» Account

Enumerate MSN user accounts with MSNRecover

carrumba — Sun, 21 Feb 2010 21:01:41 +0000


Tool name :	MSNRecover version 0.1

Description :	MSNRecover searches inside the Microsoft Credential management system for MSN authentication data. If such an entry was found targetname, comments, username and password are printed on the display.

Tested on :	Windows XP

Feedback :	In case you encounter any problems with the tool, you have suggestions to improve it, or you tested it with a Windows version i’ve not yet tested please drop me an email.

Downloads :	Binary \| Source

New version of the Firefox account data extractor available for download

carrumba — Fri, 29 Jan 2010 00:01:34 +0000

As I already announced in the morning an updated version of the FFPasswordRecovery tool is available tonight. So here it is.
I reorganised the code a little and added the SQLite support that was integrated into FireFox lately. You can download both the binary version if you don’t want to compile it yourself or the sourcecode (SQLite lib and headers included).

You find the files here.

Open proxy server

carrumba — Mon, 06 Apr 2009 13:02:14 +0000

About one year ago I coded a simple HTTP proxy server with the objective to propagate my own proxy server among the anonymizing proxy server providers to analyze the traffic coming from their network. I hoped collecting account information that way. They didn’t disappoint me.

Yesterday I’ve stumbled uppon this small PERL script again and decided to give it another try. I’ve integrated a blacklist feature to block traffic to specific sites and started it. In the morning after eight hours I checked the logfile and analyzed the content.

About 90% is forum/blog spam, the rest of the traffic contains proxy server checks, bruteforce login attempts, search engine requests and also regular user traffic.
An other side effect was a short spam flood that kept akismet busy a little.

I will tinker with the proxy script a little and release the code somewhen this week.