Luigi Auriemma

aluigi.org (ARCHIVE-ONLY FORUM!)
It is currently 19 Jul 2012 14:53

All times are UTC [ DST ]





Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 9 posts ] 
Author Message
 Post subject: Xfire password recovery Delphi.
PostPosted: 13 Jul 2009 01:31 

Joined: 19 Apr 2009 23:01
Posts: 13
hi aluigi,

I didnt see an explanation of how your Xfirepwd.exe program works

i have two questions:
1) how can i use it?
2) what are the features of the decryption if i want to convert it to delphi


Top
 Profile  
 
 
 Post subject: Re: Xfire password recovery Delphi.
PostPosted: 13 Jul 2009 09:54 

Joined: 13 Aug 2007 21:44
Posts: 4068
Location: http://aluigi.org
1)
you can:
- drag your XfireUser.ini file over the xfirepwd.exe file and it will be automatically parsed and each string containing "encrypted" or "EPW" (the only encrypted strings and password as far as I know) will be automatically decrypted and showed on the screen
- from the command-line you can type directly the password to decrypt as argument: xfirepwd.exe

2)
the decryption is trivial:
- convert the input hex string to bytes (for example "010002" to 3 bytes 0x01 0x00 0x02)
- take each 32bit value in the sequence of bytes and invert its order so if you have "0x01 0x02 0x03 0x04 0x05 0x06 0x07 0x08" it will become "0x04 0x03 0x02 0x01 0x08 0x07 0x06 0x05"
- decrypt it with blowfish using the key "05c58aa143ecd48889d9fba58069ec54" and a keysize of 33
- re-perform the previous "order inverting"


Top
 Profile  
 
 Post subject: Re: Xfire password recovery Delphi.
PostPosted: 19 Nov 2009 20:14 

Joined: 19 Nov 2009 02:12
Posts: 2
I can't seem to get this work, I drag the XfireUser.ini over the xfirepwd file, but the EPW is just a long list of numbers and letters. Why is this? Thanks


Top
 Profile  
 
 Post subject: Re: Xfire password recovery Delphi.
PostPosted: 19 Nov 2009 21:30 

Joined: 13 Aug 2007 21:44
Posts: 4068
Location: http://aluigi.org
if I'm not in error EPW is the hash of the password or something else, I don't remember exactly but it's enough that you check the length of the string if changes if you change the length of your pass.


Top
 Profile  
 
 Post subject: Re: Xfire password recovery Delphi.
PostPosted: 19 Apr 2010 19:24 

Joined: 19 Apr 2010 18:32
Posts: 2
hello
does this tool decrypt the xfire account password or does it decrypt the game accounts saved by xfire or both?

in my case it seemed to decrypt my bf2 account data username and pw but not my xfire password


is it possible to decrypt the xfire login password to?

my output:
Code:
Xfire password decrypter 0.1
by Luigi Auriemma
e-mail: aluigi@autistici.org
web:    aluigi.org

  EncryptedLastLogin   myxfirelogin
  EncryptedUser1       myxfirelogin
  EPW1                 ***942b0359ab61dbc0863db1523ad384f******
  EncryptedAccountLoginUsername myBF2login
  EncryptedAccountLoginPassword myBF2password
 

press RETURN to exit


thx in advance


Top
 Profile  
 
 Post subject: Re: Xfire password recovery Delphi.
PostPosted: 19 Apr 2010 20:00 

Joined: 13 Aug 2007 21:44
Posts: 4068
Location: http://aluigi.org
the EPW1 is already decrypted by xfirepwd but it's an hash of the password, Xfire doesn't save the password in clear-text


Top
 Profile  
 
 Post subject: Re: Xfire password recovery Delphi.
PostPosted: 19 Apr 2010 20:07 

Joined: 24 Sep 2007 02:12
Posts: 1114
Location: http://sethioz.co.uk
EPW1 ? looks like MD5 to me, is it ?


Top
 Profile  
 
 Post subject: Re: Xfire password recovery Delphi.
PostPosted: 19 Apr 2010 20:09 

Joined: 13 Aug 2007 21:44
Posts: 4068
Location: http://aluigi.org
40 hex chars = 20 bytes = sha1 (probably)


Top
 Profile  
 
 Post subject: Re: Xfire password recovery Delphi.
PostPosted: 19 Apr 2010 22:33 

Joined: 19 Apr 2010 18:32
Posts: 2
thank you for clearing this up and sharing all this knowledge



gn8


Top
 Profile  
 
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 9 posts ] 

All times are UTC [ DST ]


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for: