| |
| |
| |
 |
|
|
|
| |
| |
| |
|
|
| |
| |
|
|
| |
| |
| |
|
|
|
| |
| |
|
|
XfirePasswordDecryptor is the FREE software to instantly recover
login passwords from Xfire. Xfire is a free tool that automatically
keeps track of when and where gamers are playing
games online with
more than million members. Xfire eliminates the hassles of running
multiple programs like IRC, instant messengers to keep track of
their friends. XfirePasswordDecryptor helps in quickly recovering
all the stored passwords by Xfire. |
|
 |
|
|
|
|
Penetration Testers can also use it to recover Xfire login passwords. You
can copy the configuration file (Xfireuser.ini) from the compromised
system to local system and then use it to recover all the passwords
at your ease. Also Forensic Investigators can find it handy to
recover all the login accounts from the victim system.
XfirePasswordDecryptor comes with installer which helps in local
installation & un-installation of the software. It works on most of
the Windows platforms starting from Windows XP to latest operating
system, Windows 7. |
| |
| |
| |
|
| Here are the highlights of top features of XfirePasswordDecryptor |
- Instantly decrypt and recover stored login passwords from
Xfire.
- Recover passwords from local as well as remote system.
- Recover password of any length and
complexity.
- Save the recovered password list to HTML file for transferring to other system or for
future use.
- Easier and faster to use with its user
friendly cool GUI interface.
- Support for local Installation and uninstallation of the
software.
|
| |
| |
|
| XfirePasswordDecryptor comes with
Installer which helps in local installation & uninstallation of the
software. It has intuitive setup wizard (as shown in the screenshot below) which
guides you through series of steps in completion of installation. At any
point of time you can use Uninstaller to remove the software from the
system. |
| |
 |
| |
| |
| |
|
XfirePasswordDecryptor is easy to use with its simple GUI interface.
Here are the brief usage details
|
- Launch XfirePasswordDecryptor on your system after
the installation.
- Select the 'Xfire Settings' file (XfireUser.ini).
Typically found at 'C:\Users\Administrator\AppData\Roaming\Xfire'.
(Vista/Win7)
- Next click on 'Start Recovery'
button. Instantly all the stored Xfire passwords will be recovered & displayed as shown in screenshot 1
below.
- Finally you can save all recovered password list to
HTML
file by clicking on 'Save to HTML'
button.
|
|
|
You can also copy the Xfire settings file (XfireUser.ini) file from remote system to your local
system and then use XfirePasswordDecryptor to recover the
passwords at your ease.
Note that Xfire stores only SHA1 hash of
the password instead of original password. Hence to recover original
password, you need to follow 'SHA1 Hash Recovery' methods mentioned
below. |
|
|
|
|
|
|
|
Xfire does not store the password directly. Instead it stores
the encrypted SHA1 hash (enc(SHA1(password))) of the password to
keep it more secure. In fact Xfire computes SHA1 hash of
username+password+"UltimateArena" [ i.e
SHA1(<username><password>UltimateArena) ].
XfirePasswordDecryptor decrypts the encryption layer around the
password hash and gives you SHA1 hash of the password. Now to
get back the original password from this recovered SHA1 hash you
can use following techniques
|
|
|
|
|
|
Here are some of good links for FREE online SHA1 hash password
recovery. You can submit recovered SHA1 hash from
XfirePasswordDecryptor and get the original password |
|
|
|
|
|
|
|
As the original hash input text is very long
(username+password+UltimateArena), it is difficult to get
recover the password from above Online Hash recovery technique.
In such cases you can try out dictionary/brute-force SHA1
cracking feature of
'Cain & Abel' tool.> |
|
|
|
|
|
|
If you can play with scripts then you can tweak this
"SHA1 Cracker
script" to try out custom Xfire password recovery operation
(username+password+UltimateArena). If you have succeeded then you can
publish your script here so that others find it userful.
|
|
|
|
|
|
|
|
| Here are the screenshots of
XfirePasswordDecryptor |
| |
| Screenshot 1: XfirePasswordDecryptor is showing the
recovered Xfire login passwords. |
| |
 |
| |
| |
| Screenshot 2: Exported list of of recovered
Xfire passwords by
XfirePasswordDecryptor in HTML format. |
| |
 |
| |
| |
| |
|
| First public release of XfirePasswordDecryptor |
| |
| |
|
| |
|
| Special Thanks to
"Luigi Auriemma" fo for his original work on XFire password
decryption. We have just made it more beautiful for all
those Xfire fans! |
| |
| |
| |
|
XfirePasswordDecryptor is not a hacking tool as it can recover only
your stored passwords. It cannot recover the passwords for other users
unless you have right credentials.
Like any tool its use either good or
bad, depends upon the user who uses it. However Author or
SecurityXploded is not
responsible for any damage caused due to misuse of this tool.
Read complete License & Disclaimer terms
here. |
| |
| |
| |
|
| |
|
|
| |
| |
| |
| |
|
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
