Decrypting Passwords

[killu007]

I've found the place in the registry where IE stores the saved usernames and passwords of Websites used in Internet Explorer.

But the passwords are in some hexadecimal format (i believe) some thing like 00 0a....

how to decrypt those...

[adamdelves]

We have ten fingers, so its not surprising we count in powers of 10:

1 2 3 4 5 6 7 8 9 10
10 20 30 40 50 60 70 80 90 100
100 200 300 400 500 600 700 800 900 1000

Every time the number increases by a power of ten we add a zero. for example;

100000 = 10^5

Now imagain you have 16 fingers. It would make sense to count in powers of 16:

1 2 3 4 5 6 7 8 9 a b c d e f
10 20 30 40 50 60 70 80 90 a0 b0 c0 d0 e0 f0

This time every time the power of 16 increases by 1 a zero is added ie: HEX 10 = DEC 16, HEX 100 = Dec 256 / 16^2> To convert hex to decimal all you need do is find find the sum of the total of all the powers in the number.

1a6 in hexadecimal is the same as (1 x 16^2) + (10 x 16^1) + (6 x 16^0)

256 + 160 + 6 = 422

so hex 1a6 = dec 422

It is most likely however that an encoded form of the password is stored in the registry. The hexadecimal numbers refer to ansii chasracter codes.

[killu007]

I have found that the password saved by Internet Explorer for Webpages is stored in this key in the registry.
HKEY_USERS
-> (Your Computer Name)
-->Software
---> Microsoft
----->Protected Storage System Provider
------> (Your Computer Name again )
In that keys are listed with the domain names and the passwords saved.

However as you told the passwords are in encrypted format. I think they are in hexadecimals.
I want to know the logic how to crack those and get the orginal usernames and passwords.

I have seen a software which does the same and i am inspired to do this.
Hope to get a solution here.