Bulk LM Password Cracker

Bulk LM Password Cracker is the simple command-line tool for quick cracking of mass LM password hashes.

You can put entire dump of LM hashes (one per line) into text file and then start cracking using the password dictionary/wordlist file. Each password from dictionary file is compared with a supplied list of hashes and cracked password  hashes will be written to the output file. It also takes care of duplicate password hashes automatically so you don't have to  perform any pre-sorting work. During hash cracking operation detailed statistics  is displayed showing the completed password counts and number of cracked hashes. This tool is useful for penetration testers and researchers to crack big dump o f LM hashes in few minutes. And being a command-line tool makes it easy for automation. It is fully portable and works on all platforms starting from Windows XP to Windows 8.

Installation & Un-installation

Bulk LM Password Cracker comes with Installer to help in local installation & un-installation. This installer has intuitive wizard which guides you through series of steps in completion of installation.

At any point of time, you can uninstall the product using the Uninstaller located at following location (by default)

[Windows 32 bit] C:\Program Files\SecurityXploded\BulkLMPasswordCracker [Windows 64 bit] C:\Program Files (x86)\SecurityXploded\BulkLMPasswordCracker

How to use?

Bulk LM Password Cracker is very easy to use tool. It is command-line based tool, hence you have to launch it from the command prompt (cmd.exe). Here is the simple usage information

BulkLMPasswordCracker.exe <lm_hash_file_path> <dict_file_path> <output_file_path> <lm_hash_file_path> => LM Hash list file one per line <dict_file_path> => Password wordlist/dictionary file one per line <output_file_path> => Output file to store cracked LM hashes

Examples of Bulk LM Password Cracker

//Crack LM hashes from a hashlist using dictionary password file BulkLMPasswordCracker.exe "c:\hashlist.txt" "c:\passlist.txt" "c:\output.txt"   //Show this help screen BulkLMPasswordCracker.exe -h

Screenshots

Screenshot 1: Bulk LM Password Cracker in action

BSNL Password Decryptor

BSNL Password Decryptor is a free desktop tool to instantly recover the Login Password of BSNL modem/router.

If you have lost login authentication password of your BSNL modem and you have backup configuration file then you can use this tool to quickly recover your password. It supports dual mode of password recovery. You can either enter the encrypted BSNL password directly or specify the BSNL Modem's backup configuration file. In second case, it will automatically detect the login password from config file and decrypt it instantly. Note that it currently supports limited number of BSNL modems (mainly UT-300 Series). Hence it may or may not work with other models. This can be very handy tool for all Network Administrators as well as penetration testers. It is successfully tested on both 32 bit & 64 bit windows systems starting from Windows XP to Windows 8

Features

Free Desktop tool to quickly recover BSNL Modem Login passwords Supports direct password decryption or recovery from BSNL modem configuration file. Recovers password of any length & complexity Very easy to use with nice GUI interface. Automatically copy the recovered BSNL password to clipboard Fully portable and can be run directly on any system Installer for local Installation & Uninstallation.

Installation & Un-installation

BSNL Password Decryptor comes with Installer to help in local installation & un-installation. This installer has intuitive wizard which guides you through series of steps in completion of installation.

At any point of time, you can uninstall the product using the Uninstaller located at following location (by default)

[Windows 32 bit] C:\Program Files\SecurityXploded\BSNLPasswordDecryptor [Windows 64 bit] C:\Program Files (x86)\SecurityXploded\BSNLPasswordDecryptor

How to use?

It is very easy to use tool with its nice GUI interface. Here are simple steps

Run 'BSNL Password Decryptor' on your system after installation. Select 'Encrypted Password' option if you have the password else select 'BSNL Config File' if you have the BSNL backup configuration file. Next enter the password or configuration file path based on the previous option Finally click on 'Decrypt Password' button and tool will instantly display the decrypted password as shown in the screenshots below. Also the password is automatically copied to clipboard now.

Note that this tool currently supports limited number of BSNL modems (mainly UT300 series & similar ones). If it does not work with your modem then please send us your backup config file and we will try to support it.

Screenshots.

Screenshot 1: BSNL Password Decryptor is showing the recovered Password from the encrypted BSNL Login Password

Screenshot 2: Showing Password recovered from the BSNL backup configuration file.

Browser Password Dump

Browser Password Dump is the free command-line tool to instantly recover your lost password from all the popular web browsers.

Currently it can recover stored web login passwords from following browsers. Firefox Internet Explorer Google Chrome Chrome Canary/SXS CoolNovo Browser Opera Browser Apple Safari Flock Browser SeaMonkey Browser Comodo Dragon Browser It automatically discovers installed applications on your system and recovers all the stored web login passwords within seconds. By default it dumps all the recovered passwords to console. Now with version v2.0 onwards, you can also save the passwords to TEXT file. Being command-line tool makes it ideal tool for penetration testers and forensic investigators. For GUI version check out the Browser Password Decryptor. It works on both 32-bit & 64-bit platforms starting from Windows XP to Windows 8.

How to use?

Browser Password Dump is very easy to use tool. It is command-line/console based tool, hence you have to launch it from the command prompt (cmd.exe). Here is the simple usage information

BrowserPasswordDump.exe [-f <output_file_name>]

Examples of Browser Password Dump

//Dump all the browser passwords to console BrowserPasswordDump.exe   //Dump all the browser passwords to a file 'c:\passlist.txt' BrowserPasswordDump.exe -f "c:\passlist.txt"   //Show this help screen BrowserPasswordDump.exe -h

Make sure to increase the screen width of your command prompt to see the output properly.

Screenshots

Screenshot 1: 'Browser Password Dump' displaying all the recovered passwords.

Browser Password Decryptor

Browser Password Decryptor is the FREE software to instantly recover website login passwords stored by popular web browsers.

Currently it can recover saved login passwords from following browsers.

Firefox Internet Explorer Google Chrome Google Chrome Canary/SXS CoolNovo Browser Opera Browser Apple Safari Comodo Dragon Browser SeaMonkey Browser SRWare Iron Browser Flock Browser

For command-line version, check out our new tool - Browser Password Dump. It works on most of the Windows platforms starting from Windows XP to latest operating system, Windows 8.

Features

Instantly decrypt and recover stored encrypted passwords from popular web browsers. Right Click Context Menu to quickly copy the password Recover password of any length and complexity. Automatically discovers all supported Applications and recovers all the stored passwords. Sort feature to arrange the recovered passwords in various order to make it easier to search through 100's of entries. Save the recovered password list to HTML/XML/Text/CSV file Easier and faster to use with its enhanced user friendly GUI interface. Support for local Installation and uninstallation of the software.

Installation & Uninstallation

Browser Password Decryptor comes with Installer so that you can install it locally on your system for regular usage. It has intuitive setup wizard (as shown in the screenshot below) which guides you through series of steps in completion of installation.

At any point of time, you can uninstall the product using the Uninstaller located at following location (by default)

[Windows 32 bit] C:\Program Files\SecurityXploded\BrowserPasswordDecryptor [Windows 64 bit] C:\Program Files (x86)\SecurityXploded\BrowserPasswordDecryptor

How to Use?

Browser Password Decryptor is easy to use with its simple GUI interface.  Here are the brief usage details

Launch BrowserPasswordDecryptor on your system Next click on 'Start Recovery' button and all website login passwords stored by web browsers will be recovered & displayed as shown in screenshot 1 below. Finally you can save all recovered password list to HTML/XML/Text/CSV file by clicking on 'Export' button and then select the type of file from the drop down box of 'Save File Dialog Screenshots Screenshot 1:BrowserPasswordDecryptor is showing the recovered website login passwords for popular web browsers

Browser History Spy

Browser History Spy is the all-in-one software to instantly recover or view the browsing history from popular web browsers.

It helps in recovering or viewing web history of following browsers.

Mozilla Firefox Internet Explorer Google Chrome Google Chrome Canary/SXS CoolNovo SeaMonkey Browser

It automatically detects the right history database file based on the browser and current user configuration. You can also manually specify the different history file or Drag & Drop a file. This is useful when you have to recover the history from another system. You can export the recovered history list to HTML/XML/CSV file for offline analysis. It works on most of the Windows platforms starting from Windows XP to latest operating system, Windows 8.

Features & Benefits

Easy to use tool with attractive GUI Interface. Automatically detect the history database file for particular browser and user. Option to manually specify the history file for Chrome/Firefox browsers. Add/Remove the history URLs from Internet Explorer. 'Sort Feature' to sort the history list based on URL, Title, Date etc. Save the recovered history list to HTML/XML/CSV file. Fully Portable - You can directly run it from any Windows system. Optional Installer for local installation/uninstallation on your system.

Installation & Uninstallation

BrowserHistorySpy comes with Installer so that you can install it locally on your system for regular usage. It has intuitive setup wizard (as shown in the screenshot below) which guides you through series of steps in completion of installation.

At any point of time, you can uninstall the product using the Uninstaller located at following location (by default)

[Windows 32 bit] C:\Program Files\SecurityXploded\BrowserHistorySpy [Windows 64 bit] C:\Program Files (x86)\SecurityXploded\BrowserHistorySpy

How to Use?

'Browser History Spy' is easy to use with its simple GUI interface.  Here are the brief usage details

Launch BrowserHistorySpy on your system Now you can move to Firefox/Chrome/Internet Explorer tab to view the web history from respetive browser. By default it will automatically display current history file. If not, you can manually select the right history file for your browser. Now click on 'View History' and all the visited URLs from your browser will be displayed as shown in the screenshot below. To make it easier, you can click on List header to sort it by URL/Title/Visits/Date. Finally you can save the history list to HTML/XML/CSV file by clicking on 'Export' button and then select the type of file from the drop down box of 'Save File Dialog'

Note: To view web history of Chrome SXS/CoolNovo Browser use Google Chrome Tab and for SeaMonkey browser use Firefox tab.

Screenshots.

Screenshot 1:BrowserHistorySpy is showing the recovered history list from Firefox browser.

Screenshot 2:  History List exported to HTML file 

Asterisk Password Spy

Asterisk Password Spy is the FREE tool to instantly reveal the hidden password behind asterisks (*****).

It's user friendly interface can help you to easily find the passwords from any Windows based application.You can simply drag the 'search icon' to any password box to find the real password hidden by those asterisks. Most applications do not display real password in the login box for security reasons and instead they show the asterisks (****). But often there is need to know the actual password especially if you have forgotten password that you have entered while ago. In such cases, AsteriskPasswordSpy will help you to easily find out the real password hidden behind asterisks. It works on wide range of platforms starting from Windows XP to latest operating system Windows 8.

Features

Instantly reveal the hidden password behind asterisks. Support most of the windows based applications Nice user friendly GUI interface makes it easier & faster Show password of any length & complexity Sort feature to quickly arrange and search through discovered passwords. Save the recovered password list to HTML/XML/CSV file. Support for local Installation and uninstallation of the software.

Installation & Uninstallation

AsteriskPasswordSpy comes with Installer so that you can install it locally on your system for regular usage. It has intuitive setup wizard which guides you through series of steps in completion of installation.

At any point of time, you can uninstall the product using the Uninstaller located at following location (by default)

[Windows 32 bit] C:\Program Files\SecurityXploded\AsteriskPasswordSpy [Windows 64 bit] C:\Program Files (x86)\SecurityXploded\AsteriskPasswordSpy

How to Use?

AsteriskPasswordSpy is easy to use with its simple GUI interface.  Here are the brief usage details

Launch AsteriskPasswordSpy on your system Now simply drag the 'search icon' to any password box to reveal the passwords. When you place it over the password box, it will automatically highlight it and password is added to list as shown in the screenshot below. Finally you can save all recovered password list to HTML/XML/CSV file by clicking on 'Export' button and then select the type of file from the drop down box of 'Save File Dialog'.

Screenshots.Screenshot 1:Asterisk Password Spy is showing all the recovered passwords from password boxes of various Windows applications.

Screenshot 2:  Asterisk Password Spy is trying to get the password from Google Talk login box 

Screenshot 3:  Exported list of of recovered passwords by AsteriskPasswordSpy in HTML format.

ASLR Process Scanner

ASLR Process Scanner is the free command-line tool to scan and show all the ASLR enabled Processes.

ASLR (Address space layout randomization) is one of the effective security feature introduced since Windows Vista to protect Process against successful exploitation. It hinders some types of security attacks by randomizing the addresses. ASLR Process Scanner helps you to perform following things, Show all ASLR enabled Processes Show all Non-ASLR or ASLR disabled Processes Check the ASLR status of Process with the ID Check the ASLR status of Process with the name Check the ASLR status of Executable File Path Being a command-line tool makes it easy to automate through scripting. Also it can be handy tool for developers and researchers. It is available in both 32-bit & 64-bit versions and works on all Windows platforms starting from Vista to Windows 8.

How to use?

ASLR Process Scanner is very easy to use tool. It is command-line/console based tool, hence you have to launch it from the command prompt (cmd.exe). Here is the simple usage information

[For 32-bit Systems] ASLRProcessScanner32.exe [-h | -d | -p <pid> | -n <process_name> | -f <exe_file_path>] [For 64-bit Systems] ASLRProcessScanner64.exe [-h | -d | -p <pid> | -n <process_name> | -f <exe_file_path>]

Examples of ASLR Process Scanner

//List all ASLR enabled Processes ASLRProcessScanner.exe //List all Non-ASLR or ASLR disabled Processes ASLRProcessScanner.exe -d //Check if ASLR is enabled for Process with pid 1151 ASLRProcessScanner.exe -p 1151 //Check if ASLR is enabled for Process with name 'chrome' ASLRProcessScanner.exe -n "chrome" //Check if ASLR is enabled for Executable File ASLRProcessScanner.exe -f "c:\windows\explorer.exe" //Show this help screen ASLRProcessScanner.exe -h

Note that it includes both 32-bit and 64-bit version (ASLRProcessScanner64.exe). On 64-bit operating systems, you have to use the 64-bit version.

Screenshots.