[-=[MePhIsTo]=-]

Hello there,

I've got an shell on a Server and now i want to decrypt the VNC password.
But i can't upload any files like VNCpwdump.exe. Is it possible the read the password Hashes per comand line ? THX

Quote

\HKEY_CURRENT_USER\Software\ORL\WinVNC3\Password or
\HKEY_USERS\.DEFAULT\Software\ORL\WinVNC3\Password

[FuzZyBeeR]

you can try using the dos command regedit

read the folowing link .. maibe the thing you need :)

http://www.robvander....com/index.html

[jubbly]

regedit in command line and

/e

This option is used to export the registry or part of it to a file.

example: regedit.exe /e myfile.reg HKEY_LOCAL_MACHINE\SOFTWARE

This would export the entire Software key to myfile.reg.

It doesn't have to be a reg file you export to - it can be a text file.

[-=[MePhIsTo]=-]

First = thx for the fast replys

Second = @jubbly your comamdn works big thx i will remeber. But it seems there is no Hash in
\HKEY_CURRENT_USER\Software\ORL\WinVNC3\Password or
\HKEY_USERS\.DEFAULT\Software\ORL\WinVNC3\Password

what can i do now ?

[da_cash]

just look

http://www.cqure.net/tools.jsp?id=12



hope you'll find it usefull...

[-=[MePhIsTo]=-]

Quote

-=[MePhIsTo]=-,Oct 27 2004, 10:44 AM

But i can't upload any files like VNCpwdump.exe.

<{POST_SNAPBACK}>

[da_cash]

if you can use regedit then dump the password

regedit /E vnc.reg "HKEY_LOCAL_MACHINE\SOFTWARE\ORL\WinVNC3\Default"

then add the values on your comp and then use the tool from my previous post.

[-=[MePhIsTo]=-]

damn there is no entry in the Registry
\HKEY_CURRENT_USER\Software\ORL\WinVNC3\Password or
\HKEY_USERS\.DEFAULT\Software\ORL\WinVNC3\Password

---------

\HKEY_CURRENT_USER\Software\ORL\WinVNC3\ is there but no Password entry ?

[Krogoth]

if you can't find the password for vnc 3, maybe it is using vnc 4?

HKLM\software\realvnc\winvnc4

[-=[MePhIsTo]=-]

no its definetly WinVNC3 these registry entrys are
\HKEY_CURRENT_USER\Software\ORL\WinVNC3\

the problem is there is no password entry !?!?! :huh:

[illwill]

what the problem with trying to get files on the server? theres plenty of ways to transfer stuff to it

[-=[MePhIsTo]=-]

ftp is closed tftp doesnt't work because it's firewalled ;(

[FuzZyBeeR]

can't you echo the file to the box?