Password recovery for firefox, IE, google talk and more

[Nytro]

[h=1]Password recovery for firefox, IE, google talk and more[/h]By

[h=3]shebaw[/h]Hi everyone, since there is growing number of topics about password recovery, I decided to share my code I wrote after disassembling popular recovery software. I was hoping I would clean it up a little bit (too many callbacks, memory mapping).

It recovers passwords stored by:

IE 4-9, Firefox 0-the latest version, GTalk, MSN Messenger, Windows Live Messenger, Generic Network & Visible domain passwords.

I'm sorry for cramming most of the recovery code in pass_recov.c. I was hopping I would break that up.

I've attached the project.

Here is how you would use it.

Here is a sample code on how to use it.

#include <stdio.h>
#include "pass_recov.h"
void CALLBACK display_pass(pass_type_t ptype, const wchar_t *url,
    const wchar_t *username, const wchar_t *password, void *param)
{
    switch (ptype) {
    case firefox3:
    case firefox4:
        wprintf(L"firefox pass username:%s password:%s", username, password);
        break;
    /* and so on, you get the idea */
    }
}

int main(void)
{
    struct cred_grab_arg carg;

    carg.grab_pass = display_pass; /* user defined callback, that's called for each password recovered */
    carg.param = NULL; /* user defined paramater that's used to pass values to the callback, NULL in this case */
    get_firefox_passwords(&carg);
    get_ie_passwords(&carg);

    return 0;
}

he previous versions of firefox (0-3) used signon[1-3].txt while the later versions use sqlite database. The functions used to manipulate the sqlite databases are loaded from firefox's installation directory so sqlite doesn't need to be linked statically. It works from firefox 0 - the latest version.

I didn't test the IE recovery code on IE 10 but it should work. IE 7 and above hash the passwords stored for each site using the url of the website which I think is clever. It can be circumvented if IE is set to store history of the browsed sites (default behavior) since we can get the urls to see if the hashes match. I'm not sure how IE 'sanitizes' the urls since it differs from sites to sites so I've added two ways which I noticed.[h=4]Attached Files[/h]

• pass_recov.zip 16.58KB 842 downloads
  

Sursa: Password recovery for firefox, IE, google talk and more - Source Codes - rohitab.com - Forums