Guide To Cracking 2002/Guide_to_Cracking_2002.iso/Utilities/Windows Passwords/Winpwl 3.exe/readme.txt

Text File | 2000-11-18 | 7.9 KB | 139 lines

*** BETA INFORMATION *** FOR WINPWL 3 MILLENNIUM EDITION BETA TWO ***
***               THIS DOCUMENT IS SUBJECT TO CHANGE              ***

WinPWL 3 Millennium Edition by Aaron Klotz
Visit the official WinPWL site!
http://winpwl.teamohms.org/
==========================================

I don't want anything for this program, but if you distribute it, please ensure that this file
accompanies WinPWL3.exe in the archive. This program is freeware, and therefore is not subject
to a fee of any kind. This program is unsupported and is provided "as is" - use at your own risk!

DISCLAIMER: By using this program the user agrees that any legal trouble they may get into for
using this software to obtain unauthorized access to passwords is their responsibility. The
author of this program assumes no responsibility for such activities. This software was not
intended for obtaining passwords that the user is not supposed to have access to. It was only
designed for recovering forgotten passwords or for technicians/administrators.

Feedback
========

I would really appreciate it if you would drop me a line telling me what operating system you
are running and how WinPWL worked on the computer you ran it on. Did it perform as expected?
I would like to know. Drop me a line at [e-mail]. No suggestions or for future
versions please, as I'm entering university and will have even less time to work on this
little project. I hope to release a fourth version of WinPWL, but don't count on it.

Using WinPWL 3.5
================

Pretty straightforward stuff. At the top of the WinPWL window you will see the username and
password for the currently logged on user. The listbox contains a list of all the passwords
stored in the PWL file for that user. Each entry contains the password type, the resource it
is associated with, the username (if applicable), and the password itself.

The Copy button allows you to copy either the currently selected password or all the passwords
to the clipboard so that you can paste them into another application.

Clicking the Refresh button will update the password list to reflect any changes you have made.

To add a new password resource, click the Add button. Choose the correct tab depending on the
type of password you plan to add to the list. Simply fill out the property page with the
information it requires, click OK, and the password will be added to the PWL file. For the
Other Entries tab, you will need to know what it is asking for. The resource is the name of the
server the password is for. Naming conventions depend on the type of network. Enter the
resource, the password, and the password type. The type must be between the numbers 1 and 254.
Here are the most common types:

 1 - NT Domain
 2 - NT Server
 3 - Shared Drive
 4 - MAPI
 6 - Dial-up Networking or CryptoAPI Key
18 - NetWare Server
19 - WWW resource (Internet Explorer)

The Edit button will only allow you to change the password for an existing resource. It will
not let you rename the resource or change the type. To do this, you will need to add a new
resource. It will also forbid you from editing CryptoAPI entries, since editing the key could
really screw things up. Please try to understand that editing the passwords in the PWL file
only affects the cache on that machine. For example, if you change somebody's PWL password for a
NetWare server, their password for access to the server stays the same, but their workstation
trys to log them on with the password you have changed it to. They will not be able to log
on with the new password unless it gets changed on the server side as well.

Clicking the Remove button deletes the selected password from the PWL file. The infamous
type 19 bug has now been fixed - see the version history for more info.

Clicking the System Pwd... button allows you to change the system logon password.

Clicking the Filter... button allows you to specify a type. When filtering is enabled, WinPWL
will only display password entries for that given type. Very handy for isolating a particular
password type.

New for Version 3.5 - WinPWL Plugins!
=====================================

When I released WinPWL 3 it was obvious that many users out there needed more functionality
than WinPWL can provide. Quite honestly I do not have the time to deal with such issues. I did,
however, manage to find the time to write a few functions that are useful to you C programmers
out there. The file WINMESP.DLL is actually a plugin that adds support for Windows Me to WinPWL.
You can extend the program with your own plugins by downloading the WinPWL SDK from the official
website. The SDK includes header files, .lib files, and documentation. Unfortunately I cannot
provide tech support for the plugin API, so you'll just have to work it out on your own. Sorry,
but I just don't have the time! No, writing your own plugin will not enable WinPWL to run
on Windows 2000.

Here's a hint: The SessionVerifyPasswordEx() function exported by WinPWL is VERY handy!
               Much more useful than WNetVerifyPassword, I guarantee!

Plugins from a User's Perspective
=================================

WinPWL doesn't care if you use plugins or not. If you delete WINMESP.DLL, for example, WinPWL
will still run. It won't support Windows Me, but it will run. Any plugin you use just needs to
be copied to the same directory as WinPWL, and WinPWL will handle the rest. Some plugins requre
user interaction, in which case there will be a menu entry under the Plugins button. WinPWL 3.5
allows up to 16 plugins to be loaded at one time. I'm hoping some programmers out there try out
the plugin API and write some cool extensions for WinPWL.

Version History
===============

3.5  - Also known as WinPWL 3 Millennium Edition. Fixed a bug that prevented removal of type
       19 passwords. Added a plugin API so that any interested developers out there can write
       their own custom plugins to extend WinPWL. (See plugin section of readme file.) Used the
       plugin API to write a system password provider to add support for Windows Millennium
       Editon. Fixed some bugs in the owner draw code for the main listbox.

3    - Abandoned the old code base and rewrote the entire program from scratch! Contains a
       brand new, simplified interface, with more features, including the ability to view
       and edit NetWare passwords, and the ability to view and change the system password
       (when the target system is left unattended). A filter option has been added so that
       only passwords of a particular type can be displayed, and customized add and edit
       dialog boxes allow for easier entry of passwords. My new linked-list manager greatly
       improves memory management over the previous versions of WinPWL.

2.03 - Better interpretation of PWL file's contents, including CryptoAPI keys and IE site
       passwords. Username is now displayed in uppercase, since the PWL file is encrypted
       using an uppercase form of the username. About box now allows user to disagree with
       disclaimer, which then aborts the program.

2.02 - Improved icons, added about box. Fixed the system menu. Changed the startup code so
       that WinPWL tries to log you in before it dumps the passwords. This should prevent
       the "user not logged in" error messages that previous versions displayed. WinPWL now
       displays the current username. Memory use has been changed.

2.01 - Removed some debugging stuff that I forgot to take out of version 2.00! Oops!

2.00 - Added features for adding, editing, and removing passwords from PWL files.

1.01 - In response to dschneid's complaints I added an icon. Fixed missing DLL bug.
       Had to static link the runtime library, because I couldn't avoid using it!

1.00 - Initial release - Allows inspection of passwords in PWL files and the ability to
       copy them to the clipboard.

Aaron Klotz