Where those programs store user's passwords?

Discussion in 'other security issues & news' started by Ilya Rabinovich, Apr 5, 2008.

Thread Status:
Not open for further replies.
  1. Ilya Rabinovich

    Ilya Rabinovich Developer

    Joined:
    Sep 13, 2005
    Posts:
    1,543
    Hi everybody!

    It is about current Defenseall HIPS development process- I need to know where AIM, Google Talk, MySpace IM, Windows Live Mail/Writer and some other software stores user's passwords. The more applications the better.
     
  2. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    17,042
    I believe Opera is:

    C:\Documents and Settings\UserName\Application Data\Opera\Opera\profile\wand.dat
     
  3. Ilya Rabinovich

    Ilya Rabinovich Developer

    Joined:
    Sep 13, 2005
    Posts:
    1,543
    Opera, Mozilla, IE, OE, Trillian, Miranda, MSN, TheBat, ICQ, Eudora, Skype are already in the list. I need others.
     
  4. WSFuser

    WSFuser Registered Member

    Joined:
    Oct 7, 2004
    Posts:
    10,632
    You could contact the author of MessenPass and ask where the passwords are stored (for AIM, Google Talk, MySpace IM).
     
  5. Mrkvonic

    Mrkvonic Linux Systems Expert

    Joined:
    May 9, 2005
    Posts:
    8,696
    Hello,
    I suggest you install each one and monitor with regmon, filemon and processexplorer to see the full inheritance trees. All of the apps are Mark Rusinovich's sysinternals.
    Mrk
     
  6. Ilya Rabinovich

    Ilya Rabinovich Developer

    Joined:
    Sep 13, 2005
    Posts:
    1,543
    I already did it- no response at all.
     
  7. Ilya Rabinovich

    Ilya Rabinovich Developer

    Joined:
    Sep 13, 2005
    Posts:
    1,543
    Yes, thanks, I know about this method. I just thought maybe someone already known about it.
     
  8. lodore

    lodore Registered Member

    Joined:
    Jun 22, 2006
    Posts:
    9,006
  9. Ilya Rabinovich

    Ilya Rabinovich Developer

    Joined:
    Sep 13, 2005
    Posts:
    1,543
    Yes, thanks, I alreade read this thread- not really impressive, most of it I already knew.
     
Loading...
Thread Status:
Not open for further replies.