[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVytUZp4GjO8n1IL_Et0FHKBqbVAQEH3HKjgJLy7DuyY":3},{"id":4,"question":5,"answer":6,"answerHtml":7,"slug":8,"keywords":9,"article":10,"status":34,"aiModel":39,"aiConfidence":39,"updatedAt":52,"createdAt":52,"_status":51},962,"How do I enable remote debugging for ADAudit Plus?","To enable remote debugging, modify the `wrapper.conf` file at `C:\\Program Files\\ManageEngine\\ADAudit Plus\\conf\\wrapper.conf` by adding a debugging parameter such as `wrapper.java.additional.25=-Xdebug`. Make sure the sequence number is incremented properly, then restart the wrapper.exe process. This approach is similar to configuring debugging for other ManageEngine products, as detailed in [this article](\u002Fnews\u002Fsetting-up-adaudit-plus-vulnerability-debugging-environment).","\u003Cp>To enable remote debugging, modify the `wrapper.conf` file at `C:\\Program Files\\ManageEngine\\ADAudit Plus\\conf\\wrapper.conf` by adding a debugging parameter such as `wrapper.java.additional.25=-Xdebug`. Make sure the sequence number is incremented properly, then restart the wrapper.exe process. This approach is similar to configuring debugging for other ManageEngine products, as detailed in [this article](\u002Fnews\u002Fsetting-up-adaudit-plus-vulnerability-debugging-environment).\u003C\u002Fp>\u003Cp>\u003Ca href=\"\u002Fnews\u002Fsetting-up-adaudit-plus-vulnerability-debugging-environment\">Read the related One Day Sec article\u003C\u002Fa>\u003C\u002Fp>","how-do-i-enable-remote-debugging-for-adaudit-plus-1777481214021","ADAudit Plus, remote debugging, wrapper.conf, Java debugging",{"id":11,"title":12,"slug":13,"description":14,"content":15,"contentHtml":30,"cover":31,"author":32,"views":19,"readingTime":33,"status":34,"publishedAt":35,"seo":36,"tags":41,"qaPairs":42,"meta":48,"updatedAt":49,"createdAt":50,"_status":51},235,"Setting Up ADAudit Plus Vulnerability Debugging Environment","setting-up-adaudit-plus-vulnerability-debugging-environment","Step-by-step guide to set up ADAudit Plus vulnerability debugging environment, configure remote debug, and get PostgreSQL adap\u002Fpostgres user passwords via decryption methods.",{"root":16},{"type":17,"format":18,"indent":19,"version":20,"children":21,"direction":29},"root","",0,1,[22],{"type":23,"format":18,"indent":19,"version":20,"children":24,"direction":29},"paragraph",[25],{"mode":26,"text":27,"type":28,"style":18,"detail":19,"format":19,"version":20},"normal","\u003Chtml>\u003Chead>\u003C\u002Fhead>\u003Cbody>\u003Cp>\u003Cstrong>Setting Up ADAudit Plus Vulnerability Debugging Environment\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>\u003Cstrong>0x00 Preface\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>This article records the details of setting up an ADAudit Plus vulnerability debugging environment from scratch and introduces methods to obtain database user passwords.\u003C\u002Fp>\u003Cp>\u003Cstrong>0x01 Introduction\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>This article will cover the following content:\u003C\u002Fp>\u003Cp>ADAudit Plus Installation\u003C\u002Fp>\u003Cp>ADAudit Plus Vulnerability Debugging Environment Configuration\u003C\u002Fp>\u003Cp>Database User Password Acquisition\u003C\u002Fp>\u003Cp>\u003Cstrong>0x02 ADAudit Plus Installation\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>\u003Cstrong>1. Download\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>Full version download address: https:\u002F\u002Farchives2.manageengine.com\u002Factive-directory-audit\u002F\u003C\u002Fp>\u003Cp>\u003Cstrong>2. Installation\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>Installation reference: https:\u002F\u002Fwww.manageengine.com\u002Fproducts\u002Factive-directory-audit\u002Fquick-start-\u003Cstrong>guide-overview.html\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>\u003Cstrong>3. Test\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>Access https:\u002F\u002Flocalhost:8081\u003C\u002Fp>\u003Cp>\u003Cstrong>0x03 ADAudit Plus Vulnerability Debugging Environment Configuration\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>The method is basically similar to the vulnerability debugging environment configuration of Password Manager Pro\u003C\u002Fp>\u003Cp>\u003Cstrong>1. Enable debugging function\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>(1) Locate the configuration file\u003C\u002Fp>\u003Cp>Check the information of Java processes; there are two Java processes here, corresponding to two different parent processes wrapper.exe, as shown in the figure below\u003C\u002Fp>\u003Cp>The process parameters of wrapper.exe are as follows:\u003C\u002Fp>\u003Cp>\"C:\\Program Files\\ManageEngine\\ADAudit Plus\\bin\\Wrapper.exe\" -c \"C:\\Program Files\\ManageEngine\\ADAudit Plus\\bin\\..\\conf\\wrapper.conf\"\u003C\u002Fp>\u003Cp>\"C:\\Program Files\\ManageEngine\\ADAudit Plus\\bin\\wrapper.exe\" -s \"C:\\Program Files\\ManageEngine\\ADAudit Plus\\apps\\dataengine-xnode\\conf\\wrapper.conf\"\u003C\u002Fp>\u003Cp>The configuration file to modify here is C:\\Program Files\\ManageEngine\\ADAudit Plus\\conf\\wrapper.conf\u003C\u002Fp>\u003Cp>(2) Modify the configuration file to add debugging parameters\u003C\u002Fp>\u003Cp>Find the position to enable the debugging function:\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"【技术原创】ADAudit Plus漏洞调试环境搭建\" src=\"\u002Fuploads\u002Fdocx_image_1769397690589_0_0b03fb86dc.png\">\u003C\u002Fp>\u003Cp>Change it to:\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"【技术原创】ADAudit Plus漏洞调试环境搭建\" src=\"\u002Fuploads\u002Fdocx_image_1769397697369_1_d0c431d136.png\">\u003C\u002Fp>\u003Cp>Note:\u003C\u002Fp>\u003Cp>The sequence numbers need to be incremented one by one; here, change wrapper.java.additional.3=-Xdebug to wrapper.java.additional.25=-Xdebug\u003C\u002Fp>\u003Cp>(3) Restart related processes\u003C\u002Fp>\u003Cp>Close the process wrapper.exe and its corresponding child process java.exe\u003C\u002Fp>\u003Cp>Execute the command in the command line:\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"【技术原创】ADAudit Plus漏洞调试环境搭建\" src=\"\u002Fuploads\u002Fdocx_image_1769397701332_2_ed3977b6d3.png\">\u003C\u002Fp>\u003Cp>\u003Cstrong>2. Location of common jar packages\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>Path: C:\\Program Files\\ManageEngine\\ADAudit Plus\\lib\u003C\u002Fp>\u003Cp>The implementation files for web functions are AdventNetADAPServer.jar and AdventNetADAPClient.jar\u003C\u002Fp>\u003Cp>\u003Cstrong>3. IDEA Settings\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>Set to Remote JVM Debug; the successful remote debugging is shown in the following figure\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"【技术原创】ADAudit Plus漏洞调试环境搭建\" src=\"\u002Fuploads\u002Fdocx_image_1769397705835_3_e268642f22.png\">\u003C\u002Fp>\u003Cp>\u003Cstrong>0x04 Obtaining Database User Passwords\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>Under default configuration, ADAudit Plus uses PostgreSQL to store data, and two login users are configured by default: adap and postgres\u003C\u002Fp>\u003Cp>\u003Cstrong>1. Obtaining the password for user adap\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>Configuration file path: C:\\Program Files\\ManageEngine\\ADAudit Plus\\conf\\database_params.conf, content example:\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"【技术原创】ADAudit Plus漏洞调试环境搭建\" src=\"\u002Fuploads\u002Fdocx_image_1769397711904_4_cf4a912bad.png\">\u003Cimg alt=\"【技术原创】ADAudit Plus漏洞调试环境搭建\" src=\"\u002Fuploads\u002Fdocx_image_1769397716576_5_9cf904f080.png\">\u003C\u002Fp>\u003Cp>Among them, the password is encrypted; the encryption and decryption algorithm is located in: com.zoho.framework.utils.crypto->CryptoUtil.class within C:\\Program Files\\ManageEngine\\ADAudit Plus\\lib\\framework-tools.jar\u003C\u002Fp>\u003Cp>After code analysis, the following decryption method is obtained:\u003C\u002Fp>\u003Cp>The key is stored in a fixed location at C:\\Program Files\\ManageEngine\\ADAudit Plus\\conf\\customer-config.xml, content example:\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"【技术原创】ADAudit Plus漏洞调试环境搭建\" src=\"\u002Fuploads\u002Fdocx_image_1769397722251_6_3f28e96919.png\">\u003C\u002Fp>\u003Cp>Get the key: CryptTag is 8ElrDgofXtbrMAtNQBqy\u003C\u002Fp>\u003Cp>Based on the above-obtained ciphertext cb26b920b56fed8d085d71f63bdd79c55ea7b98f8794699562c06ea1bedbec52087b394f and key 8ElrDgofXtbrMAtNQBqy, write a decryption program. The code is as follows:\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"【技术原创】ADAudit Plus漏洞调试环境搭建\" src=\"\u002Fuploads\u002Fdocx_image_1769397728826_7_b10fcdc8cc.png\">\u003Cimg alt=\"【技术原创】ADAudit Plus漏洞调试环境搭建\" src=\"\u002Fuploads\u002Fdocx_image_1769397734812_8_2d19391463.png\">\u003Cimg alt=\"【技术原创】ADAudit Plus漏洞调试环境搭建\" src=\"\u002Fuploads\u002Fdocx_image_1769397740227_9_91c4adc486.png\">\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"【技术原创】ADAudit Plus漏洞调试环境搭建\" src=\"\u002Fuploads\u002Fdocx_image_1769397747914_10_c39ba0b182.png\">\u003C\u002Fp>\u003Cp>After running the program, the decryption result is obtained: Adaudit@123$\u003C\u002Fp>\u003Cp>Splice the database connection command: \\\"C:\\\\Program Files\\\\ManageEngine\\\\ADAudit Plus\\\\pgsql\\\\bin\\\\psql\\\" \\\"host=127.0.0.1 port=33307 dbname=adap user=adaudit password=Adaudit@123$\\\"\u003C\u002Fp>\u003Cp>Connection successful, as shown in the following figure\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"【技术原创】ADAudit Plus漏洞调试环境搭建\" src=\"\u002Fuploads\u002Fdocx_image_1769397752565_11_7b41d96ee8.png\">\u003C\u002Fp>\u003Cp>\u003Cstrong>2. Obtaining the password for user postgres\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>The password is hard-coded in com.adventnet.sym.adsm.common.server.mssql.tools->ChangeDBServer.class->isDBServerRunning() within C:\\\\Program Files\\\\ManageEngine\\\\ADAudit Plus\\\\lib\\\\AdventnetADAPServer.jar, as shown in the following figure\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"【技术原创】ADAudit Plus漏洞调试环境搭建\" src=\"\u002Fuploads\u002Fdocx_image_1769397755847_12_3df1f416c7.png\">\u003C\u002Fp>\u003Cp>The password for user postgres is obtained as Stonebraker\u003C\u002Fp>\u003Cp>Splice the database connection command: \\\"C:\\\\Program Files\\\\ManageEngine\\\\ADAudit Plus\\\\pgsql\\\\bin\\\\psql\\\" \\\"host=127.0.0.1 port=33307 dbname=adap user=postgres password=Stonebraker\\\"\u003C\u002Fp>\u003Cp>Connection successful, as shown in the following figure\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"【技术原创】ADAudit Plus漏洞调试环境搭建\" src=\"\u002Fuploads\u002Fdocx_image_1769397760940_13_775c93f48a.png\">\u003C\u002Fp>\u003Cp>An example command to connect to the database and perform database operations in one line: \\\"C:\\\\Program Files\\\\ManageEngine\\\\ADAudit Plus\\\\pgsql\\\\bin\\\\psql\\\" --command=\\\"SELECT * FROM public.aaapassword ORDER BY password_id ASC;\\\" postgresql:\u002F\u002Fpostgres:Stonebraker@127.0.0.1:33307\u002Fadap\u003C\u002Fp>\u003Cp>Example of returned result:\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"【技术原创】ADAudit Plus漏洞调试环境搭建\" src=\"\u002Fuploads\u002Fdocx_image_1769397763661_14_fe70b9b8bc.png\">\u003C\u002Fp>\u003Cp>It is found that the data content of password is encrypted\u003C\u002Fp>\u003Cp>\u003Cstrong>0x05 Summary\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>After setting up the ADAudit Plus vulnerability debugging environment, we can then start learning about the vulnerabilities.\u003C\u002Fp>\u003C\u002Fbody>\u003C\u002Fhtml>","text","ltr","\u003Chtml>\u003Chead>\u003C\u002Fhead>\u003Cbody>\u003Cp>\u003Cstrong>Setting Up ADAudit Plus Vulnerability Debugging Environment\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>\u003Cstrong>0x00 Preface\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>This article records the details of setting up an ADAudit Plus vulnerability debugging environment from scratch and introduces methods to obtain database user passwords.\u003C\u002Fp>\u003Cp>\u003Cstrong>0x01 Introduction\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>This article will cover the following content:\u003C\u002Fp>\u003Cp>ADAudit Plus Installation\u003C\u002Fp>\u003Cp>ADAudit Plus Vulnerability Debugging Environment Configuration\u003C\u002Fp>\u003Cp>Database User Password Acquisition\u003C\u002Fp>\u003Cp>\u003Cstrong>0x02 ADAudit Plus Installation\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>\u003Cstrong>1. Download\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>Full version download address: https:\u002F\u002Farchives2.manageengine.com\u002Factive-directory-audit\u002F\u003C\u002Fp>\u003Cp>\u003Cstrong>2. Installation\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>Installation reference: https:\u002F\u002Fwww.manageengine.com\u002Fproducts\u002Factive-directory-audit\u002Fquick-start-\u003Cstrong>guide-overview.html\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>\u003Cstrong>3. Test\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>Access https:\u002F\u002Flocalhost:8081\u003C\u002Fp>\u003Cp>\u003Cstrong>0x03 ADAudit Plus Vulnerability Debugging Environment Configuration\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>The method is basically similar to the vulnerability debugging environment configuration of Password Manager Pro\u003C\u002Fp>\u003Cp>\u003Cstrong>1. Enable debugging function\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>(1) Locate the configuration file\u003C\u002Fp>\u003Cp>Check the information of Java processes; there are two Java processes here, corresponding to two different parent processes wrapper.exe, as shown in the figure below\u003C\u002Fp>\u003Cp>The process parameters of wrapper.exe are as follows:\u003C\u002Fp>\u003Cp>\"C:\\Program Files\\ManageEngine\\ADAudit Plus\\bin\\Wrapper.exe\" -c \"C:\\Program Files\\ManageEngine\\ADAudit Plus\\bin\\..\\conf\\wrapper.conf\"\u003C\u002Fp>\u003Cp>\"C:\\Program Files\\ManageEngine\\ADAudit Plus\\bin\\wrapper.exe\" -s \"C:\\Program Files\\ManageEngine\\ADAudit Plus\\apps\\dataengine-xnode\\conf\\wrapper.conf\"\u003C\u002Fp>\u003Cp>The configuration file to modify here is C:\\Program Files\\ManageEngine\\ADAudit Plus\\conf\\wrapper.conf\u003C\u002Fp>\u003Cp>(2) Modify the configuration file to add debugging parameters\u003C\u002Fp>\u003Cp>Find the position to enable the debugging function:\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"【技术原创】ADAudit Plus漏洞调试环境搭建\" src=\"\u002Fapi\u002Fmedia\u002Ffile\u002Fdocx_image_1769397690589_0_0b03fb86dc-1.png\">\u003C\u002Fp>\u003Cp>Change it to:\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"【技术原创】ADAudit Plus漏洞调试环境搭建\" src=\"\u002Fapi\u002Fmedia\u002Ffile\u002Fdocx_image_1769397697369_1_d0c431d136-1.png\">\u003C\u002Fp>\u003Cp>Note:\u003C\u002Fp>\u003Cp>The sequence numbers need to be incremented one by one; here, change wrapper.java.additional.3=-Xdebug to wrapper.java.additional.25=-Xdebug\u003C\u002Fp>\u003Cp>(3) Restart related processes\u003C\u002Fp>\u003Cp>Close the process wrapper.exe and its corresponding child process java.exe\u003C\u002Fp>\u003Cp>Execute the command in the command line:\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"【技术原创】ADAudit Plus漏洞调试环境搭建\" src=\"\u002Fapi\u002Fmedia\u002Ffile\u002Fdocx_image_1769397701332_2_ed3977b6d3-1.png\">\u003C\u002Fp>\u003Cp>\u003Cstrong>2. Location of common jar packages\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>Path: C:\\Program Files\\ManageEngine\\ADAudit Plus\\lib\u003C\u002Fp>\u003Cp>The implementation files for web functions are AdventNetADAPServer.jar and AdventNetADAPClient.jar\u003C\u002Fp>\u003Cp>\u003Cstrong>3. IDEA Settings\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>Set to Remote JVM Debug; the successful remote debugging is shown in the following figure\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"【技术原创】ADAudit Plus漏洞调试环境搭建\" src=\"\u002Fapi\u002Fmedia\u002Ffile\u002Fdocx_image_1769397705835_3_e268642f22-1.png\">\u003C\u002Fp>\u003Cp>\u003Cstrong>0x04 Obtaining Database User Passwords\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>Under default configuration, ADAudit Plus uses PostgreSQL to store data, and two login users are configured by default: adap and postgres\u003C\u002Fp>\u003Cp>\u003Cstrong>1. Obtaining the password for user adap\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>Configuration file path: C:\\Program Files\\ManageEngine\\ADAudit Plus\\conf\\database_params.conf, content example:\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"【技术原创】ADAudit Plus漏洞调试环境搭建\" src=\"\u002Fapi\u002Fmedia\u002Ffile\u002Fdocx_image_1769397711904_4_cf4a912bad-1.png\">\u003Cimg alt=\"【技术原创】ADAudit Plus漏洞调试环境搭建\" src=\"\u002Fapi\u002Fmedia\u002Ffile\u002Fdocx_image_1769397716576_5_9cf904f080-1.png\">\u003C\u002Fp>\u003Cp>Among them, the password is encrypted; the encryption and decryption algorithm is located in: com.zoho.framework.utils.crypto->CryptoUtil.class within C:\\Program Files\\ManageEngine\\ADAudit Plus\\lib\\framework-tools.jar\u003C\u002Fp>\u003Cp>After code analysis, the following decryption method is obtained:\u003C\u002Fp>\u003Cp>The key is stored in a fixed location at C:\\Program Files\\ManageEngine\\ADAudit Plus\\conf\\customer-config.xml, content example:\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"【技术原创】ADAudit Plus漏洞调试环境搭建\" src=\"\u002Fapi\u002Fmedia\u002Ffile\u002Fdocx_image_1769397722251_6_3f28e96919-1.png\">\u003C\u002Fp>\u003Cp>Get the key: CryptTag is 8ElrDgofXtbrMAtNQBqy\u003C\u002Fp>\u003Cp>Based on the above-obtained ciphertext cb26b920b56fed8d085d71f63bdd79c55ea7b98f8794699562c06ea1bedbec52087b394f and key 8ElrDgofXtbrMAtNQBqy, write a decryption program. The code is as follows:\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"【技术原创】ADAudit Plus漏洞调试环境搭建\" src=\"\u002Fapi\u002Fmedia\u002Ffile\u002Fdocx_image_1769397728826_7_b10fcdc8cc-1.png\">\u003Cimg alt=\"【技术原创】ADAudit Plus漏洞调试环境搭建\" src=\"\u002Fapi\u002Fmedia\u002Ffile\u002Fdocx_image_1769397734812_8_2d19391463-1.png\">\u003Cimg alt=\"【技术原创】ADAudit Plus漏洞调试环境搭建\" src=\"\u002Fapi\u002Fmedia\u002Ffile\u002Fdocx_image_1769397740227_9_91c4adc486-1.png\">\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"【技术原创】ADAudit Plus漏洞调试环境搭建\" src=\"\u002Fapi\u002Fmedia\u002Ffile\u002Fdocx_image_1769397747914_10_c39ba0b182-1.png\">\u003C\u002Fp>\u003Cp>After running the program, the decryption result is obtained: Adaudit@123$\u003C\u002Fp>\u003Cp>Splice the database connection command: \\\"C:\\\\Program Files\\\\ManageEngine\\\\ADAudit Plus\\\\pgsql\\\\bin\\\\psql\\\" \\\"host=127.0.0.1 port=33307 dbname=adap user=adaudit password=Adaudit@123$\\\"\u003C\u002Fp>\u003Cp>Connection successful, as shown in the following figure\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"【技术原创】ADAudit Plus漏洞调试环境搭建\" src=\"\u002Fapi\u002Fmedia\u002Ffile\u002Fdocx_image_1769397752565_11_7b41d96ee8-1.png\">\u003C\u002Fp>\u003Cp>\u003Cstrong>2. Obtaining the password for user postgres\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>The password is hard-coded in com.adventnet.sym.adsm.common.server.mssql.tools->ChangeDBServer.class->isDBServerRunning() within C:\\\\Program Files\\\\ManageEngine\\\\ADAudit Plus\\\\lib\\\\AdventnetADAPServer.jar, as shown in the following figure\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"【技术原创】ADAudit Plus漏洞调试环境搭建\" src=\"\u002Fapi\u002Fmedia\u002Ffile\u002Fdocx_image_1769397755847_12_3df1f416c7-1.png\">\u003C\u002Fp>\u003Cp>The password for user postgres is obtained as Stonebraker\u003C\u002Fp>\u003Cp>Splice the database connection command: \\\"C:\\\\Program Files\\\\ManageEngine\\\\ADAudit Plus\\\\pgsql\\\\bin\\\\psql\\\" \\\"host=127.0.0.1 port=33307 dbname=adap user=postgres password=Stonebraker\\\"\u003C\u002Fp>\u003Cp>Connection successful, as shown in the following figure\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"【技术原创】ADAudit Plus漏洞调试环境搭建\" src=\"\u002Fapi\u002Fmedia\u002Ffile\u002Fdocx_image_1769397760940_13_775c93f48a-1.png\">\u003C\u002Fp>\u003Cp>An example command to connect to the database and perform database operations in one line: \\\"C:\\\\Program Files\\\\ManageEngine\\\\ADAudit Plus\\\\pgsql\\\\bin\\\\psql\\\" --command=\\\"SELECT * FROM public.aaapassword ORDER BY password_id ASC;\\\" postgresql:\u002F\u002Fpostgres:Stonebraker@127.0.0.1:33307\u002Fadap\u003C\u002Fp>\u003Cp>Example of returned result:\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"【技术原创】ADAudit Plus漏洞调试环境搭建\" src=\"\u002Fapi\u002Fmedia\u002Ffile\u002Fdocx_image_1769397763661_14_fe70b9b8bc-1.png\">\u003C\u002Fp>\u003Cp>It is found that the data content of password is encrypted\u003C\u002Fp>\u003Cp>\u003Cstrong>0x05 Summary\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>After setting up the ADAudit Plus vulnerability debugging environment, we can then start learning about the vulnerabilities.\u003C\u002Fp>\u003C\u002Fbody>\u003C\u002Fhtml>",516,"Onedaysec",3,"published","2026-02-02T07:25:20.010Z",{"title":37,"description":14,"keywords":38,"ogImage":39,"canonicalUrl":39,"noIndex":40},"ADAudit Plus Vulnerability Debugging Env Setup & DB Password Guide","ADAudit Plus, vulnerability debugging environment setup, database password acquisition, PostgreSQL, adap password, postgres password, ManageEngine, remote JVM debug",null,false,[],{"docs":43,"hasNextPage":40},[44,45,46,47,4],966,965,964,963,{"title":39,"description":39,"image":39},"2026-07-24T15:37:10.533Z","2026-07-23T16:02:20.661Z","draft","2026-07-23T16:15:47.883Z"]