[PEN-TEST] Autocomplete Function

["Masse, Robert" <rmasse () RICHTERSECURITY COM>]

Hi

Does anyone know where Internet Explorer stores the data from the
'autocomplete' function?  You know, the one everyone uses when they do their
on-line banking :)

Possible Scenario:

Lots of people have file sharing on their workstation at home and a nice
broadband connection.  Can someone pull a file with the list of
usernames/passwords/sites
if someone was using autocomplete?

I poked around and didn't find anything (internet options, content allows
you to clear  the info but doesn't tell you where it's stored).


Thanks

Rob

Robert Masse, CISSP
Chief Technical Officer

Richter Security Inc.
2 Place Alexis Nihon, suite 905
Montreal, Quebec, Canada
+514 934 3566 Direct
+514 934 3406 Fax