From: sjm0415@ms4.hinet.net Oct 28 1997
Newsgroups: tw.bbs.comp.hacker
Subject: z Win95 KX *.PWL
=========================================================
@:ĬT, wﴲ.......................
SJMisBestHacker.............................
=========================================================
@@WYzqgOHϥιLܡAܥiAzKXwgQLH
F (]AzWInternet Ϊ Username & Password)AunCopyzbWin95
ؿU.PWLɧYiۤiѽXAMzOiNW䧮W[FC
@@HNݤFGiOڪWin95bnJɻJKXڡAOJSDڪKXI
ݪDno .PWL ɨä@wDoiJWin95AunΤ@DOSϤ} or F4
BF8 ...
bW@{s Glide.EXEA{źٯ .PWL ɡATOpA
L{YǥѤWAHܩҸѥXӪFFiu@pC۫H
ǤHwչLo{FAyڷ|o{zHάbjhƪ
pUuѥX@p]CBܳou@pvwtĤ@է㪺
Username & Password FC
@@Win95 Oĥ RC4 sXkAtkOifA]NOzLkN.PWL
ɸѦ^ӪˤlADz Key(ΥμɤOk)Cp̥@U RC4 jy{G
A֦@ 32 Bit Key & ݸѽX(N٬ SData a)
HUѽX{ҰƱ:
1.lƤ@Table, TableƵc
{
unsigned char Table[256];
unsigned char char x,y;
}
|NTablȩǶJ0,1,2,.....FFh, ̫N x,y ] 00.
2.N256 Bytes Table ھ Key @Swapʧ@,
, TableݦWhƦCF.
ثeO[l]ʧ@a.
AӬOѽXʧ@:
3.
for(counter=0; counter 2 -> 3
Aӧڷ|P_20ByteO_T,if TܧڦA
Ѷ}ѤU 90Byte y{ 2 -> 3 ,Yh_,h
ε{٬Oo˪:
1 -> 2 -> 3 ѳ̫e 20 Byte
2 -> 3 A 20 Byte
2 -> 3 A 20 Byte
2 -> 3 A 20 Byte
2 -> 3 A 20 Byte
ϥĤ@NOq 1 }l!!! :)
====================================================
PWL榡O(q0208h}l):
20 byte (Username)
2 byte (Ĥ@զbɮת Offset)----------------+
2 byte (ĤGզbɮת Offset)--------------+ |
....... | |
Tag1:(2 byte),"su"W,Password <-+-+
(2 byte),"su"W,Password <-+
====================================================
Win95 jy{O:
1 -> 2 -> 3 ѽXTag11a(Username{ΤF)
if(Username<>nJ95ɪUsername)
{
KXNOŪ(YxsKX)
(Step1]S,]Key,AѤUh]O諸.)
}
else{
Step1: 1 -> 2 -> 3 qTag1a}lѽX.
While(NotEND)
{
2 -> 3 2byte(o,]ѥX,o YY)
2 -> 3 YYByte(o"su"W&Password)
if(M"su"WٲŦX)
{
NPasswordJKX;
Break;
}
}
}
Win95DNXb Username @wOjg, ӥB20ByteaHťնJ,
V|OPWLɦWNOUsername, zڭ̤woe20ByteCByte
UOXORFFF, ڭ̰]:
12 4F 33 20 7F F6 D9 3C 63 AA 11 40 32 DE 46 55 77 2C 3A AD
qPWLiR@Xձb,ܩRO? ڤ]ѤF.ϥiHNO!
So, 0108h+X*2= Tag1 .
,ڤwgDĤ@ձbsb̤F.(0108hOTw)
YMDĤ@ժm,M]NoFbUsername 2 Byte,
{bڭ̤w֦F 22 byteF!
ѲĤ@թO?
]95bStep1aSФF@ 1 -> 2 -> 3
ҥHڭ̥iϥΧڭ̨Wo
쪺 22 Byte qTag1aNXORUh.
pG"su"W+Password
|ܪ----> SL(i٨qXFĤGժ@II!)
HWNO Glide.EXE ҧQΪz(ڥݭnKeyNѥX@եXӤF)
pGAnNҦb(Hinet'Seednet'j'sq...|a!bh,ɤ@
ӥΥΥiH?)X, ܩp,pݪD Key.
\__ bjBBSMkTalkhF,F.
ܩ Key OӪO?
ڭ̦biJWin95,O|X{@ӿJKXDialog?
,NOQγoKXӪ!
(S,ܧAS]wKX, AKey=00000000h)
HUOWin95NnJKXରKey{(̫᪺eaxNOAKey):
push esi
xor eax,eax
mov si,KX+1
cmp si,ax
jz 7fcb19e7
mov edx,offset KX
movzx ecx,byte ptr [edx]
7fcb19d1:
add eax,ecx
inc edx
mov ecx,eax
shl ecx,7
shr eax,19h
or ecx,eax
dec si
mov eax,ecx
jnz 7fcb19d1
7fcb19e7:
pop esi
ret 8
,զXy, C Ӭ(G@):
unsigned long result = 0L;
for( i = 0; i < passwordLen + 1; i++ )
{
int tmp = ( int ) ( result >> 25 );
result += toupper( password[ i ] );
result = ( result << 7 ) | tmp;
}
NO@hA[ӥ[h!
ҥHYADYHiJWin95KX,ANiHX Key, ]NioYH
ҨϥΪҦbF.O? , og{, unSoftICEN
iHF, Ҧʧ@b Mspwl32.dll, ]_I, @@,KSn.
pGpsHiJWin95KXD, unμɤOkF.
1.sӱKX-->নKey-->gRC4-->!e20Byteusername--A--+
^\-----------------------------------------------------------+
2.w@Key-->gRC4-->!e20Byteusername--A--+
^\----------------------------------------------------+
Ӧn,NoݹBF. :)
Glide.EXE nbyhqio, D.....ѤF????????
:
oBugMicrosoftXF@ Mspwl32.dll s{, ťiѨM
D.ڨSչL,ҥHڤ]D. AiݬݧA .PWL ɪ̫e4Byte
O_ b0h,"MFN", YO, ܧAMI!!!
ɶR|ܦAgӤ@I ^_^
Text file Source (historic): geocities.com/tokyo/bay/8420
geocities.com/tokyo/baygeocities.com/tokyo
(to report bad content: archivehelp @ gmail)
|
|
|
|
|