July 2010 ~ LOvE Pagal

Welcome to another edition of Password Cracking Decrypted. In this manual we will learn, you guessed it, how to
crack passwords. In this edition we have explanations to how to break more kinds of passwords.
Although this manual is quite easy to understand, I would definitely like to make one suggestion. To truly enjoy
reading this manual, you need to know C relatively well. However, even if you have no idea what C is, I assure you
that this manual will definitely be of use to you.
Cracking the Netzero (Free ISP) Dial Up Password
Today, the number of Internet Service Providers (both free and the not so free ones) has really reached a very high
figure. All of them aim at providing better services and making the process of connecting to the Internet easier for the
user. One common practice amongst both Internet Service Providers and popular browsers like Internet Explorer,
have this option called ‘Save Password’, which makes life easier for the user, as it allows the user to not type in the
password each time he has to connect to the Internet.
Although, like all other software, as soon as the developer tries to add a user friendly feature or make the software
easier to use or more efficient, he has to make at least some compromise in the security or safety field. One popular
example would be Outlook Express, ever since the Preview Pane has been introduced within the email client,
Outlook Express users have become prone to Email-Borne Viruses.
Anyway, getting back to the subject of this tutorial, even including the ‘Save Password’ feature has made the User’s
Password unsafe. Now, what happens is that, when you check on this option or enable it, then the concerned software
(Browser or Internet Service Provider Software) takes it passes it through an algorithm to encrypt it. Once, the
Password is encrypted, it is then stored in the Windows Registry or in some .ini or .dat or a similar file. Now, this
system sounds quite safe, however, if you look deeper, then you find that it is trouble waiting to happen.
The very fact that the encrypted password has to be stored somewhere, makes this feature vulnerable. Also, almost
all software providing this feature does not use a strong algorithm. This makes the work of a hacker really easy.
Some software even stores the password as plaintext in the registry!!! So, basically the weakest chain in this feature
is that most software developers are weary of the fact that the encrypted password can be easily decrypted, once we
study the software inside out. So, what I mean to say is that using this feature although surely makes life easy, for
those of you who cannot remember passwords, but it does leave your Internet Account vulnerable. However, if you
are one of those people who needs to write down your password on a piece of paper and stick it to the front of your
monitor, then this feature is definitely for you.
So how do I crack the Netzero Dial Up Password?
NOTE: The following information first appeared at L0pht.com I simply rewrote it and made it more
understandable.
Anyway, Netzero is a free ISP, which asks only for a advertising bar in return for Internet Access. It too provides this
‘Save Password’ feature, however, it too like most services, uses an extremely weak algorithm to encrypt the
password. The following process of decryption works on Netzero version 3.0 and earlier and requires Win 9x, NT or
Win 2K to be running.
Hacking Truths!!!--What they Don't teach in Manuals!!! By Ankit Fadia
For this exploit, you need to have local access to the machine, which has the Netzero software installed.
This vulnerability cannot be exploited unless and until you get the required file, for that you either have to have local
access or need to devise a method of getting the file, which contains the password.
The Netzero Username and Password are stored in an ASCII file named, id.dat, which is located in the Netzero
directory. If the user has enabled the ‘Save Password’ option, then the Username and Password are also stored in the
jnetz.prop file. The passwords stored in both these files are encrypted using a very simply easy to crack algorithm.
Although the algorithms used to get the encrypted information (to be stored in the two files), are not same, however
they are derived from the same main algorithm. Both the algorithms differ very slightly. In this manual we will learn
as to how this weak algorithm can be exploited.
The Netzero Password is encrypted using a substitution cipher system. The cipher system used is a typical example
of a 1 to 1 mapping between characters where each single plaintext character is replaced by a single encrypted
character.
Are you lost? Well, to understand better read on.
Say, the Netzero application is running, and the user clicks on the ‘Save Password’ option and types his password in
the required field. Now, then what happens is that, the Netzero Application loads the encrypting file, which contains
the plaintext to cipher-text database into memory. Now, for example your password is xyz and it is stored in location
‘m’ of the memory and the corresponding encrypted password abc is stored in the location ‘n’ of the memory, then
the password xyz actually is stored as abc.
Well it is quite simple, right? Well, almost. The part of the encryption algorithm used by Netzero which is difficult to
understand, is that two encrypted characters replace each character of the plaintext password. These two encrypted
characters replacing a single plaintext character, are however not stored together.
When substituting character x stored in i of a password ‘n’ characters long, the first encrypted character would be
stored in ‘i’ and the next in ‘n+i.’

List:

Applied C++ - Practical Techniques For Building Better Software (2003).chm
Beginning C++ Game Programming (2004).pdf
Beyond The C++ Standard Library - An Introduction To Boost (2005).chm
C++ - How To Program, 5th Edition (2005).chm
C++ By Dissection (2002).pdf
C++ Coding Standards - 101 Rules, Guidelines, And Best Practices (2004).chm
C++ Cookbook (2005).chm
C++ Demystified - A Self Teaching Guide (2004).chm
C++ For Business Programming, 2nd Edition (2005).chm
C++ For Dummies, 5th Edition (2004).pdf
C++ For Mathematicians - An Introduction For Students And Professionals (2006).pdf
C++ From The Ground Up, 3rd Edition (2003).pdf
C++ GUI Programming With Qt 4 (2006).chm
C++ In A Nutshell (2003).chm
C++ Plus Data Structures, 3rd Edition (2003).pdf
C++ Primer, 4th Edition (2005).chm
C++ Templates - The Complete Guide (2002).chm
c
C-C++ Programmer's Reference, 3rd Edition (2003).chm
Creating Games In C++ - A Step By Step Guide (2006).chm
Cryptography In C And C++ (2001).chm
Effective C++, 3rd Edition (2005).chm
Exceptional C++ - 47 Engineering Puzzles, Programming Problems, And Solutions (1999).chm
Exceptional C++ Style - 40 New Engineering Puzzles, Programming Problems, And Solutions (2004).chm
How Not To Program In C++ (2003).chm
Ivor Horton's Beginning Visual C++ 2005 (2006).pdf
Learn To Program With C++ (2003).pdf

LOvE Pagal

Funny WaLLpaPerS-Prashant Soriya

LOvE HeaRt IMagE

password knower

List: Applied C++ - Practical Techniques For Building Better Software (2003).chm Beginning C++ Game Programming (2004).pdf Beyond The C++ Standar

Labels

Blog Archive

Recent Posts