Password Recovery Tools

Cain and Abel is a password recovery tool that enables network administrators to test network security, or home users to recover a variety of stored network passwords. The program reports sniffing and recovery of most popular protocols, including FTP, SMTP, POP3, HTTP, mySQL, ICQ, Telnet and others. It can also recover passwords hidden behind asterisk (***), stored in VNC profiles, SQL Server Enterprise Manager, Remote Desktop connections and wireless connections. Other features include LSA Secrets Dumper, Protected Storage password revealer, network enumeration, VoIP filtering and more. Probably one of the most complete network password recovery/security tools you can find. Cain and Abel is intended for network administrators or advanced users. (--- NOTE: Expect your antivirus software to alert you of a password cracking or hacking tool when installing this software! ---)

SniffPass is a network protocol sniffer that automatically captures password that are transmitted via POP3, IMAP4, SMTP, FTP, and HTTP protocol. It can be used to recover forgotten passwords that are hidden behind asterisks or otherwise inaccessible. SniffPass can use RAW sockets on XP/2000 and requires WinPcap or Microsoft Network Monitor for other Windows operating systems. Standalone program, no install needed.

MessenPass allows you to recover your password(s) from a wide variety of popular Instant Messenger programs, including MSN Messenger, Windows Messenger, Yahoo Messenger, ICQ Lite 4.x/2003, AOL Instant Messenger, AOL Instant Messenger/Netscape 7, Trillian, Miranda and GAIM. Just run the program and it will present you with a list of all accounts found on your PC, including the username and passwords. The list can be exported to HTML or saved as text file. MessenPass can only be used to recover the passwords for the current logged-on user on your local computer. You cannot use it for grabbing the passwords of other users.

Mail PassView allows you to view account information, including username and password for mail accounts in popular email programs, including Windows Live Mail, Outlook Express, Microsoft Outlook 2000/2002/2003/2007, Windows Mail, IncrediMail, Eudora and others. Just run the program and the window will automatically find and display all the accounts that are supported. You can choose to save all or only selected accounts to a text file or copy the information to the clipboard.

Asterisk Key reveals passwords that are hidden under asterisks. Unlike many others, this program works both with password dialog boxes and web page login forms. Asterisk Key is easy to use, just press a button, while the dialog or web page is open and it will detect and reveal all masked passwords.

RockXP allows you to retrieve your XP product key that you used when you installed Windows XP, as well as keys for other Microsoft products. This can come very handy if you need to reinstall but have misplaced or lost the CD cover with the serial sticker. In addition, the program also lets you save the product activation to a file, recover usernames and passwords contained in the Windows Secure Storage, as well as MSN logins, Internet connection parameters and more. --- NOTE: Due to the nature of this software, some anti-virus program may warn you when you install this program. RockXP is not a virus, but other people could use it to get your Windows keys, thus the alert. ---

Messenger Key recovers passwords for popular Instant Mesengers, including MSN Messenger, Google Talk, ICQ 2003, 4x 5x and ICQ 2002-98 data files. All you have to do is drag and drop the data file (.dat, .fb) onto the interface to reveal any passwords that are stored in it.

Protected Storage PassView is a small utility that reveals the passwords stored on your computer by Internet Explorer 6 (not IE7!) and Outlook Express. The passwords are revealed by reading the information from the Protected Storage. These include all email and web site passwords where you chose "remember password" (not cookie passwords) as well as auto-complete passwords. This utility can only show the passwords of the current logged-on user, it cannot reveal the passwords of other users. Th

PasswordFox enables you to review and export the list of saved logins and passwords that are stored in your Firefox browser. The list can be saved to a text file or exported to HTML format. PasswordFox will let you view passwords from any Firefox profile, not only the current one. A useful tool to backup your login information, keep in mind though that the exported text file in not encrypted and should be stored securely.

Network Password Recovery can retrieve all network passwords stored on your system for the current logged-on user. In addition, it can also recover any .NET Passport accounts that are stored locally.

PstPassword enables you to recover a lost password from an Outlook PST (Personal Folders) file. Just launch the program and it will automatically detect available PST files and recover the associated passwords. PstPassword does not actually reveal the original password, but offers 3 variations of it, that may appear completely different from the original, but will still allow you to access the file. During our test, the original password was set as `snapfiles` and the recovered version was `U4n7m2`, which worked properly to open the locked file.

Magical Jelly Bean Keyfinder is a small tool that can reveal your registration code from the registry, that you used to register your copy of Windows. Very useful, if you intend to re-install your system but can t find your CD code.

Asterisk Logger reveals passwords that are visible, but masked with asterisks (***). It works a little different than most others, since it does not require you to click a button or drag your mouse over the masked password - all you need to do is open the window that contains the asterisks. The interface keeps track of all revealed passwords as well as associate applications and can also save the list to a text or HTML file.

SC-PassUnleash comes in handy when you forgot the password for an account, but can see it masked (****) in the application dialog. Just drag SC-PassUnleash over the masked password and it will reveal it in regular text. The program works with any regular application password that is store behind asterisks (dots), including FTP programs, Office documents, Outlook, Outlook Express etc. It does not work with web pages or the Windows user manager though.

Did you ever forget or misplace your database password? Database Password Sleuth instantly recovers the opening password from Microsoft Access 95/97/2000/2002 databases in one quick and easy step. Works fast an actually recovers the password almost instantly.

This utility reveals the password stored behind the asterisks in standard password text-boxes as used by many windows applications (FTP clients, E-mail programs etc.). Running the program will unmask the password in the application input field.

This small utility reveals the passwords stored behind the asterisks (*****) in the web pages, when viewed with Internet Explorer 5.0 and above. You can use it to recover a lost web site password, as long as it stored on your computer. The program is easy to use, just open the page that contains the masked password field and run the utility.

PWshow is a small and simple program that can reveal passwords that are masked with asterisks or other symbols. This can come in very handy if you have forgotten your password, but have it stored in the account settings of a software where it is masked from view. After you run PWshow, you simply bring the dialog that contains the ****** password to the front and press F10 to reveal the password. Standalone program, no installation. The technique works in many, but not all applications, give it a try. The download also contains a newer beta version that allows you to change the default hotkey from F10 to something else.

WirelessKeyView enables you to recover the wireless network keys (WEP/WPA) that have been stored by the Windows operating system (not 3rd party products). It display the key in Hex and Ascii (if available) along with the adapter name and GUID. The information can be copied to the clipboard or exported to Text/HTML/XML. No installation required.

This small utility enumerates all Dial-Up entries on your computer and reveals their login details, including User Name, Password and Domain.

IE PassView retrieves all usernames and passwords along with their associated URL from the Internet Explorer password database - the passwords that can be automatically saved by IE. It allows you to recover forgotten passwords and/or to export them to a plain text or HTML file. The program supports AutoComplete, HTTP Authentication and stored FTP passwords.

FTP Password Recovery emulates a local FTP server and thereby allows you to recover the FTP login password for any FTP account you may have, as long as it is cached inside an FTP client program. FTP passwords are commonly cached by FTP programs (WSFTTP,CuteFTP etc.), so you don t have to enter them each time, but they are usually masked by asterisk or not shown at all. To recover those passwords, you can use the client, that holds the cached password, and connect to FTP Password Recovery, which will then reveal the password it receives from the FTP program. The program can only recover the passwords that are stored on your computer.

Mail Password Recovery allows you to recover your email password for any POP3 account, as long as it is stored in an email program on your computer. You just need to temporarily change the settings in your email program , so that it connects to Mail Password Recovery instead and your password will be revealed. Mail Password Recovery works by emulating a local POP server, your email program hands over the password when it connects and Mail Password Recovery will show it to you. The program only works with email accounts/passwords that have the login information stored in your email program (Outlook Express, Eudora etc.)

If you connect your SQL Server by using the SQL Server authentication, and you don t select the "Always prompt for login name and password" option, the password and the user-name are stored on your Registry. Enterprise Manager PassView enumerates all servers registered in your Enterprise Manager, and reveals the user-names and the passwords, if they are stored on your computer. It supports the Enterprise Manager of SQL Server 7.0 and SQL Server 2000.

LCP is a password auditing and recovery tool for Windows NT/2000/XP/2003. It can be used to test password security, or to recover lost passwords. The program can import from the local (or remote) computer, or by loading a SAM, LC, LCS, PwDump or Sniff file. LCP supports dictionary attack, brute force attack, as well as a hybrid of dictionary and brute force attacks.