The AutothenticateCracker is a tiny little application that cracks the preference file of the extension called Autothenticate. Here's what Autothenticate does (taken from the AutothenticateDoc file):
"Autothenticate is a system extension that loads when you start up your Mac. It installs itself, then goes to sleep. When your web browser puts up an authentication dialog, Autothenticate wakes up and looks to see if it recognizes the name of the site. If it does, it will automatically type your user ID and password (or just your user ID), and you'll be on your way.
If Autothenticate does not recognize the site, it asks if you would like it to memorize your user ID and password, and automatically enter this information for you in the future. You can choose to have it memorize your user ID and password, just your user ID, or nothing."
Autothenticate stores the above information in a preference file called "AutothenticatePreferences" located in the Preferences folder in the System Folder. Autothenticate uses a very simple method to encrypt the information in the preferences file. AutothenticateCracker decrypt this file revealing the user ID and password.
Included with this file is the source code for AutothenticateCracker in C. Please don't have any expectations regarding the source code. It doesn't do proper error checking or things like that. It was also put together in a hurry, which should be quite obvious :). We just fealt it appropriate to release the source code with the utility.
--==< Instructions >==--
AutothenticateCracker is a very very small utility. When launched a standard open file dialog shows up asking the user to locate the "AutothenticatePreferences" file. Then it does the decrypting part which should not take too long at all, and when done it asks for the location where the cracked information is to be saved. This info is then stored in a text file that can be opened with SimpleText.
--==< Known Bugs >==--
For some reason if you open the AutothenticatePreferences file while it's in the Preferences folder in the System Folder, the decrypted data will be corrupted. To bypass this problem simply copy the AutothenticatePreferences file to the Desktop or a folder outside of the System Folder.
--==< Disclaimer >==--
AutothenticateCracker may be exploited for "damaging" purposes. The objective was NOT to encourage such behavior but simply to point out the existing security breaches in Autothenticate. Therefore, neither mSec nor any of it's past, current or future members will take any responsibility for any kind of damage that may occur due to any direct or indirect use of AutothenticateCracker.
--==< End Notes >==--
AutothenticateCracker was put together by mSec. If you want to find out more about mSec please visit our homepage at: www.msec.net. You can also reach us and chat with the members on our Hotline server at: msec.net.
This text file was put together by ProZaq. If you have any questions or comments, my e-mail address is: prozaq@usa.net
