SecurityXploded by Nagareshwar Talekar

HOME TOOLS ARTICLES RESEARCH DOWNLOAD BLOG ABOUT

Book of the Month

Written by the experts this book is highly recommended for any one involved in the web security. Book of the month list.

Latest Stuff

Updated IEPasswordDecryptor

ChromePasswordDecryptor 1.6 with enhanced interface

Published article on remote thread execution using NtCreateThreadEx

NetworkPasswordDecryptor updated to fix Win7 problem

Article on retrieving windows default password

Top Tools

FirePasswordViewer

SpyDLLRemover

ChromePasswordDecryptor

GooglePasswordDecryptor

FirePassword

FireMaster

BHORemover

IEPasswordDecryptor

ProcNetMonitor

VistaUACMaker

About Google Chrome and its Password Manager

Google Chrome browser is the latest entry into the ongoing web browser's war which is mainly ruled by IE and Firefox. The word Google behind the Chrome has given it lot of hype and popularity than any other browser got in such a short duration. However some of the salient features such as searching from the same address bar, thumbnails of top sites, private browsing etc makes it stand apart from other browsers in the market.

Like other browsers Chrome also has built-in login password manager functionality which keeps track of the login secrets of all visited websites. Whenever user logins to any website, he/she will be prompted to save the credentials for later use and if user chooses so, then the username & passwords will be stored in internal login database. So next time onwards whenever user visits that website, he/she will be automatically logged in using these stored credentials which saves hassle of entering the credentials every time.

The newer version comes with enhanced user interface with cool buttons and additional export options.

Recovering Chrome Passwords using ChromePasswordDecryptor

ChromePasswordDecryptor tool makes it easy to decrypt or recover the login secrets stored by Chrome. It automatically detect the default chrome profile path for the current user and displays all the stored login credentials in clear text after decrypting them. It also shows all the blacklisted website entries for which user has prompted Chrome to not to remember the passwords.

Another useful feature of this tool is the Export option which can be used to save the login secrets to the local file in standard HTML format. This will be very useful in following cases

To take backup of the login secrets for the stored websites
To transfer the secrets from one system to another.
To store the website passwords at more secured centralized location
To recover the passwords in case Chrome becomes not accessible or non functional.

Internals of ChromePasswordDecryptor

Chrome stores all the sign-on secrets into the internal database file called 'Web data' in the current user profile folder. This database file is in SQLite format and contains number of tables storing different kind of data such as auto complete, search keyword, ie7logins etc in addition to login secrets.

The logins table mainly contains the information about sign-on secrets such as website URL, username, password fields etc. All this information is stored in the clear text except passwords which are in encrypted format.

ChromePasswordDecryptor loads the secrets from logins table and then decrypts the password for each of the websites stored by Chrome.

For more information on decrypting the passwords from Chrome database file, read the following research article,

'Exposing the Secrets of Google Chrome'

Using ChromePasswordDecryptor

ChromePasswordDecryptor is standalone application which does not require any installation and can be directly executed after copying to local system.

Launch the ChromePasswordDecryptor on the system.
By default it will automatically display the default chrome profile path for current user. However you can change the path using the 'browse' button besides it.
Then you can click on 'Start Recovery' button to decrypt and display all the stored login secrets from Chrome as shown in the Screenshot 1 below.
Next you can click on 'Export to HTML' or 'Export to Text' button to save all the secrets to standard HTML or TEXT file.

ChromePasswordDecryptor in Action

Here are the screenshots of ChromePasswordDecryptor showing it in action...

Screenshot 1: ChromePasswordDecryptor showing the blacklisted websites and decrypted passwords from the Chrome store.

ChromePasswordDecryptor showing the Chrome Secrets

Screenshot 2: Exported Chrome secrets in standard HTML format by ChromePasswordDecryptor

ChromePasswordDecrytor showing the saved sign-on html reprot

History

Version 1.6 : 2nd Mar 2010

Enhanced user interface with cool buttons and additional export options to save to password list to text file.

Version 1.5 : 11th Jan 2010

Support for Windows 7. Fixed the problem with database file being locked while Chrome is running.

Version 1.0.1 : 12th July 2009

First public release of ChromePasswordDecryptor featuring the recovery of login secrets stored by Chrome and Export option to save the credentials to file.

Download ChromePasswordDecryptor

FREE Download ChromePasswordDecryptor 1.6

License : Freeware
Platform : Windows XP, 2003, Vista, Win7

Download