Home > News > News details
Windows Password Recovery v13

Section menu

17.04.2024
Reset Windows Password v14.2
Telegram data recovery, Photo Database and Media Player investigation tools, and some more
12.04.2024
Office password recovery tools
Resetting VBA passwords
01.03.2024
New blog post
Dumping the history of users' IP addresses in Windows
20.02.2024
Reset Windows Password v14.1
IP addresses history viewer, fast disk search, local security editor and some more

Articles and video

You may find it helpful to read our articles on Windows security and password recovery examples. Video section contains a number of movies about our programs in action

Windows Password Recovery v13


Windows Password Recovery has been updated to version 13 that supports for domain cached credentials along with quite some changes:
 Password recovery for domain cached credentials. Now the program got two new recovery formats in addition to LM and NTLM: domain cached credentials type 1 and type 2. Both formats are used to store password hashes of domain users. Password decryption for DCC2 hashes is very slow (~50 000 times slower compared to NTLM hashes). You should always keep it in mind when recovering DCC2 hashes. Furthermore, DCC hashes are enforced with salt. It means that, unlike LM/NTLM hashes, the recovery speed for DCC is in inverse ratio to the number of hashes. So recovering 20 DCC2 hashes is already 1 000 000 times slower compared to 20 NTLM hashes. It's a little bit different with DCC1 hashes, however. The program uses some optimization tricks that help to improve the speed ratio when recovering multiple DCC1 hashes.
 Support for some new file formats when reading DCC hashes. The program now imports DCC hashes from Passcape *.peif files, Elcomsoft *.dcc projects, Cachedump files, John the Ripper textual files as well as from the raw Windows registry.
 The wordlist tools support for processing multiple files at once now. You can set a folder name as input to process all its files in a single operation. You can also use a file mask as an input.
 New rule ?r[C] in a hybrid dictionary syntax. Using this rule helps to filter out certain unnecessary words easily. For example, numerical or uppercase ones. Setting up this rule in conjunction with 'hex' (i.e. ?r[hex]) can be used to bypass hashes as input words. This feature was most requested by users who often needed to process and clean up their wordlists.
 Extracting plaintext passwords for domain cached credentials. On some systems, the program extracts some textual passwords of domain accounts instantly.
 Password reset for domain cached credentials.
 Brazilian Portuguese interface language. Thanks to Oliveira Anderson for the translation.
 The wordlist combining tool works a little bit faster when adding a huge list of files. Operation progress is displayed and all input files are checked against duplicates now.
 The wordlist tool for wiping out HTML tags now additionally converts hex-like passwords (like $HEX[313233]) into its textual representation.
 Some enhancements when accessing protected system folders on 64-bit OSes.
 Support for a new type of password encryption that was introduced in Google Chrome v80 as well as in other Chromium browsers. New versions of the Google Chrome encrypt passwords using the AES-256-GCM algorithm and a system-generated 32-byte random key protected with DPAPI. It affects the following program's features (this is where the new Chrome algorithm is used): Artificial Intelligence attack, the password indexation tool, hash import.
 Support for Lockwise password encryption when extracting passwords out of Mozilla-based applications like Firefox, SeaMonkey, K-Meleon, etc. The Lockwise password manager (on desktop, this is a part of Firefox 70+) has got new and enhanced protection based on AES-256 cipher and SHA-256 hash algorithms.
 New speed benchmarks.
 Some interface enhancements.
 Some enhancements when accessing protected system folders on 64-bit OSes.
 Update for French and Russian interfaces. Thanks to Laurent Debard for the update.
 The format for saving attack progress has been changed and is no longer compatible with previous versions of the program. It's strongly recommended to complete all current recovery tasks before upgrading.
 An error loading/saving sound events has been fixed.
 An error recovering SAM/AD passwords using AI has been fixed.
 Some Windows XP incompatibility problems have been fixed.


Open Windows Password Recovery homepage >>


RSS RSS channel

Date:
11:00:28 27.05.2020


 

Legend

New product or feature
New program feature, update, improvements
Modification, patch or bug report
Bug or error fix-up