IncrediMail Password Decryptor is just released

11 views
Skip to first unread message

Nagareshwar Talekar

unread,
May 30, 2011, 10:53:24 AM5/30/11
to null-...@googlegroups.com
Hi all,

We have just released new tool, IncrediMail Password Decryptor to
instantly recover passwords from IncrediMail client.

IncrediMail stores all the configured mail account passwords in
registry in an encrypted format at following location.

HKEY_CURRENT_USER\Software\IncrediMail\Identities\<GUID>\Accounts\<GUID>

Usernames are stored in clear text, however passwords are encrypted
using proprietary encoding algorithm. Passwords for each type
(POP3/SMTP) are stored in the registry values “PopPassword“ &
“SMTPPassword“.

IncrediMail Password Decryptor helps in automatically discovering &
decrypting all such stored passwords.

For more interesting details, check out
http://securityxploded.com/incredimail-password-decryptor.php

For users in Gulf countries, use alternative portal
http://passwordforensics.com/incredimail-password-decryptor.php


- SecurityXploded
An Infosec Research & Development Portal

$@M =>

unread,
May 31, 2011, 12:10:19 AM5/31/11
to null-...@googlegroups.com
Can you explain me the concept behind proprietary encoding algorithm ?

Nagareshwar Talekar

unread,
Jun 5, 2011, 5:24:15 AM6/5/11
to null-...@googlegroups.com
We will soon put short article explaining internal
encryption/decryption algorithm. You can watch most of our previous
research articles,
http://securityxploded.com/passwordsecrets.php

> --
> null - Spreading the right Information
> null Mailing list charter:
> http://null.co.in/section/about/null_list_charter/
>
> This list is supported by Institute of Information Security
> http://iisecurity.in
> Learn information security at your own pace – eLearning programs at
> http://elearning.iisecurity.in
>

--
With Regards
Nagareshwar Talekar

http://SecurityXploded.com
http://PasswordForensics.com/
http://NetCertScanner.com
http://twitter.com/securityxploded

Reply all
Reply to author
Forward
0 new messages