Luigi Auriemma

aluigi.org (ARCHIVE-ONLY FORUM!)
It is currently 19 Jul 2012 11:43

All times are UTC [ DST ]





Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 3 posts ] 
Author Message
 Post subject: Anybody got any Information About Skype Password DEcrypter
PostPosted: 28 Jul 2009 21:46 

Joined: 04 Jun 2009 07:38
Posts: 8
hello mr. Aluigi

have u any idea for decrypt Skype

Thank you.


Top
 Profile  
 
 
 Post subject: Re: Anybody got any Information About Skype Password DEcrypter
PostPosted: 29 Jul 2009 00:46 

Joined: 19 Apr 2009 23:01
Posts: 13
The location of the password hash is here:

C:\Documents and Settings\Danny\Application Data\Skype\USERNAME\config.xml

"Skype produces a hash of the user password and uses that hash to authenticate/store the login info locally (hash is transferred over the secure channel to authenticate).

As Fabrice Desclaux and Kostya Kortchinsky tell us in their paper, Skype uses MD5 hash of ???username\nskyper\npassword??? to authenticate. The same hash is stored in the config.xml file (C:???Documents and settings??? Windows Username ??? Application data ??? Skype ??? SkypeUsername ??? config.xml). In fact, this MD5 hash is then encrypted using AES and SHA-1 before being stored in the config.xml."

http://blog.reactive-software.com/skype ... -recovery/


Top
 Profile  
 
 Post subject: Re: Anybody got any Information About Skype Password DEcrypter
PostPosted: 29 Jul 2009 16:07 

Joined: 24 Sep 2007 02:12
Posts: 1114
Location: http://sethioz.co.uk
this http://blog.reactive-software.com/skype ... -recovery/ sounds total bs to me.
if im right now, then it is not really encrypted, it is a hash algorithm, which cannot be 'decrypted' at all. only way is to make it collide with a right password (there maybe several right ones that generate same MD5 hash) and skype also uses double algorithms. only way is to bruteforce it, which is not really decrypting, decrypting is something that is done instantly if im correct about terms.

so if you want to recover stored skype password, then i don't think its even possible. unless you are able to get a pure MD5 hash (im not sure how exactly skype works), then you can hit it with rainbow tables or good wordlists, but again its cracking, not decrypting.

NOTE - i maybe wrong somewhere, cuz i have not done any research on skype on my own.


Top
 Profile  
 
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 3 posts ] 

All times are UTC [ DST ]


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for: