full-disclosure - IncrediMail Password Decryptor is just released

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <BANLkTimEydNTiOdCAub7JWFooBk1s=rdBQ@mail.gmail.com>
Date: Mon, 30 May 2011 20:22:17 +0530
From: Nagareshwar Talekar <tnagareshwar@...il.com>
To: Full Disclosure <full-disclosure@...ts.grok.org.uk>
Subject: IncrediMail Password Decryptor is just released

Hi all,

We have just released new tool,  IncrediMail Password Decryptor to
instantly recover passwords from IncrediMail client.

IncrediMail stores all the configured mail account passwords in
registry in an encrypted format at following location.

HKEY_CURRENT_USER\Software\IncrediMail\Identities\<GUID>\Accounts\<GUID>

Usernames are stored in clear text, however passwords are encrypted
using proprietary encoding algorithm. Passwords for each type
(POP3/SMTP) are stored in the registry values “PopPassword“ &
“SMTPPassword“.

IncrediMail Password Decryptor helps in automatically discovering &
decrypting all such stored passwords.

For more interesting details, check out
http://securityxploded.com/incredimail-password-decryptor.php

For users in Gulf countries, use alternative portal
http://passwordforensics.com/incredimail-password-decryptor.php

- SecurityXploded
An Infosec Research & Development Portal

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/