Full Disclosure mailing list archives

Re: New Tool - Flashfxp Password Decryptor Released !

From: Alexander Cherepanov <cherepan () mccme ru>
Date: Tue, 10 May 2011 00:08:56 +0400

On 09.05.2011 16:08, Nagareshwar Talekar wrote:

FlashFXP stores the password for all the configured FTP sessions in
the local file called “sites.dat”. Passwords are encrypted with XOR
based encoding mechanism using the magic string as
“yA36zA48dEhfrvghGRg57h5UlDv3″.


Hm, there are some variations to this process as implemented by fxppwd 
tool by Luigi Auriemma ( http://aluigi.org/pwdrec.htm ).
See also http://aluigi.freeforums.org/post6741.html .

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread:

New Tool - Flashfxp Password Decryptor Released ! Nagareshwar Talekar (May 09)
- Re: New Tool - Flashfxp Password Decryptor Released ! Valdis . Kletnieks (May 09)
  - Re: [Full-disclosure] New Tool - Flashfxp Password Decryptor Released ! Nicolai (May 09)
    - Re: [Full-disclosure] New Tool - Flashfxp Password Decryptor Released ! Valdis . Kletnieks (May 09)
    - Re: New Tool - Flashfxp Password Decryptor Released ! Alexander Cherepanov (May 09)