Author Archives: dsumin

Passware Kit 13.5 Now Runs on Linux, Decrypts Android 4.4 KitKat images, and Resets Windows Live ID Passwords

NEW IN PASSWARE KIT 13.5 Passware Kit Agent for Linux Mobile Forensics: password recovery for Android v.4.4 images (Forensic edition only) Instant reset of MS Windows Live ID passwords

Posted in Announcements, Passware | Tagged , , , , , , , , | 2 Responses

Passware Kit 13.3 Recovers User Passwords for Mac OS X 10.9 Mavericks, Adds GPU-accelerated Recovery of RAR v5 Passwords, And Decrypts QuickBooks for Mac Databases

NEW IN PASSWARE KIT 13.3 GPU-accelerated recovery of Mac OS X 10.9 Mavericks user passwords (Forensic edition only) GPU-accelerated password recovery for RAR v5 archives Instant decryption of QuickBooks for Mac databases GPU-accelerated recovery of iPhone and iPad iOS 7.x backup passwords (Enterprise and Forensic editions only) Mobile Forensics section (Forensic edition only)

Posted in Announcements, Passware | Tagged , , , , , , , , , , , , | Leave a comment

Passware Kit 13.1 Adds GPU-accelerated Recovery of FileVault2 Passwords, Recovers Passwords for Android Images, Decrypts QuickBooks & Quicken 2014, and Is Twice As Fast!

NEW IN PASSWARE KIT 13.1 GPU-accelerated password recovery for FileVault2 disks GPU-accelerated password recovery for Android physical images GPU performance: 2x faster Decryption of QuickBooks and Quicken 2014 databases

Posted in Announcements, Passware | Tagged , , , , , , | 2 Responses

Passware Kit 13.0 Introduces 64-bit Version, Recovers Android Backup Passwords, and Launches Passware Kit Forensic Lab Edition

NEW IN PASSWARE KIT 13.0 64-bit version Password recovery for Android backups Autosave history for all password recovery processes Windows password recovery: instant password reset for SBS and Windows Server 2013 Administrators, as well as support for 64-bit Windows Setup CDs Improved password recovery speed for MS Office 2007-2013 files and RAR archives Distributed password […]

Posted in Announcements, Passware | Tagged , , , , , | Leave a comment

Extracting Facebook passwords from memory image or hibernation file

Passware Kit 12.3 recovers passwords for Facebook, Gmail, and other websites by analyzing a memory image or a system hibernation file. Here is how it’s done. Launch Google Chrome browser on a target machine and open a new Incognito window (Ctrl+Shift+N). In Incognito mode Chrome does not save your passwords, but still they are present in […]

Posted in How To, Passware | Tagged , , , , , | 3 Responses

Passware Kit 12.3 Extracts Facebook, Google Passwords from Computer Memory; Improves ATI Acceleration and Distributed Password Recovery

Passware

NEW IN PASSWARE KIT 12.3 Extraction of Facebook, Google, and other websites’ passwords from live memory or hibernation files Hardware acceleration: the latest ATI cards (AMD Radeon 7 series) supported Distributed password recovery now with custom dictionaries Portable rainbow tables for instant offline decryption of Word and Excel files up to v.2003 now for sale […]

Posted in Announcements, Passware | Tagged , , | Leave a comment

Passware Kit 12.1 Accelerates Password Recovery for MS Office 2013 and PGP, Supports QuickBooks 2013 and FileMaker 12

NEW IN PASSWARE KIT 12.1 Hardware accelerated password recovery for MS Office v.2013 files GPU acceleration added for PGP password recovery Instant decryption of QuickBooks v.2013 databases Instant decryption of FileMaker v.12 databases Password recovery for Adobe Acrobat X, XI documents Password recovery for RAR v.4 archives Password recovery for Mac OS 10.8 users Instant […]

Posted in Announcements, Passware | Leave a comment

Instant extraction of Windows login passwords from Hibernation file or memory image

Windows stores account passwords for all the logged-in users in memory. This holds true for Windows XP through Windows 8. Passwords are encrypted and are not visible in plain text, but there is still a way to identify and decrypt those passwords. When a computer hibernates, Windows writes all the physical RAM memory contents to […]

Posted in How To, Passware, Tips | Tagged , , | 1 Response

On cracking Mac OS X Lion accounts passwords

Mac OS X Lion stores salted SHA512 hashes of user accounts passwords. NOTE: if a memory image of a target computer is available, Mac OS X login passwords could be recovered instantly. Password hashes are stored in /private/var/db/dslocal/nodes/Default/users/<username>.plist files.

Posted in How To, Passware, Tips | Tagged , , , | 6 Responses

How effective are your password recovery settings?

Improving password recovery success rates Limited time and resources are usually the two biggest constraints for password recovery. A live memory image could contain encryption keys and passwords, but what are the options if there is no such image available? There are two important metrics for measuring effectiveness of password recovery: success rate and time […]

Posted in How To, Passware, Tips | 2 Responses