|
|
PASSWORD RECOVERY
Some tools able to recover the encoded passwords or data stored by some programs.
Usually a classical passwords-behind-asterix revealing program (like Asterisk Logger for example) is enough to see any password but the purpose of this section is essentially showing what type of algorithm has been used by the listed programs.
The final numbers within parenthesis are the exact versions of the programs tested by me (only needed if exist older or newer versions using different algorithms) and a link to the program's homepage.
Some of these tools are completely automatic and easy to use like the drag'n drop usage while others need command-line arguments.
- SmartFTP password decoder 0.1 (smartftppwd)
decrypts the password passed at command-line, passwords are located in the XML files in %APPDATA%\SmartFTP\Client 2.0\Favorites (3.0)
- HP LoadRunner password decoder 0.1 (loadrunnerpwd)
decodes the passwords created for LoadRunner with CryptonApp (9.10)
- Steam password decoder 0.2.2 (steampwd)
decodes the passwords stored in the local ClientRegistry.blob file, remember that Steam uses an unique key to encrypt the password so if you have reinstalled your Windows you could not be able to recover it
works also from command-line allowing to pass directly the encrypted password and the needed key (1.0.0.0)
- Winzip wjf xflags password decrypter 0.1 (wjfdec)
decrypts all the xflags passwords in the job files (11.1)
- Reach-a-Mail passwords decoder 0.1 (reachmailpwd)
decodes all the passwords in the Reach-a-Mail.ini file located in the Data folder (3.1)
- Toca Race Driver series accounts passwords decoder 0.1 (coreonline)
decodes all the passwords in the Codemasters\Core_Online registry key (1.2)
- CoreFTP password decoder 0.1 (coreftppwd)
decodes any password from the command-line or the registry (2.00)
- Valve games control password disabler 0.1 (valvepwd)
a simple tool for disabling and restoring the control password used in games like Half-Life and Counter-Strike
- EasyWebCam passwords decoder 0.1 (easywebcampwd)
decodes both the ftp and wap passwords (3.5.0.8)
- CamFrog passwords decrypter 0.2 (camfrogpwd)
decrypts all the passwords stored in the registry or provided by the user and also the Serial and ActivationData containing the Pro version key (5.00)
- Gftp bookmarks passwords decoder 0.1.1 (gftpdec)
decodes the password stored in the bookmarks file (2.0.18)
- Trend Micro OfficeScan encrypted MD5 passwords 0.1
(officescan_pwdmd5)
only a short document (no code available yet) about how to find the decrypted MD5 hashes of the passwords stored in Ofcscan.ini (7.3)
- Generic CryptUnprotectData and RDP passwords decrypter 0.1.1
(cunprot)
this tool has been created for decrypting the password in the local RDP files used for Remote Desktop but I have made it compatible to decrypt any type of input with the CryptUnprotectData function.
This tool works also with the password stored in the Profile.con file of Battlefield 2 and many other programs which use the same encryption method
In case of problems or unrecognized password, copy the password hash in a new text file and pass it to the tool
Note that only the user who encrypted the password can decrypt it
- *VNC password decoder 0.2
(vncpwd)
decrypts the passwords encrypted with the classic VNC des method found in the vnc files, from the command-line and in the registry (VNC, TightVNC, Ultr@VNC and many others)
- BF2AutoLoader password decoder 0.1 (bf2alpwd)
decodes the password stored in the registry or provided by the user at command-line (2.0.0.2)
Note that this tool needs .NET or Mono/DotGNU libraries
- Blade of Darkness gore password decoder 0.1 (bladepwd)
decodes the password stored in Password.txt of the game Severance: Blade of Darkness (1.001)
- KomaMail files and passwords decoder 0.1 (komamailpwd)
decodes the passwords stored in setup.ini and accounts.dat (3.42)
- Battlefield 2 Remote Administrator (BF2RA) password decoder 0.1 (bf2rapwd)
decodes the password in settings.ini (0.2)
- Hide My Files folders unhider and scanner 0.1 (unhmf)
automatically scans a specific folder searching all the folders hidden by this useless program (1.0)
- Willing Webcam password decoder 0.1 (wwpwd)
decodes the initial password stored in the registry (2.8)
- Empire Earth 2 online account password decoder 0.1 (ee2pwd)
simple password decoder for the Gamespy account contained in settings.cfg, tested versus the demo but should work versus the retail too (1.1)
- Soldier of Fortune 1 and 2 violence password decoder 0.3 (sof2violpwd)
decodes the violence password stored in the registry of both Soldier of Fortune 1 and 2 (1.07 and 1.03)
- The Universal (Galaxy) password decoder 0.1 (theunipwd)
decodes the password in the file Tractor.cfx (1.38)
- BF1942 Server and Remote Manager passwords decoder 0.1 (bfsmpwd)
decodes any server and client password and sniffed data of this Battlefield 1942/Vietnam manager (2.0b4h)
Requires Openssl, if you have Windows go here
- Vypress Auvis mail password decoder 0.1.1 (auvispwd)
decodes the mail password stored in the registry (2.5)
- ActivePost Standard user and password decoder 0.1.1 (actpostpwd)
decodes the username and the password stored in the registry (3.1)
- Winproxy administrator password decoder 0.1.2 (winproxypwd)
decodes the administrator password stored in the registry (5.2)
- Lords of the Realm III account password decoder 0.1 (lotr3pwd)
decodes the Gamespy account password stored in gamespyinfo.dat (1.01)
- Trillian passwords decoder 0.1 (trillianpwd)
decodes any password inside the ini files of this program (0.74i)
- PC Anywhere configuration files decoder 0.1 (pcanydec)
a simple files decoder to be able to watch the informations (and the passwords) inside them (11.5)
- Windows 9x screen saver password decoder 0.1 (scr9xpwd)
shows the stored screen saver password in Windows 9x
- Webdrive passwords decoder 0.1.1 (webdrivepwd)
Webdrive passwords decoder 0.1: retrieves all the usernames, servers and passwords (also those of the proxies) from the registry (6.0.3)
- ArGoSoft Mail Server password decoder 0.2 (argomailpwd)
decodes (simple base64) the password in the userdata.rec files of Mail Server freeware, Plus and Pro (1.8.7.2)
- Quick 'n Easy FTP Server passwords decoder 0.1 (qneftppwd)
decodes all the passwords in the file users.xml (2.3)
- ArGoSoft FTP Server passwords decoder 0.1 (argoftppwd)
decodes all the passwords in the file users.dat (1.4.2.0)
- Ipswitch Ws FTP client passwords decoder 0.1 (wsftppwd)
decodes all the INI files in the Sites folder of the Ws FTP client program (2004.06.17)
Requires Openssl, if you have Windows go here
- IpSwitch Notification server passwords decoder 0.1.1 (intfypwd)
decodes all the password of any available user in the registry (1.01)
Requires Openssl, if you have Windows go here
- IpSwitch Instant Messaging server passwords decoder 0.1.1a (iimspwd)
decodes all the password of any available account in the registry (2.0.1.56)
- IpSwitch Instant Messaging client last password decoder 0.1.1 (iimpwd)
decodes the last password stored in the registry (2.0.1.56)
- TotalSims games real-time login password decrypter 0.1 (totalsimspwd)
this program is a sniffer that is able to decrypt in real-time the data containing the username and password sent to the login server of the TotalSims games.
Some of the games that use this login method are Armored Assault, Dawn of Aces, Warbirds and many others (Win32 only) (needs Winpcap)
THIS is an offline version to use with dumped login data (informations at runtime)
- Station Launchpad profile and packet password decoder 0.1 (lppwd)
decodes the passwords stored in the local account files or that included in the login UDP packet sent to sdlaunchpad1.station.sony.com (1.60)
Requires Openssl, if you have Windows go here
- XIII profiles unpacker for Ubi.com account retrieving 0.1 (xiiipwd)
unzips the .pro files in the Save folder of the game containing the Ubi.com account informations, if stored (tested only with the demo, so contact me if works also with the retail profiles) (demo)
- Uplink users and data.dat files decoder 0.1 (uplinkpwd)
decodes the users and data.dat files (1.31)
- Massive Assault Network password decoder 0.1 (manpwd)
decodes the profile2.bin file containing the password and other account informations (1.2.211)
- Ventrilo password decoder 0.1.2 (ventrilopwd)
decodes all the passwords stored in ventrilo2.ini (the EncPass* passwords are hashes calculated using this algorithm, so they can't be decrypted).
It shows also if the password is or not a hash (latest versions of Ventrilo in fact use hashes and no longer plain-text passwords)
Works ONLY on the same machine where the password was stored and with the registry untouched (2.3.1)
- .cvspass decoder 0.1 (cvspwd)
a simple file and direct password decoder for .cvspass
- Time of Defiance password decoder 0.1.1 (todpwd)
decodes the stored password of this online game (2.14)
- Ozum project password shower and blacklist password decoder 0.1 (ozumpwd)
shows the projects passwords (.env files) and decrypts the Blacklist password in preference.ini (3.05)
Requires Openssl, if you have Windows go here
- Ubi.com password decoder 0.1 (ubicompwd)
decodes the passwords stored in the profile files (GS4)
- Filezilla password decoder 0.1.1 (filezillapwd)
password decoder for the opensource client Filezilla (2.2.6)
- Internet Neighborhood password decoder 0.1 (inpwd)
you must manually get the encoded passwords from the registry (5.45)
- Imap Notify passwords decoder 0.1.1 (imapnpwd)
decodes all the passwords stored in the registry (1.04)
- Broker FTP users file decoder 0.1 (brokerftppwd)
decodes the file users.dat and shows it to the screen (6.2)
- AutoFTP passwords decoder 0.1 (autoftppwd)
decodes all the servers passwords stored in connect.ini and accounts.ini (4.1 premium)
- Poppy passwords decoder 0.1.1 (poppypwd)
decodes all the passwords stored in the registry (5.3.1)
- POP3 Easy password decoder 0.1 (popeasypwd)
simple password decoder (2.03)
- Pocomail passwords decoder 0.1 (pocopwd)
decodes all the servers passwords stored in Mailpeek.ini and accounts.ini (3.1)
- Gekus & Igori Mail Checker passwords decoder 0.1.1 (gimpwd)
shows all the informations of the available accounts (in the registry) and naturally decodes their passwords (1.00)
- Mailpeek passwords decoder 0.1 (mpeekpwd)
decodes all the servers passwords stored in Mailpeek.ini and config.ini (0.97)
- Absolute FTP and SecureFX password decoder 0.1 (aftppwd)
this tool uses the algorithm used by all the programs developed by Vandyke as Absolute FTP and SecureFX (any)
- EBox passwords decoder 0.1 (eboxpwd)
decodes all the servers passwords stored in Accounts.ini (1.03)
- CheckP3 password decoder 0.1 (chkp3pwd)
decodes the password of this program (5.00)
- 32BitFtp passwords decoder 0.1 (32bitftppwd)
decodes all the servers passwords stored in 32BitFtp.ini (p99.66.1)
- Becky! Internet mail passwords decoder 0.1.1 (beckypwd)
decodes all the servers passwords stored in Mailbox.ini (2.11.02)
- YAMC passwords decoder 0.1 (yamcpwd)
decodes all the servers passwords stored in Mail.ini (devel snapshot)
- Vivian mail password decoder 0.2 (vivianpwd)
decodes the passwords stored in Accounts.vdb (3.27)
- Calypso mail mailbox file decoder 0.1 (calypsopwd)
this tool decodes the mailbox files and shows the informations of the first account (if there are other accounts you must manually check them) (3.3)
- Serv-U admin servers passwords decoder 0.1.1 (servupwd)
decodes all the servers passwords stored in ServUAdmin.ini (6.0)
- Good FTP password decoder 0.1 (goodftppwd)
simple tool to decode the passwords stored in the binary file goodftp.lsd (you must get them manually)
- Delphino QuickFTP passwords decoder 0.1.1 (qftppwd)
decodes all the passwords (accounts and proxy) stored in the registry (1.3)
- Eric's Telnet 98 password decoder 0.1 (t98pwd)
decodes the password stored in UserData\User\.config (9.0)
- DNS4ME Client proxy password decoder 0.1.1 (dns4mepwd)
it simply decodes the socks proxy password stored by this program. It seems to be the only encoded data stored by this program... (3.0.0.2)
- AllegroSurf login and servers passwords decoder 0.1.1 (allegropwd)
decodes any password stored in the registry (login and servers) by the program AllegroSurf (6.0)
- Gamespy Arcade password decoder 0.1 (gsapwd)
decodes the password stored in Profiles\ID\settings.cfg (14d)
- FTP Navigator passwords decoder 0.1 (ftpnavpwd)
decodes the passwords stored in ftplist.txt (7.2)
- Eudora (tested 6.0) passwords decoder 0.1 (eudorapwd)
decodes the password stored in Eudora.ini (6.0)
- Gore cd-key decoder 0.1.1 (gorekey)
decodes the cd-key of the game Gore stored in the registry
- RemotePad passwords decoder 0.1 (rpadpwd)
decodes all the passwords in remotepad.ini (2001-10-16)
- Spasm passwords decoder 0.1 (spasmpwd)
decodes all the passwords in Accounts.txt (1.0)
- Phoenix mail passwords decoder 0.1 (phmailpwd)
decodes all the passwords in Account.ini of the opensource program Phoenix (0.93)
- Pimmy passwords decoder 0.1 (pimmypwd)
decodes all the passwords in Pimmy.cfg (3.5)
- i.Scribe passwords decoder 0.1 (scribepwd)
decodes all the passwords in scribe.r (1.87)
- Foxmail passwords decoder 0.1 (foxpwd)
decodes all the passwords in Account.stg (5.0)
- FlashFXP passwords decoder 0.1 (fxppwd)
decodes all the passwords in Sites.dat (3.0)
- Enternet passwords decoder 0.1 (enterpwd)
decodes all the passwords stored in the file EnterNet.ini created by Enternet (the program for DSL lines) (1.5c)
- CuteFTP data retriever and password decoder 0.1 (cutedata)
this tool shows all the informations stored in the file sm.dat of CuteFtp and decodes all the passwords (a simple XOR 0xc8). It is a bit experimental but works very well (6.0 home)
- FTP Control password decoder 0.1 (fctrlpwd)
useful password decoder for Transoft's FTP Control (4.5)
- CoffeeCup FTP profiles collector and decoder 0.1.1 (coffee-regdump)
good tool, it retrieves all the data stored in the registry for CoffeeCup FTP and automatically decodes the stored passwords (also that of the Proxy) (6.1)
- Bullet Proof FTP bpftp.dat file decoder 0.1 (bpftpdat)
decodes any bpftp.dat file in the sites folder (2.43)
- Bullet Proof FTP default password decoder 0.1 (bppwd)
decodes only the default password stored in Default.bps (2.43)
- FTP Voyager passwords decoder 0.1 (ftpvoypwd)
Nice tool that retrieves any information and automatically decodes all the passwords stored in the file FTPVoyager.ftp and writes all the data in the file FTPVoyager-pwd.txt (11.0)
- Advanced Email Checker passwords decoder 0.1 (echkpwd)
reads data and decodes the passwords stored in eclib.ini (1.5)
- IPalt alternate number calculator and retriever 0.1 (ipaltcalc)
number calculator and retriever for IPalt
- nPOP saved password encoder/decoder 0.1 (npoppwd)
although the nPOP mail client is opensource this handy utility can be useful to quickly encode and decode passwords (1.01)
- JBMail saved password encoder/decoder 0.1 (jbmailpwd)
encodes and decodes the password saved by this mail client (3.2)
- TinMessenger C6 password decoder 0.1 (c6pwd)
(italian) poche righe di codice per decodificare le password salvate dal programma C6 (4.5)
- Ultrafunk Popcorn passwords decoder 0.1 (popcornpwd)
automatically retrieves all the informations and plain-text password from popcorn.ini if no arguments are given, otherwise decodes the first command-line argument (1.68)
- Quicken 6/'98 data file: reset of all passwords 0.1 (q6nopwd)
it sets to 0 the 12 bytes starting at offset 0x1444 of Intuit Quicken '98 data files so user can use them without to know the password "protecting" the file and the operations
|