discuz, ecshop, shopex, dedecms, etc.)
Published: 2014-12-03
Tutorial for resetting forgotten backend passwords of common programs (discuz,ecshop,shopex,dedecms,wordpres, etc.)
1.Discuz
(1)discuz officialtools to reset, including multiple versions
http://www.discuz.net/thread-3339530-1-1.html
(2)In the uc_server/data/config.inc.php file,
define('UC_FOUNDERPW', '256955f2e034sad74f0e2953572ea360');
define('UC_FOUNDERSALT', '217804');
Replace
define('UC_FOUNDERPW', '047099adb883dc19616dae0ef2adc5b6');
define('UC_FOUNDERSALT', '311254');
After modification, Ucenter founder's password becomes: 123456789 , then you can log in toUcenter user management
Change the administrator account password to what you want.
2.Ecshop
Create a findpass.php, put it in the root directory, save the following code intofindpass.php
<?
if(isset($_GET['password'])) {
define('IN_ECS', true);
require(dirname(__FILE__) . '/includes/init.php');
$username=trim($_GET['username']);
$password=trim($_GET['password']);
$sql="Select `ec_salt` FROM ". $ecs->table('admin_user') ."Where user_name = '" . $username."'";
$ec_salt =$db->getOne($sql);
$sqlu= "Update " . $ecs->table('admin_user') . " SET password = '" . md5(md5($password).$ec_salt) . "' Where user_name='".$username."'";
mysql_query($sqlu);
print "<br>Administrator has been changed to <font color=red>$username</font> , password changed to <font color=red>".$_GET[password]."</font>";
}
?>
<form>
<table>
<tr><td>Username: </td><td><input type="text" name="username">This must be an existing administrator account in the database</td></tr>
<tr><td>New password: </td><td><input type="text" name="password"></td></tr>
<tr><td colspan=2 align='center'><input type="submit" name="submit")> </td></tr>
</table>
</form>
Visit http://your domain/findpass.php enter the administrator account and the password to reset
Method to modify in the database:
Table name:ecs_admin_user
Field user_name change to admin, field password change to e769f6a1958f90fb8500daa5ad0bd698 ec_salt change to 9708
Password can be reset to 123456
Also, older versions do not have thesalt field, just modify thepassword field, the password ismd5 encrypted,md5 32 encryption
Passworde10adc3949ba59abbe56e057f20f883e=123456
3.Shopex
Create a findpass.php, put it in the root directory, save the following code intofindpass.php
<?php
if(isset($_GET['password'])) {
require("config/config.php");
$link=mysql_connect(DB_HOST,DB_USER,DB_PASSWORD);
mysql_select_db(DB_NAME);
$username=trim($_GET['username']);
$password=md5(trim($_GET['password']));
$query="update ".DB_PREFIX."operators set username='".$username."', userpass='".$password."' where op_id='1'" ;
if($rs=mysql_query($query,$link))
{
print "<br>Administrator has been changed to <font color=red>$username</font> , password is <font color=red>".$_GET[password]."</font>";
}
else{
print mysql_error();
}
mysql_close($link);
}
?>
<form >
<table>
<tr><td>New username: </td><td><input type="text" name="username">Here you can set a new administrator</td></tr>
<tr><td>New password: </td><td><input type="text" name="password"></td></tr>
<tr><td colspan=2 align='center'><input type="submit" name="submit")> </td></tr>
</table>
</form>
Visithttp://your domain/findpass.php enter the administrator account and the password to reset
Method to modify in the database:
Table name operators, field username change to admin userpass change to e10adc3949ba59abbe56e057f20f883e Password can be reset to 123456
4.Dedecms
Create a findpass.php, put it in the root directory, save the following code intofindpass.php
<?php
if(isset($_GET['password']))
{
require_once(dirname(__FILE__)."/include/common.inc.php");
$username=trim($_GET['username']);
$pwd1=trim($_GET['password']);
$pwd =substr(md5($pwd1),5,20);
$query="update ".$cfg_dbprefix."admin set userid='".$username."', pwd='".$pwd."' where usertype='10'" ;
$dsql->ExecuteNoneQuery($query);
print "<br>Administrator has been changed to <font color=red>$username</font> , password changed to <font color=red>".$password."</font>";
}
?>
<form>
<table>
<tr><td>New username: </td><td><input type="text" name="username">Here you can set a new administrator</td></tr>
<tr><td>New password: </td><td><input type="text" name="password"></td></tr>
<tr><td colspan=2 align='center'><input type="submit" name="submit")> </td></tr>
</table>
</form>
Visithttp://your domain/findpass.php enter the administrator account and the password to reset
Method to modify in the database:
Table name dede_admin field userid change to admin field pwd change to c3949ba59abbe56e057f password is 123456
5.wordpress two methods to reset
Method ①: Create a findpass.php, put it in the root directory, save the following code into findpass.php
<?php
if(isset($_GET['password'])) {
$username=trim($_GET['username']);
$password1=trim($_GET['password']);
require_once(dirname(__FILE__).'/wp-load.php');
global $wp_hasher,$wpdb;
if(empty($wp_hasher)){
require_once( ABSPATH.'/wp-includes/class-phpass.php');
$wp_hasher = new PasswordHash(8, TRUE);
}
$password = $wp_hasher->HashPassword($password1);
$wpdb->query("UPDATE $wpdb->users SET user_pass='$password' WHERE user_login='$username'");
print "<br>Administrator has been changed to <font color=red>$username</font> , password changed to <font color=red>".$_GET[password]."</font>";
}
?>
<form >
<table>
<tr><td>Username:</td><td><input type="text" name="username">This must be an existing administrator account in the database</td></tr>
<tr><td>New password:</td><td><input type="text" name="password"></td></tr>
<tr><td colspan=2 align='center'><input type="submit" name="submit")> </td></tr>
</table>
</form>
Visit http://your domain/findpass.php enter the administrator account and the password to reset
Method ②: Method to modify in the database:
New version (6.x) wordpress corresponding table name wp_user, field user_login change to admin, field user_pass change to $1$rSziHLDY$399k.JuJsy.oHVp5lquJC. password is 123456
Older versions (5.x etc.) wordpress table name wp_user, field user_login change to admin, field user_pass change to $P$BH2J72eCYZydM7LFVAus1BjOG.XWs8. password is 123456
Also, for older versions without special encryption, change the password field to e10adc3949ba59abbe56e057f20f883e which is 123456
6.多多返利v8
<?php
header("Content-type: text/html; charset=utf-8");
if(isset($_GET['password'])) {
$username=trim($_GET['username']);
$password=trim($_GET['password']);
define('INDEX',1);
include_once 'comm/dd.config.php';
$re=$duoduo->select('duoduo2010','id,adminname','1');
mysql_select_db(DB_NAME);
$user=$username;
$pass=$password;
$data=array('adminname'=>$username,'adminpass'=>deep_jm($pass));
$duoduo->update('duoduo2010',$data,'id="'.$re['id'].'"');
print "<br>Administrator has been changed to<font color=red>".$user."</font> , password is <font color=red>".$pass."</font>";
}
?>
<form >
<table>
<tr><td>New username:</td><td><input type="text" name="username">Here you can set a new administrator</td></tr>
<tr><td>New password:</td><td><input type="text" name="password"></td></tr>
<tr><td colspan=2 align='center'><input type="submit" name="submit")> </td></tr>
</table>
</form>
Visithttp://your domain/findpass.php enter the administrator account and the password to reset
Method to modify in the database:
Table name duoduo_duoduo2010
Field adminname change to admin, field adminpass to 910c837500c454f26d116680410243c2
Password can be reset to 123456
Also, for older versions before v7 without special encryption, change the password field toe10adc3949ba59abbe56e057f20f883e=123456
7.phpweb
<?php
if(isset($_GET['password'])) {
require("config.inc.php");
$link=mysql_connect($dbHost,$dbUser,$dbPass);
mysql_select_db($dbName);
$username=trim($_GET['username']);
$password=md5(trim($_GET['password']));
$query="update ".$TablePre."_base_admin set user='".$username."', password='".$password."' where user='".$username."'" ;
if($rs=mysql_query($query,$link))
{
print "<br>Administrator has been changed to<font color=red>$username</font> , password is <font color=red>".$_GET[password]."</font>";
}
else{
print mysql_error();
}
mysql_close($link);
}
?>
<form >
<table>
<tr><td>New username:</td><td><input type="text" name="username">This must be an existing administrator account in the database</td></tr>
<tr><td>New password:</td><td><input type="text" name="password"></td></tr>
<tr><td colspan=2 align='center'><input type="submit" name="submit")> </td></tr>
</table>
</form>
Save the above code, rename the file to findpass.php and upload it to the wwwroot directory.
Visithttp://your domain/findpass.php enter the administrator account and the password to reset
Method to modify in the database:
Table namedev_base_admin
Field user change to admin, field password to e10adc3949ba59abbe56e057f20f883e
Password can be reset to 123456
8. pigcms (小猪CMS) forgot administrator password reset method:
Open database table _user through phpmyadmin in the control panel, as shown in the figure


The password is md5 encrypted (32-bit). Click edit, change the original password field value to: 21232f297a57a5a743894a0e4a801fc3, and the password will be reset to admin
9. phpcms v9 forgot administrator password reset method:
Open the corresponding database management, find the xxx_admin table (xxx_ is the table prefix), click edit
Change the field at 1 to: 62d2ff1e3d42334e6216d628a5051c08
Change the field at 2 to: 7YIwnY
After modification, click execute to save.

The modified password will be reset to phpcms, please log in to the backend and then change the password again.
10. metinfo
For metinfo CMS, refer to the official instructions: https://www.metinfo.cn/download/54.html
11. 帝国cms reset administrator password
Download reset script, extract it, upload the resetuser.php file to the /e/update/ directory, then visit www.xxx.com//e/update/resetuser.php to dynamically reset (replace xxx.com with your own domain)
12. pbootcms reset password
Download tool to reset, download address: PB password reset tool (this tool comes from the Internet, not provided by our company).
Upload the file to the website root directory, visit http://your domain/resetpw.php to reset the password. Remember to delete the file after recovering the password.
