flashfxp?

xenocide0999 · **Joined:** 16 Jan 2009 22:16 **Posts:** 19

What algorithm does flashfxp use to encrypt their stored passwords? It used to be by a simple xor + "yA36zA48dEhfrvghGRg57h5UlDv3" as the password but now this doesn't work with the newer versions, any ideas?

aluigi · **Posted:** 18 Jan 2009 22:42

I have tried the beta 3.77 and the algorithm is still the same.
why you say it's changed? what exact tests have you made?

oh a note for who doesn't find sites.dat: "C:\Documents and Settings\All Users\Application Data\FlashFXP\3\Sites.dat" or "%APPDATA%\FlashFXP\3\Sites.dat"

xenocide0999 · **Joined:** 16 Jan 2009 22:16 **Posts:** 19

I have 3.77 and it doesn't work for me. Yes i know its stored at
C:\Documents and Settings\All Users\Application Data\FlashFXP\3
but it doesn't store the passwords in sites.dat any more, my version stores the passwords in quick.dat.

Here is a fake ftp attempt i entered into flashfxp for the sake of example.

Code:

IP=testftp.co.uk
port=21
user=test
pass=C60854FF47
options=30033330000330011030000100033330000010020
created=39831.6882242824
Proxy=0
ID=6F22779F

When i try to decode C60854FF47 with the same thing i have always used to decode flashfxp pws i get this as the outputted pw, "??xq", instead of test which is the password.

aluigi · **Posted:** 19 Jan 2009 01:21

ah ok, I have just fixed it, thanx.
in short if the name of the entry (the one between []) contains the byte 0x03 it's used as key instead of the default one.

xenocide0999 · **Joined:** 16 Jan 2009 22:16 **Posts:** 19

Two questions then;
1.) So if the text in between [] was [39831.6882242824testftp.co.uk], then 39831.6882242824 would be the key?
2.) Would i have to change the decryption routine, or would it be the same thing as in when it uses "yA36zA48dEhfrvghGRg57h5UlDv3" ?

aluigi · **Posted:** 19 Jan 2009 03:45

1) in your example the key is 39831.6882242824testftp.co.uk
2) the decryption routine is exactly the same

Vasili · **Joined:** 30 Apr 2009 21:06 **Posts:** 22

hi aluigi ,

i'am asking how to get rid of the default ftp like Default Sites Game Sites Sega Games and Miscellaneous Sites Borland Delphi
and so on ..

Thanks

aluigi · **Posted:** 10 Jun 2009 18:59

you should check if there are some differences between the default sites and those added by you (I don't have a sites.dat file to check here).
at the moment I don't remember if there were some fixed differences or similar.
anyway this question doesn't look new but I don't remember if the other time that I heard it I found or not a solution (guess not)

Vasili · **Joined:** 30 Apr 2009 21:06 **Posts:** 22

ok i did a small tips now is ok

Thanks Aluigi

Luigi Auriemma

flashfxp?