Network Password Recovery v1.56
Copyright (c) 2005 - 2022 Nir Sofer
Web Site: https://www.nirsoft.net
Description
===========
When you connect to a network share on your LAN or to your .NET Passport
account, Windows allows you to save your password in order to use it in
each time that you connect the remote server. This utility recovers all
network passwords stored on your system for the current logged-on user.
It can also recover the passwords stored in Credentials file of external
drive, as long as you know the last log-on password.
Which passwords this utility can recover ?
==========================================
* Login passwords of remote computers on your LAN.
* Passwords of mail accounts on exchange server (stored by Microsoft
Outlook)
* Password of MSN Messenger / Windows Messenger accounts
* Internet Explorer 7.x and 8.x: passwords of password-protected Web
sites ("Basic Authentication" or "Digest Access Authentication")
The item name of IE7 passwords always begin with "Microsoft_WinInet"
prefix.
* The passwords stored by Remote Desktop 6.
System Requirements
===================
This utility works properly on Windows XP, Windows 2003, Windows Vista,
Windows 2008, Windows 7, Windows 8, Windows 10, and Windows 11 - only
when you logged on as user with Administrator privileges. You can also
use this utility for recovering network passwords under Windows 98/ME.
Windows 2000 is not supported, because this version of operating system
doesn't save the network passwords.
Versions History
================
* Version 1.56:
o Fixed the external drive feature to work properly if you sign in
with Microsoft account.
o Be aware that in order to decrypt Windows passwords created while
you signed in with Microsoft account, you have to provide the random
DPAPI password generated for your Microsoft account instead of the
actual login password. You can find this DPAPI password with the
MadPassExt tool.
* Version 1.55:
o Added new option 'Load the passwords of the all logged-in users'.
This new option allows you to recover the passwords of
non-administrator users without typing their password, as long as the
user is already logged into your system. Added 'Filename' column,
which displays the credentials file where the password is stored.
* Version 1.50:
o Added support for decrypting passwords from external drive /
another user profile for all versions of Windows from Windows XP and
up to Windows 10 ! (In 'Advanced Options' window - F9 )
o Added advanced external drive settings which allows you to choose
the desired Windows Protect folder and the Windows Credential folder
(In 'Advanced Options' window - F9).
* Version 1.40:
o Added 'Export Raw Passwords Data' option, which allows you to
export all raw data from Windows credential files. You can view the
exported file with any Hex viewer/editor, and you may find in this
file some information that is not displayed in the main window of
Network Password Recovery tool.
* Version 1.34:
o Removed the command-line options that export the passwords to a
file from the official version. A version of this tool with full
command-line support will be posted on separated Web page.
* Version 1.33:
o To avoid from deletion by mistake, the delete menu item is now
separated from the others. Also, the default answer for the delete
question is No.
* Version 1.32:
o Added 'Mark Odd/Even Rows' option, under the View menu. When it's
turned on, the odd and even rows are displayed in different color, to
make it easier to read a single line.
* Version 1.31:
o Added 'Copy Password' option (Ctrl+P).
* Version 1.30:
o Added 'Password Strength' column, which calculates the strength
of the password and displays it as Very Weak, Weak, Medium, Strong,
or Very Strong.
o Added 'Add Header Line To CSV/Tab-Delimited File' option. When
this option is turned on, the column names are added as the first
line when you export to csv or tab-delimited file.
* Version 1.24:
o Fixed bug: pressing the delete key in the find window deleted an
item in the main window.
* Version 1.23:
o Fixed a problem with Application Compatibility Engine on Windows
7/Vista: In some rare circumstances, this utility was shimmed by
Application Compatibility Engine, which means that apphelp.dll and
AcLayers.DLL were loaded into the process and replaced the Windows
API pointers in the exports table. This API replacement caused this
utility to crash lsass.exe and restart the operating system after a
minute.
This problem occured when running this utility from NirLauncher
package, because the executable of NirLauncher contains the word
'launch', and from unknown reason, Microsoft automatically shim every
executable that contains the word 'launch'.
* Version 1.22:
o Fixed bug: In some systems, Network Password Recovery crashed on
start with Exception C0000005.
* Version 1.21:
o Added /sort command-line option.
* Version 1.20:
o Added support for reading and decrypting the passwords stored in
external Credentials file.
* Version 1.15:
o Added support for saving as comma-delimited file.
o Fixed bug: The main window lost the focus when the user switched
to another application and then returned back.
* Version 1.12:
o The configuration is now saved to a file instead of the Registry.
* Version 1.11:
o Under Vista, this utility now runs as admin automatically. You
don't have to explicitly choose the "Run As Administrator" option.
* Version 1.10:
o Added support for Windows Vista (both 32-bit and x64 versions)
* Version 1.03:
o Added support for IE7 passwords. (For Web sites with HTTP
Authentication)
* Version 1.02:
o Delete passwords option (Windows XP only).
* Version 1.01:
o Added support for Windows XP styles.
o Added support for Autologon password stored by Microsoft Tweak UI
tool
* Version 1.00: First release.
Where the network passwords are stored ?
========================================
Older versions of Windows (Windows 95,98 and ME) stored the network
passwords in pwl files located under the main Windows folder.
Starting from Windows XP, the network passwords are encrypted inside the
Credentials file, located under Documents and Settings\<User
Name>\Application Data\Microsoft\Credentials\<User SID>. Some passwords
may also be stored in the Credentials file under Documents and
Settings\<User Name>\Local Settings\Application
Data\Microsoft\Credentials\<User SID>.
In addition to the passwords of network shares, Windows XP also stores
the passwords of .NET Passport (MSN Messenger) in the same Credentials
files
Credentials file in external drive
==================================
Starting from version 1.20, you can also read the Credentials from an
external profile in your current operating system or from another
external drive (For example: from a dead system that cannot boot
anymore). In order to use this feature, you must know the last logged-on
password used for this profile, because the Credentials file is encrypted
with the SHA hash of the log-on password, and without that hash, the
Credentials file cannot be decrypted.
You can use this feature from the UI, by selecting the 'Advanced Options'
in the File menu, or from command-line, by using /external parameter. The
user profile path should be something like "C:\Documents and
Settings\admin" in Windows XP/2003 or "C:\users\myuser" in Windows
10/8/7/Vista/2008.
Notice: If the passwords were encrypted under Microsoft account sign-in,
you have to extract the encryption password with the MadPassExt tool and
then paste this password into the Windows L
评论1