Passwords are stored using Protected Storage in Windows 2k and XP. This program will reveal
- Outlook Passwords
- Deleted Outlook Account passwords
- IE : Password-Protected sites passwords
- MSN Explorer Signup passwords
- IE AutoComplete Passwords
- IE Auto Complete Fields
it will show the cached dialup passwords
There is a tool called Protected storage Explorer at CodeProject itself
but it does not have source code. I tried to do what this program does by looking
at that tool without any source code - lol - and that tool helped me to do this
Using the code
This Program first enumerates the outlook accounts from registry located at
HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Account Manager\\Accounts first and
it in a structure.
SMTP Password2 - this string value contains the corresponding
ItemName of protected storage data password
of that account,
then it continues enumerating the protected storage; loads the pstorec.dll and
gets the address of function "
PStoreCreateInstance". Then it calls
PStoreCreateInstance to get an instance of IPStore, then it will
enumerate the protected storage passwords.
It will also enumerate cashed passwords in Win 9x.