Pokerstars/PartyPoker Password Recovery

Tobias · **Joined:** 06 Feb 2008 18:33 **Posts:** 5

anybody knows something about it/how does it works?

regards from Germany

aluigi · **Posted:** 20 Jun 2009 18:10

I'm working on them just in this moment, PokerStars is practically finished so remains the other to watch.
I will update the thread when I will release the password recovery tools

Sethioz · **Posted:** 20 Jun 2009 19:20

Luigi what hash does pokerstars use ? the password hash i mean (md5 ..etc)

aluigi · **Posted:** 20 Jun 2009 21:03

and I have finished the job also with PartyPoker, time for a pizza and then release

aluigi · **Posted:** 21 Jun 2009 09:28

released: http://aluigi.org
note that I'm not 100% sure if I have missed something in the generation of the local key of pokerstarspwd so try it and let me know if the password is decrypted correctly.
use this thread for reporting any problem about the pokerstarspwd and partypwd

Tobias · **Joined:** 06 Feb 2008 18:33 **Posts:** 5

Godlike!

partypwd: works fine!

pokerstarspwd: i got no file named "user.ini" !?

aluigi · **Posted:** 21 Jun 2009 16:30

have you checked if "user" or "user.ini" is available in C:\Program Files\PokerStars or C:\Users\USERPROFILE\AppData\Local\PokerStars or %APPDATA%\PokerStars ?
as far as I know user.ini is the only location where is stored the password when you choose to save it

Tobias · **Joined:** 06 Feb 2008 18:33 **Posts:** 5

ahhh i found them in "AppData\Local\PokerStars", works fine to. Big Thx!

xenocide0999 · **Joined:** 16 Jan 2009 22:16 **Posts:** 19

Lol i was working on doing this the other day. Now that your working on this any chance to figure out Fulltilts poker algorithm? (Most popular poker room)

aluigi · **Posted:** 23 Jun 2009 23:14

I have released fulltiltpwd some hours ago before your post :)

xenocide0999 · **Joined:** 16 Jan 2009 22:16 **Posts:** 19

Sorry i missed it, nice work

Beergood · **Joined:** 12 Jul 2009 11:26 **Posts:** 5

Hey luigi,
first off nice work on all the projects you've released man, you're truely a gifted reverse engineer.I tested out the FullTilt which works fine, but the pokerstars failed to decrypt the password correctly. Afaik most the poker games update weekly so something could of gave changed.

i'm on xp and I found the user.ini at C:\Program Files\PokerStars\user.ini and it returned

Code:

* PASSWORD: ??0???????????M&????????????????#???????????7??????b?????????m
??????

* this is the exact decrypted password as is without removing the username
  usually concatenated after the real password (like passwordusername)

aluigi · **Posted:** 12 Jul 2009 11:51

I have updated PokerStars in this moment but the algorithm is still the same.
the only reasons for which the password is decrypted wrongly are:
- the method used to retrieve the key emulated by me in pokerstarspwd is incomplete (it's possible although strange)
- something has been changed in your configuration, like id of the c: partition or network interfaces (like changing a mac address or adding a new device)

is that password correctly saved on your computer?
I mean, when you launch PokerStars can you login automatically and the password is hidden under the asterixes?

Beergood · **Joined:** 12 Jul 2009 11:26 **Posts:** 5

Thanks aluigi,
It might be the hardware thing, the password is saved on my system and can let me auto login, i'm going to install pokerstars in vmware and test this out in abit and report back the results.

aluigi · **Posted:** 12 Jul 2009 22:20

well in this case it's for sure something missing in my code which calculates the local key.

in the meantime I have attached the same manifest file of PokerStars which so let pokerstarspwd to act (talking about permissions) with the same limitations of PokerStars.
put it in the same folder of pokerstarspwd.exe and check if the decrypted password is still wrong.

unfortunately at the moment I don't have idea of what other field could be missed in the calculation of the key but I will verify again.
thanx for having reported the problem.

Beergood · **Joined:** 12 Jul 2009 11:26 **Posts:** 5

Hey aluigi,
I installed pokerstars in vmware and your tools successfully recovers the password!(manifest wasn't needed), so it probably failed on my regular system due to me changing a hardware id or something. Thanks for your help

aluigi · **Posted:** 13 Jul 2009 09:45

the fact is that you have said that you can autologin which means that the password is stored and read correctly by PokerStars, so it's a fault in my tool

jfbos · **Joined:** 29 Oct 2009 05:26 **Posts:** 1

Hi Luigi / All -

I'm trying to recover a partypoker.net password since their password reset functionality (at partypoker) appears to be down and I can't really contact anyone for support there. Even their info@partypoker.net address just points me to the FAQ, and their FAQ lists simple enough steps to reset/recover a password---none of which works. Always times out. So...

On my computer, is the password stored somewhere, encrypted? I downloaded partypwd.exe and tried to just run it without any arguments/switches (so I could hopefully know what the valid options/switches are for how to actually use the program), but it just lists Luigi's name, email and web site, followed by 'press RETURN to exit'.

Can I 'use' this program to recovery a locally stored (somewhere on my computer) password for PartyPoker.net? Thanks for any confirmation/details!

aluigi · **Posted:** 29 Oct 2009 12:16

yes the tool is exacly a local password recovery which shows the plain-text password after having decrypted the one stored in the computer.

now judging the result of the tool on your computer I guess that you don't have the password saved because even if it was wrong the tool would have showed something.

you can check it also manually launching regedit and going in HKEY_CURRENT_USER\Software\PartyGaming and you should see some "Password" fields in the sub-keys.
if they don't exist or are empty means that the password is not stored locally.

spheere · **Joined:** 01 Dec 2010 00:49 **Posts:** 2

Trying to compile source.

Quote:

C:\MinGW\bin>gcc -o pokerstarspwd.exe pokerstarspwd.c -lgdi32 -lnetapi32 -libcrypto
c:/mingw/bin/../lib/gcc/mingw32/4.5.0/../../../../mingw32/bin/ld.exe: cannot find -libcrypto
collect2: ld returned 1 exit status

Where can I find this libcrypto ?
I downloaded and installed OpenSSL-Win32, but there no libcrypto anyway.
Help plz.

aluigi · **Posted:** 01 Dec 2010 01:35

-lcrypto or alternatively the full path of libcrypto.a

spheere · **Joined:** 01 Dec 2010 00:49 **Posts:** 2

Can U plz upload libcrypto.a at rapidshare.com ?
I can't find it in C:\MinGW\ or C:\OpenSSL-Win32\

aluigi · **Posted:** 01 Dec 2010 08:52

if you don't see libcrypto.a you should see libcrypto.lib.
anyway you can take an old version of ssl (don't worry doesn't matter in this case) here:
http://downloads.sourceforge.net/gnuwin ... -1-lib.zip

nekrosis · **Joined:** 10 Dec 2010 08:48 **Posts:** 1

I'm getting lots of errors for compile in dev c++, I've linked libcrypto.a and still getting lots of errors...

Do I need link other libs?

Can you compile the code (without the waits) and upload it please?

aluigi · **Posted:** 12 Dec 2010 19:58

Code:

           pokerstarspwd.exe
  Offset   |        no_wait.exe
-----------------------------
00000773   E8       90
00000774   18       90
00000775   87       90
00000776   03       90
00000777   00       90

Luigi Auriemma

Pokerstars/PartyPoker Password Recovery