Internet Download Manager

Apocalypse · **Joined:** 04 Jun 2009 07:38 **Posts:** 8

Hello Mr Aluigi.

how can I decrypt Internet Download Manager Passwords ?

http://www.internetdownloadmanager.com/

SomaFM · **Joined:** 16 Aug 2007 06:25 **Posts:** 367

Looks like it might just be the hexadecimal version based on the username shown in the picture (74657374 = "test")

So the password: 74657374 = "?>=<;:"

And maybe ignore the trailing 00. Just a guess though.

Apocalypse · **Joined:** 04 Jun 2009 07:38 **Posts:** 8

yes :D the
username test
password : 12345
do u have any decrypter src ? for decrypt the value?

you are saying Hex2Ascii

Sethioz · **Posted:** 19 Jul 2009 18:36

sry, but are you stupid ? use a calculator, either calc.exe or the real calculator you can buy from any shop (with the scientific buttons on it, HEX, DEC, OCT, BIN,.

aluigi · **Posted:** 19 Jul 2009 19:03

echo 74657374 | hex2byte -

Vasili · **Joined:** 30 Apr 2009 21:06 **Posts:** 22

No i think is talking about
3F3E3D3C3B3A
The EncPassword value ...

aluigi · **Posted:** 19 Jul 2009 21:11

the password is saved in the HKEY_CURRENT_USER\Software\DownloadManager\2\EncPassword registry key where obviously 2 is only an example (2, 3 and so on).
and the password is simply xored with 0x0f so it's an easy job:

echo 3F3E3D3C3B3A | hex2byte - | xor - - 0xf
echo 7b6a7c7b | hex2byte - | xor - - 0xf
echo 62767f6e7c7c78607d6b | hex2byte - | xor - - 0xf

Apocalypse · **Joined:** 04 Jun 2009 07:38 **Posts:** 8

aluigi wrote:

the password is saved in the HKEY_CURRENT_USER\Software\DownloadManager\2\EncPassword registry key where obviously 2 is only an example (2, 3 and so on).
and the password is simply xored with 0x0f so it's an easy job:

echo 3F3E3D3C3B3A | hex2byte - | xor - - 0xf
echo 7b6a7c7b | hex2byte - | xor - - 0xf
echo 62767f6e7c7c78607d6b | hex2byte - | xor - - 0xf

thank you aluigi. I'll try.

Apocalypse · **Joined:** 04 Jun 2009 07:38 **Posts:** 8

hello Aluigi.

Code:

function XorStr(Stri, Strk: String): String;
var
 Longkey: string;
 I: Integer;
 Next: char;
begin
 for I := 0 to (Length(Stri) div Length(Strk)) do
  Longkey := Longkey + Strk;
 for I := 1 to length(Stri) do
 begin
  Next := chr((ord(Stri[i]) xor ord(Longkey[i])));
  Result := Result + Next;
 end;
end;

Function HexToStr(s: String): String;
var
 i: Integer;
begin
 Result:=''; i:=1;
 While i<Length(s) Do
 Begin
  Result:=Result+Chr(StrToIntDef('$'+Copy(s,i,2),0));
  Inc(i,2);
 End;
End;

Function DecryptIEDownManag(Pwd:String):String;
Begin
  Result:=XorStr(HexToStr(Pwd),HexToStr('0xF'));
END;

echo 7b6a7c7b | hex2byte - | xor - - 0xf -----> It is working fine Result = 'test'

but

echo 7b6a7c7b | hex2byte - | xor - - 0xf -----------------|
echo 62767f6e7c7c78607d6b | hex2byte - | xor - - 0xf------| > NOT worked. :S

xenocide0999 · **Joined:** 16 Jan 2009 22:16 **Posts:** 19

If you can't figure out how to do something that simple you don't deserve to have it.. And why do you need to recover passwords from a download manager, malicious purposes?

aluigi · **Posted:** 20 Jul 2009 11:39

I can agree with the first sentence but not with the second one because in this place is made only support and I make never questions because nobody can know if someone has real malicious intentions except if he shows them deliberately, in which case, he is ignored, moved to trash and cancelled:

welcome-and-rules-t14.html

Sethioz · **Posted:** 20 Jul 2009 15:40

i also agree..if you don't know what HEX is, then you should not even talk about such things.
in my first post i said use calc.exe, well this works if you want to put decimal into hex, but not ASCii to hex. ..dumb questions are so dumb that it simply goes between the ears and eyes sometimes.
you can use XVI32 to do text to hex and hex to text.

Apocalypse · **Joined:** 04 Jun 2009 07:38 **Posts:** 8

hello aluigi

3F3E3D3C3B3A have u any idea for decrypt it ?

xenocide0999 · **Joined:** 16 Jan 2009 22:16 **Posts:** 19

aluigi wrote:

I can agree with the first sentence but not with the second one because in this place is made only support and I make never questions because nobody can know if someone has real malicious intentions except if he shows them deliberately, in which case, he is ignored, moved to trash and cancelled:

welcome-and-rules-t14.html

kk.

Apocalypse wrote:

hello aluigi

3F3E3D3C3B3A have u any idea for decrypt it ?

Are you serious?

Apocalypse · **Joined:** 04 Jun 2009 07:38 **Posts:** 8

thank you aluigi I fixed my bug :p

Code:

function XORStr(Input :String):String;
var
I : Integer;
Longkey:string;
begin
for I := 1 to Length(Input) do
begin
Longkey  := Longkey+ Chr(Ord(Input[I]) XOR $0f);
end;
Result := Longkey;
end;

Function HexToStr(s: String): String;
var
i: Integer;
begin
Result:=''; i:=1;
While i<Length(s) Do
Begin
  Result:=Result+Chr(StrToIntDef('$'+Copy(s,i,2),0));
  Inc(i,2);
End;
End;

Function DecryptIEDownManag(Pwd:String):String;
Begin
  Result:=XorStr(HexToStr(Pwd));
END;

{
var Password :String;
Begin
 Password := DecryptIEDownManag('62767f6e7c7c78607d6b');
 ShowMessage(Password);
End;
}

// I AM HERE! FUCK ALL RIPPER'S!!!

Luigi Auriemma

Internet Download Manager