PaulSpoerry.com

Image via Wikipedia

To view the passwords associated with any site, go to the log-in page and right-click anywhere on the page. Select View Page Info, and then the Security tab. Click View Saved Passwords. Another window will pop up showing the usernames associated with that site. Click Show Passwords to see the passwords for each username.

If you want to view all of your saved usernames and passwords, open Options under the Tools menu and select the Security tab. Click Saved Passwords to open a list of every site you’ve ever saved a password for. Again, click View Passwords and the list will display all of your passwords. You can’t print this list, but you can just as easily take screenshots if you want to print out your passwords for safekeeping. Isn’t this a huge security hole?, you may ask. Why yes, it is. Knowing how easy it is for anyone with access to your PC to view all your passwords, maybe you’d like to password-protect your passwords. In the Options | Security tab, click Use a master password and enter a password. Now this password will have to be entered any time you or anyone else tries to view saved passwords. You’ll be asked to enter your master password every time you open Firefox; without it, Firefox won’t automatically enter saved passwords for you. Make sure you don’t forget this one!

Ever have to go work on a family members computer and need to get into their router. Routers comes with a default password, and most people don’t change them (bad bad bad). Here is a list of default logins and passwords for most devices. This listing is only provided as a resource to network administrators and security professionals. It is also meant to remind people that a serious problem exists when people configure a network or a computer system and do not change these passwords. The manufacturers of the listed devices, software or systems are not to blame for this problem, and we are not trying to discredit them or their products. A default login is a means for an end user of a product to complete the initial setup of the device or system. Most manufacturers strongly recommend their end users change these logins and passwords for security reasons.

Read the rest of this entry �

The free, open source Ophcrack Live CD is a Windows account password cracking tool designed to help you recover lost Windows passwords.

After you download the 462mb .iso and burn it to a CD, just restart your computer and boot up the Live CD. Once the CD boots, blamo… Ophcrack automatically loads and is on its way to cracking your password.

(screenshot of ophcrack on Linux cracking Windows passwords)

Features:

• Runs on Windows, Linux and Mac OS X (intel).
• Cracks LM and NTLM hashes.
• Free tables available for alphanumeric LM hashes.
• Loads hashes from local SAM, remote SAM.
• Loads hashes from encrypted SAM recovered from a Windows partition, Vista included.

I’ve yet to try this live bootable version, but I used l0phtcrack (now LC5 and no longer produced since the company that made it was bought by Symantec) a few years ago and retrieved 99% of the passwords off a backup domain controller in something like 12 hours (using a not-so-powerful desktop to do the cracking).

Get ophcrack Live CD. FYI - you can still get l0phtcrack (aka LC5) from mirrors like sectools.org.

STUMBLEUPON UPDATE:

A couple people have asked if this really works. I just want to re-iterate that this DOES work. It requires physical access to the machine, but if you have physical access you can literally crack every password on a machine in a very short time. As I said above, I used it on a backup domain controller and in about 12 hours cracked every single password on the BDC.

Why crack passwords when you can just create a new Admin account?

Most people tell me they simply “lost” their password. If that’s the case you can use some free tools to create a new Administrator account. With this account you can simply change the existing accounts password, use the new Admin account, or… well… do anything you want. Read more in my article: Hack Vista - Create a new admin account