[TUTORIAL] Find hidden password of applications

Step-by-step PC tutorials: emulators, setup, optimisation, Windows repair, tools and tips to get the most out of your PC.
User avatar
sniper3d
Master Gamer
Members
Posts: 2480
Joined: Mon 3 Jan 2011 13:07
Wi-Fi: Oui
PS3 Dongle: Aucun

[TUTORIAL] Find hidden password of applications

Post by sniper3d »

Automatically translated from French.

In this little tutorial I will teach you how to find where the hidden passwords of certain Windows applications are located.

In the world of the Internet, we all use applications from browsers.
Most of these applications store sensitive information such as username, password in their location using private proprietary methods. This prevents the hassle of entering credentials each time when authenticating.

However, it is important to know that this secret information can fall into the hands of unscrupulous people, some applications guarantee you that this information is safe from prying eyes.

But most applications use simple methods or rather obscure methods to store credentials that can easily put your privacy at risk as any spyware on your system can easily discover these secrets.

Internet
Firefox
Spoiler
Since version 3.5 and earlier Firefox stores session passwords in <signons.txt> which is in the profile directory. Starting with Firefox 3.5 started storing session passwords in the sqlite database file named <signons.sqlite>. Passwords stored in this sign-on are encrypted using Triple-DES followed by BASE64 encoding mechanism.

Here is the storage location
[Windows XP]
C:\Documents and Settings\<user_name>\Application Data\Mozilla\Firefox\Profiles\<random_name>.default

[Windows Vista & Windows 7]
C:\Users\<user_name>\AppData\Roaming\Mozilla\Firefox\Profiles\<random_name>.default
Google Chrome
Spoiler
Google Chrome stores all session passwords in the SQLite database file called "Web Data" in the profile directory.
Newer versions use the "Login data" file for storing login passwords.
Here is the default location of Chrome's profile directory.
[Windows XP]
C:\Documents and Settings\<user_name>\Local Settings\Application Data\Google\Chrome\User Data\Default

[Windows Vista & Windows 7]
C:\Users\<user_name>\Appdata\Local\Google\Chrome\User Data\Default
Internet Explorer
Spoiler
Internet Explorer stores two types of passwords, sign-on and HTTP basic authentication passwords.
IE before version 7 stores both sign-on and HTTP basic authentication passwords in a secure location called "Protected Storage" in the following registry location,
HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider
IE version 7
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IntelliForms\Storage2
IE after version 7
[Windows XP]
C:\Documents and Settings\[username]\Application Data\Microsoft\Credentials

[Windows Vista and Windows 7]
C:\Users\[username]\AppData\Roaming\Microsoft\Credentials
Opera
Spoiler
For Opera Version 10 and above
[Windows NT/2K/2k3/XP]
C:\Documents and Settings\<username>\Application Data\Opera\Opera\wand.dat

[Windows Vista/Windows 7]
C:\users\<username>\AppData\Roaming\Opera\Opera\wand.dat

For opera version lower than 10
[Windows NT/2K/2k3/XP]
C:\Documents and Settings\<username>\Application Data\Opera\Opera\profile\wand.dat

[Windows Vista/Windows 7]
C:\users\<username>\AppData\Roaming\Opera\Opera\profile\wand.dat

Instant messaging
Google Talk
Spoiler
Google Talk (GTalk) stores all Gmail account information to recall the following registry location.
HKEY_CURRENT_USER\Software\Google\Google Talk\Accounts
Skype
Spoiler
Skype does not store the password directly. Instead it stores the encrypted hash value of the password in the "config.xml" located in the user's Skype profile directory.
[Windows XP]
C:\Documents and Settings\<user_name>\Application Data\Skype\<account_name>

[Windows Vista & Windows 7]
C:\Users\<username>\AppData\Roaming\Skype\<account_name>
Email
Microsoft Outlook
Spoiler
Version of Outlook from 2002 to 2010, storing passwords (other than Microsoft Exchange Server) for email accounts such as POP3, IMAP, SMTP, HTTP:
[Windows NT onwards]
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles

[Prior to Windows NT]
HKEY_CURRENT_USER\Software\Microsoft\Windows Messaging Subsystem\Profiles
Newer versions of Outlook from 2002-2010, Exchange server passwords in "Credential Store", as it offers better protection than other methods. You can use OutlookPasswordDecryptor or NetworkPasswordDecryptor

Older versions of Outlook (Outlook Express, 98, 2000, etc.) store email configuration information with encrypted password in the following registry location:
[For Outlook installed in Internet Mail Only mode]
HKEY_CURRENT_USER\Software\Microsoft\Office\Outlook\OMI Account Manager\Accounts

[For Outlook in normal mode]
HKCU\Software\Microsoft\Internet Account Manager\Accounts
ThunderBird
Spoiler
ThunderBird stores all email settings with password in the SQLite database file "signons.sqlite"in its location: profile. The default profile location for different platforms is as follows:
[Windows XP]
C:\Documents and Settings\<user_name>\Application Data\Thunderbird\Profiles\<random_name>.default

[Windows Vista & Windows 7]
C:\Users\<user_name>\AppData\Roaming\Thunderbird\Profiles\<random_name>.default
FTP
FlashFXP
Spoiler
FlashFXP keeps connection information and password in the file 'Sites.dat' below the location
[Windows XP]
C:\Documents and Settings\All Users\Application Data\FlashFXP\4\Sites.dat

[Windows Vista & Windows 7]
C:\ProgramData\FlashFXP\4\Sites.dat
Wifi Key
Spoiler
Run regedit on Windows XP then
HKEY_CURRENT_USER,Software,Microsoft,WZCSVC
locate the "Settings" section, then click on the point titled "Interfaces", Note the WEP key stored in the "Interfaces" list!
Once you have the key, you can close the registry editor and enter the key when you try to connect to your wireless network.

or this:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WZCSVC[/quote}
Ps: if you can't find what corresponds to your applications, leave me a PM and I'll add it (if I know it :93: )
User avatar
Oops
God Member
Members
Posts: 7083
Joined: Thu 2 Apr 2009 00:35
Wi-Fi: Oui
CFW Wii: Wii vendu
Type de DS: 3DS
Linker DS: R4i GOLD 3DS (r4ids.cn)
CFW PS3: ode a venir
Type PSP: Fat
Firmware PSP: 6.60 pro-B10
lecteurxbox: LiteOn
Firmware lecteur Xbox360: LT+3.0 rgh2 coolrunn
Dashboard: 3.775
Location: 17 et 95

Re: [TUTORIAL] Find hidden password of applications

Post by Oops »

Automatically translated from French.

I'll keep it in mind. Thanks

Ps: if you have something to recover wifi keys stored on our pcs (via windows), I'm interested ;) I tried 2 pieces of software that don't work anymore or at all.
User avatar
sniper3d
Master Gamer
Members
Posts: 2480
Joined: Mon 3 Jan 2011 13:07
Wi-Fi: Oui
PS3 Dongle: Aucun

Re: [TUTORIAL] Find hidden password of applications

Post by sniper3d »

Automatically translated from French.

ok I'll see what I can do
User avatar
sniper3d
Master Gamer
Members
Posts: 2480
Joined: Mon 3 Jan 2011 13:07
Wi-Fi: Oui
PS3 Dongle: Aucun

Re: [TUTORIAL] Find hidden password of applications

Post by sniper3d »

Automatically translated from French.

added sections and wifi keys for xp :bravo:
User avatar
Gojyo
Novice
Members
Posts: 85
Joined: Tue 2 Aug 2011 11:58
Wi-Fi: Oui
Firmware Wii: 4.2E
CFW Wii: d2x v10 Et Hermes + Rodries
Type de DS: DSi
Linker DS: M3 DS Real, CycloDS Evolution, R4I-SDHC
CFW PS3: Aucun
PS3 Dongle: Aucun
Type PSP: Fat
Firmware PSP: 6.60 ME-1.8
Firmware lecteur Xbox360: pas de Xbox360
Yahoo Messenger: aucun
Location: Belgique

Re: [TUTORIAL] Find hidden password of applications

Post by Gojyo »

Automatically translated from French.

Well done ;) Very good tutorial :) Shame it's a bit short lol :D
Le Respect se perd...
User avatar
sniper3d
Master Gamer
Members
Posts: 2480
Joined: Mon 3 Jan 2011 13:07
Wi-Fi: Oui
PS3 Dongle: Aucun

Re: [TUTORIAL] Find hidden password of applications

Post by sniper3d »

Automatically translated from French.

Gojyo wrote:Well done ;) Very good tutorial :) Shame it's a bit short lol :D
well tell me what you want me to add :93: :bienvenue:
User avatar
darkscad
Master Gamer
Members
Posts: 1735
Joined: Sat 19 Sep 2009 14:06
Wi-Fi: Oui
Firmware Wii: 4.1E
CFW PS3: 4.5 Rogero
Type PSP: Slim
Location: France d'en BAS !

Re: [TUTORIAL] Find hidden password of applications

Post by darkscad »

Automatically translated from French.

the essentials are there!
it's crazy stuff... thanks I note that firefox has thought of everything!
[TUTO] Trouver les mot de passe caché des applications

thanks for sharing! :twisted:
User avatar
TGbot
Famous Member
Members
Posts: 4742
Joined: Sun 21 Sep 2008 09:15
Wi-Fi: Oui
CFW Wii: Aucun

Re: [TUTORIAL] Find hidden password of applications

Post by TGbot »

Automatically translated from French.

If you're good, I'll show you how to crack a windows 7 password in 3 minutes flat.
User avatar
sniper3d
Master Gamer
Members
Posts: 2480
Joined: Mon 3 Jan 2011 13:07
Wi-Fi: Oui
PS3 Dongle: Aucun

Re: [TUTORIAL] Find hidden password of applications

Post by sniper3d »

Automatically translated from French.

I'm good :93: :93:

So I want to crack a pass with windows 7, firefox plus a FirePassword :arff:
and an autoclean password!!!

go on my Kali show me because I'm good :D
User avatar
darkscad
Master Gamer
Members
Posts: 1735
Joined: Sat 19 Sep 2009 14:06
Wi-Fi: Oui
Firmware Wii: 4.1E
CFW PS3: 4.5 Rogero
Type PSP: Slim
Location: France d'en BAS !

Re: [TUTORIAL] Find hidden password of applications

Post by darkscad »

Automatically translated from French.

kalidor wrote:If you're good, I'll show you how to crack a windows 7 password in 3 minutes flat.

:shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :bat: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock: :shock:
Vastasio
Novice
Members
Posts: 79
Joined: Fri 10 Jun 2011 10:47
Wi-Fi: Non
Firmware Wii: 3.4E
CFW Wii: Aucun
PS3 Dongle: Aucun

Re: [TUTORIAL] Find hidden password of applications

Post by Vastasio »

Automatically translated from French.

kalidor wrote:If you're good, I'll show you how to crack a windows 7 password in 3 minutes flat.
Trinity or something else? ^^
T'es comme moi.... Tu sors des blagues Vaseuses et tu cherches la porte,
c'est simple elle est par là

------>>> https://www.tgames.fr/ucp.php?mode=privacy&sid=dc7bf05d0df35ebb2ce8f8cc41508085<<<------
User avatar
TGbot
Famous Member
Members
Posts: 4742
Joined: Sun 21 Sep 2008 09:15
Wi-Fi: Oui
CFW Wii: Aucun

Re: [TUTORIAL] Find hidden password of applications

Post by TGbot »

Automatically translated from French.

and no!
Mansour
Nouvel arrivant
Members
Posts: 2
Joined: Thu 11 Jul 2013 11:37

Re: [TUTORIAL] Find hidden password of applications

Post by Mansour »

Automatically translated from French.

Hello,

This tutorial is quite interesting BUT, for skype, once you've found the config.xml file,
how do you decrypt the password or change it?

Or maybe you offer some software?

Regards
User avatar
Ayatus
Gamer
Members
Posts: 846
Joined: Tue 3 Aug 2010 17:08
Wi-Fi: Non

Re: [TUTORIAL] Find hidden password of applications

Post by Ayatus »

Automatically translated from French.

Changing the password this way is of no interest, since it's only stored for the user's convenience so they don't have to enter it every time they connect.

Regarding decrypting it, I invite you to check out this article which is probably the source of this topic: Password Secrets of Popular Windows Applications

Everything for PC