PDA

View Full Version : windows c++ help


fortytwo
07-17-2003, 11:39 AM
I am currently writing a program where it would be most beneficial for me to be able to pull out a logged in user's username and password. I don't really think I can pull out the password but its been asked of me so I'm looking for a way. I've been looking into using the AcquireCredentialsHandle call. I'm just wondering if anyone has any ideas I could try or look into. Thanks.

DNAunion2000
07-18-2003, 12:03 AM
fortytwo: I am currently writing a program where it would be most beneficial for me to be able to pull out a logged in user's username and password. I don't really think I can pull out the password but its been asked of me so I'm looking for a way. I've been looking into using the AcquireCredentialsHandle call. I'm just wondering if anyone has any ideas I could try or look into. Thanks.

DNAunion: Here's a way to get the passwords. Make your program a web page, have users access it via Internet Explorer.


"Internet Explorer will automatically hand over an encrypted hash of your Windows login account name and password to any website that asks for it -- behind the scenes and without asking your permission. This means that by attracting you to a website, hackers could steal your account name and password to your local system. This is one of the many esoteric security flaws that Microsoft has committed in the name of ease of use." (Matthew Strebe, Network Security Jumpstart, Sybex, 2002, p53)

DNAunion: You'll also need to learn how to use the information (password cracking software?) too.

PS: Sorry, this isn't really an answer to your question. It just came to mind when I read your post.

fortytwo
07-18-2003, 11:55 AM
Well thanks for the help but basically I just said screw it and I'll have the user input the password for now.