Hello there,

I've got an shell on a Server and now i want to decrypt the VNC password.
But i can't upload any files like VNCpwdump.exe. Is it possible the read the password Hashes per comand line ? THX

you can try using the dos command regedit

read the folowing link .. maibe the thing you need

http://www.robvanderwoude.com/index.html

regedit in command line and

/e

This option is used to export the registry or part of it to a file.

example: regedit.exe /e myfile.reg HKEY_LOCAL_MACHINE\SOFTWARE

This would export the entire Software key to myfile.reg.

It doesn't have to be a reg file you export to - it can be a text file.

First = thx for the fast replys

Second = @jubbly your comamdn works big thx i will remeber. But it seems there is no Hash in
\HKEY_CURRENT_USER\Software\ORL\WinVNC3\Password or
\HKEY_USERS\.DEFAULT\Software\ORL\WinVNC3\Password

what can i do now ?

just look

http://www.cqure.net/tools.jsp?id=12



hope you'll find it usefull...

if you can use regedit then dump the password

regedit /E vnc.reg "HKEY_LOCAL_MACHINE\SOFTWARE\ORL\WinVNC3\Default"

then add the values on your comp and then use the tool from my previous post.

damn there is no entry in the Registry
\HKEY_CURRENT_USER\Software\ORL\WinVNC3\Password or
\HKEY_USERS\.DEFAULT\Software\ORL\WinVNC3\Password

---------

\HKEY_CURRENT_USER\Software\ORL\WinVNC3\ is there but no Password entry ?

if you can't find the password for vnc 3, maybe it is using vnc 4?

HKLM\software\realvnc\winvnc4

no its definetly WinVNC3 these registry entrys are
\HKEY_CURRENT_USER\Software\ORL\WinVNC3\

the problem is there is no password entry !?!?!

what the problem with trying to get files on the server? theres plenty of ways to transfer stuff to it

ftp is closed tftp doesnt't work because it's firewalled ;(

can't you echo the file to the box?