How to Carve Saved Passwords Using Cain « Null Byte :: WonderHowTo

I'vepreviously mentionedhow saving browser passwords is a bad idea, but I never went into much detail as to why. Passwords that are saved in your browser can be carved out and stolen very easily. In fact, even passwords you save for instant messaging and Wi-Fi are vulnerable. Windows is very inefficient with the way it stores passwords—it doesn't store them in key-vaults, nor does it encrypt them. You're left with passwords residing in memory and filespace that's unencrypted.Linux trumps this by having password wallets, key-vaults, etc. It stores your passwords for programs and browsers in a small encrypted location on your hard drive, so they cannot be stolen. Now this isn't just Windows' fault—the programs themselves could store them in a more secure manner, but they choose not to (most of the time).In thisNull Byte, we're going to be using Cain & Abel to carve out saved browser passwords in a video. Watch the demo below, and scroll down for written instructions.Please enable JavaScript to watch this video.Go tooxiditand download Cain.Install Cain by clickingNext > Next > Next > Next > Finish > Install.With Cain open, in the toolbar click the "+" symbol to dump passwords from each category, and see which of your passwords have been saved and thus, revealed.Log in to a site that saves passwords.Expose them with Firefox's new built-in tool.STOP SAVING YOUR PASSWORDS.If you have a question, you can come toIRCand ask, I idle there 24/7.Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseImage viaHidden SabotageRelatedHack Like a Pro:How to Hack Remote Desktop Protocol (RDP) to Snatch the Sysadmin PasswordHack Like a Pro:How to Grab & Crack Encrypted Windows PasswordsHow To:Hack MD5 passwords with Cain and AbelHack Like a Pro:Metasploit for the Aspiring Hacker, Part 8 (Setting Up a Fake SMB Server to Capture Domain Passwords)How To:Hack MD5 passwordsHow To:Decode VNC passwords with CainHack Like a Pro:How to Crack Passwords, Part 1 (Principles & Technologies)Hack Like a Pro:How to Crack Passwords, Part 2 (Cracking Strategy)News:Carvable Pumpkins Mod 1.7.10How To:Manage Stored Passwords So You Don't Get HackedHow To:Reveal Saved Website Passwords in Chrome and Firefox with This Simple Browser HackHow To:Create, AutoFill & Store Strong Passwords Automatically for Websites & Apps in iOS 12How To:Find Stored Usernames, Emails, & Passwords on SafariHow To:Protect Others from Accessing Saved Password on Google ChromeHow To:Use Your Saved Passwords from Google Chrome to Log into Android AppsNews:8 Tips for Creating Strong, Unbreakable PasswordsHow To:Make Pumpkin Spicy SoupHow To:Use Your Saved Chrome Passwords to Log into Apps on Your GalaxyHow To:How Hackers Take Your Encrypted Passwords & Crack ThemHow To:Carve a Halloween Pumpkin or Jack-O-LanternHow To:Remove a Windows Password with a Linux Live CDHow To:Carve the Perfect Halloween PumpkinHow To:Carve a Turkey the Traditional WayNews:Zombies and Demons Carved Out of 1,818.5 lb PumpkinHow To:Reveal Saved Browser Passwords with JavaScript InjectionsNews:Best Hacking SoftwareHide Your Secrets:How to Password-Lock a Folder in Windows 7 with No Additional SoftwareHow To:Carve Fractals and Stars on PumpkinsHow To:Make an Unbreakable Linux Password Using a SHA-2 Hash AlgorithmGoodnight Byte:HackThisSite Walkthrough, Part 3 - Legal Hacker TrainingNews:Ron Paul 2012 Wins Majority Of Washington Delegates To Convention, Other StateNews:Wild Turkey Presents the "Ultimate Turkey Carving Kit"Social Engineering, Part 2:Hacking a Friend's Facebook PasswordMastering Security, Part 1:How to Manage and Create Strong PasswordsGoodnight Byte:HackThisSite Walkthrough, Part 6 - Legal Hacker TrainingHow To:Hack Mac OS X Lion PasswordsHow To:Sneak into Your Roommate's Computer by Bypassing the Windows Login ScreenHow To:Carve Polyhedral PumpkinsHow To:Advanced Social Engineering, Part 2: Hack Google Accounts with a Google Translator Exploit