home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
Freaks Macintosh Archive
/
Freaks Macintosh Archive.bin
/
Freaks Macintosh Archives
/
Textfiles
/
Hacking
/
hack_windows_network.sit
/
hack windows network
next >
Wrap
Text File
|
1997-10-09
|
719b
|
13 lines
network services (NetWare, NT, Samba, SLIP/PPP service) are
automatically and permanently stored in
C:\WINDOWS\<USERNAME>.PWL. Microsoft claims they are encrypted
securely.
Peter determined that the Windows PWL encryption algorithm was
incredibly insecure. Frank wrote a program to break the .PWL
files in Windows. (More details are forthcoming, a draft
version is available currently.) Source code and a Windows NT
executable for the exploit program are available. In effect,
anyone with physical or network access to a Windows machine has
access to all network passwords used by all users of that
machine.