Luigi Auriemma

aluigi.org (ARCHIVE-ONLY FORUM!)
It is currently 19 Jul 2012 13:45

All times are UTC [ DST ]





Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 9 posts ] 
Author Message
 Post subject: flashfxp?
PostPosted: 18 Jan 2009 19:53 

Joined: 16 Jan 2009 22:16
Posts: 19
What algorithm does flashfxp use to encrypt their stored passwords? It used to be by a simple xor + "yA36zA48dEhfrvghGRg57h5UlDv3" as the password but now this doesn't work with the newer versions, any ideas?


Top
 Profile  
 
 
 Post subject: Re: flashfxp?
PostPosted: 18 Jan 2009 22:42 

Joined: 13 Aug 2007 21:44
Posts: 4068
Location: http://aluigi.org
I have tried the beta 3.77 and the algorithm is still the same.
why you say it's changed? what exact tests have you made?

oh a note for who doesn't find sites.dat: "C:\Documents and Settings\All Users\Application Data\FlashFXP\3\Sites.dat" or "%APPDATA%\FlashFXP\3\Sites.dat"


Top
 Profile  
 
 Post subject: Re: flashfxp?
PostPosted: 18 Jan 2009 23:37 

Joined: 16 Jan 2009 22:16
Posts: 19
I have 3.77 and it doesn't work for me. Yes i know its stored at
C:\Documents and Settings\All Users\Application Data\FlashFXP\3
but it doesn't store the passwords in sites.dat any more, my version stores the passwords in quick.dat.

Here is a fake ftp attempt i entered into flashfxp for the sake of example.
Code:
IP=testftp.co.uk
port=21
user=test
pass=C60854FF47
options=30033330000330011030000100033330000010020
created=39831.6882242824
Proxy=0
ID=6F22779F

When i try to decode C60854FF47 with the same thing i have always used to decode flashfxp pws i get this as the outputted pw, "??xq", instead of test which is the password.


Top
 Profile  
 
 Post subject: Re: flashfxp?
PostPosted: 19 Jan 2009 01:21 

Joined: 13 Aug 2007 21:44
Posts: 4068
Location: http://aluigi.org
ah ok, I have just fixed it, thanx.
in short if the name of the entry (the one between []) contains the byte 0x03 it's used as key instead of the default one.


Top
 Profile  
 
 Post subject: Re: flashfxp?
PostPosted: 19 Jan 2009 01:40 

Joined: 16 Jan 2009 22:16
Posts: 19
Two questions then;
1.) So if the text in between [] was [39831.6882242824testftp.co.uk], then 39831.6882242824 would be the key?
2.) Would i have to change the decryption routine, or would it be the same thing as in when it uses "yA36zA48dEhfrvghGRg57h5UlDv3" ?


Top
 Profile  
 
 Post subject: Re: flashfxp?
PostPosted: 19 Jan 2009 03:45 

Joined: 13 Aug 2007 21:44
Posts: 4068
Location: http://aluigi.org
1) in your example the key is 39831.6882242824testftp.co.uk
2) the decryption routine is exactly the same


Top
 Profile  
 
 Post subject: Re: flashfxp?
PostPosted: 10 Jun 2009 18:03 

Joined: 30 Apr 2009 21:06
Posts: 22
hi aluigi ,

i'am asking how to get rid of the default ftp like Default Sites Game Sites Sega Games and Miscellaneous Sites Borland Delphi
and so on ..

Thanks


Top
 Profile  
 
 Post subject: Re: flashfxp?
PostPosted: 10 Jun 2009 18:59 

Joined: 13 Aug 2007 21:44
Posts: 4068
Location: http://aluigi.org
you should check if there are some differences between the default sites and those added by you (I don't have a sites.dat file to check here).
at the moment I don't remember if there were some fixed differences or similar.
anyway this question doesn't look new but I don't remember if the other time that I heard it I found or not a solution (guess not)


Top
 Profile  
 
 Post subject: Re: flashfxp?
PostPosted: 10 Jun 2009 21:13 

Joined: 30 Apr 2009 21:06
Posts: 22
ok i did a small tips now is ok

Thanks Aluigi


Top
 Profile  
 
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 9 posts ] 

All times are UTC [ DST ]


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for: