Protected Storage

• Download source - 14.1 Kb

Introduction

Passwords are stored using Protected Storage in Windows 2k and XP. This program will reveal :-

1. Outlook Passwords
2. Deleted Outlook Account passwords
3. IE : Password-Protected sites passwords
4. MSN Explorer Signup passwords
5. IE AutoComplete Passwords
6. IE Auto Complete Fields in 9x it will show the cached dialup passwords

Background

There is a tool called Protected storage Explorer at CodeProject itself but it does not have source code. I tried to do what this program does by looking at that tool without any source code - lol - and that tool helped me to do this program.

Using the code

This Program first enumerates the outlook accounts from registry located at HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Account Manager\\Accounts first and then storing it in a structure.

SMTP Password2 - this string value contains the corresponding ItemName of protected storage data password of that account, then it continues enumerating the protected storage; loads the pstorec.dll and gets the address of function "PStoreCreateInstance". Then it calls PStoreCreateInstance to get an instance of IPStore, then it will enumerate the protected storage passwords. It will also enumerate cashed passwords in Win 9x.