begood Posted May 15, 2010 Report Posted May 15, 2010 About NetworkPasswordDecryptor NetworkPasswordDecryptor is the free tool to instantly recover the network passwords stored in the 'Credential Store' of Windows. Windows 'Credential Store' provides the framework for storing various network authentication based passwords in secure encrypted format. Not only Windows uses it to store network authentication passwords, but also other applications such as Outlook, Windows Live Messenger, Remote Destktop, Gmail Notifier etc uses it for storing their login passwords. These network passwords are saved only when the user has selected 'Remember Password' option during login time. These network passwords are stored in encrypted format and even administrator cannot view these passwords. Also some type of passwords cannot be decrypted even by administrators as they require special privileges. In this context, NetworkPasswordDecryptor makes it easy to enumerate and decrypt all the stored network passwords from Credential Store. Features of NetworkPasswordDecryptor NetworkPasswordDecryptor can recover following passwords on all versions of Windows starting from XP to Windows 7. All network authentication passwords stored by Windows.Basic/Digest authentication passwords stored by Internet ExplorerGoogle login password stored by GMail NotifierRemote Desktop stored passwords.Exchange server login passwords stored by Outlook.Login passwords of Windows Live Messenger NetworkPasswordDecryptor also allows you to delete any of the stored passwords from 'Credential Store'. This is useful if the password has changed or if the user has accidently saved the critical password. Also it provides option to save the decrypted network password list to TEXT or HTML format. Internals of NetworkPasswordDecryptor Windows 'Credential Store' support following different type of network secrets. Domain PasswordGeneric PasswordDomain Visible Password / .NET PassportCertificates Each of these types have different level of access and follow different encryption mechanism. For example 'Generic Passwords' can be decrypted by corresponding users directly. However decryption of domain passwords require special privilege and can be decrypted only in the context of system process, LSASS.exe. This makes it easy for application to choose suitable type of encryption mechanism for storing their login passwords. Windows allows application to manage these network passwords using Credential Management API functions to store and retrieve the passwords. Except passwords of Domain type all other passwords can be retrieved using such functions. Decrypting domain type passwords require special technique of executing entire decryption operation in the core of LSASS process using undocumented functions. For more detailed technical information on decrypting these network passwords read the following research article, 'Exposing the Secret of Decrypting Network Passwords' Using NetworkPasswordDecryptor NetworkPasswordDecryptor is a standalone application and it does not require any installation. You can just copy the executable to any location on the system and run it directly. Launch the NetworkPasswordDecryptor.exe as current user or administrator. On launching, it will display current username and operating system version. Next click on 'Start Recovery' button and it will decrypt all the stored network passwords & display it in clear text as shown in the screenshot below.You can use 'Delete' button to remove any of the saved passwords from Credential Store.Finally you can save this decrypted passwords to TEXT or HTML file by clicking on 'Export to TEXT' or 'Export to HTML' button respectively. Note that you need to have administrator privileges to decrypt the network passwords of all types successfully. Otherwise only user specific passwords will be recovered. NetworkPasswordDecryptor in Action Here are the screenshots of NetworkPasswordDecryptor Screenshot 1: NetworkPasswordDecryptor showing all the decrypted network based passwords. Screenshot 2: Network account password list exported in HTML format by NetworkPasswordDecryptor . History Version 1.1 : 16th Feb 2010 Fixed the issue with retrieving Windows Live Messenger password on Windows 7 Home editon. Many thanks to Patrick.B for reporting and working towards the resolution. Version 1.0 : 6th Feb 2010 First public release of NetworkPasswordDecryptor. Supports recovery of all the network based passwords including network authentication, remote desktop, windows live messenger, Outlook & Gmail Notifier. Also it provides option to completely delete any of the saved passwords. In addition to this user can save the decrypted password list to TEXT or HTML file. Disclaimer NetworkPasswordDecryptor is the free tool and designed for good purpose to help users to recover the lost network account passwords. Like any other tool its use either good or bad, depends upon the user who uses it. However author is not responsible for any damage caused due to misuse of this tool. Download NetworkPasswordDecryptor FREE Download NetworkPasswordDecryptor 1.1 License : Freeware Platform : Windows XP, 2003, Vista, Win7 Download Quote
