Introduction
Passwords are stored using Protected Storage in Windows 2k and XP. This program will reveal
:-
- Outlook Passwords
- Deleted Outlook Account passwords
- IE : Password-Protected sites passwords
- MSN Explorer Signup passwords
- IE AutoComplete Passwords
- IE Auto Complete Fields
in 9x
it will show the cached dialup passwords
Background
There is a tool called Protected storage Explorer at CodeProject itself
but it does not have source code. I tried to do what this program does by looking
at that tool without any source code - lol - and that tool helped me to do this
program.
Using the code
This Program first enumerates the outlook accounts from registry located at
HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Account Manager\\Accounts first and
then storing
it in a structure.
SMTP Password2 - this string value contains the corresponding
ItemName
of protected storage data password
of that account,
then it continues enumerating the protected storage; loads the pstorec.dll and
gets the address of function "PStoreCreateInstance
". Then it calls
PStoreCreateInstance
to get an instance of IPStore, then it will
enumerate the protected storage passwords.
It will also enumerate cashed passwords in Win 9x.