A hash is a one way thing so you can't reverse it. However, if they have that much access it'd be trivial to just change your script to dump the username/passw

A hash is a one way thing so you can't reverse it. However, if they have that much access it'd be trivial to just change your script to dump the username/password combo into a plain text file whenever the login succeeds.