Windows Password
How do you get the local user's password in windows? I've seen face recognition software do it when you want to make a new face model. So how do you use it?
You can't. This would be a major security flaw. Image if I could run a simple script on your computer and it would tell me your password. That would never fly.
What do you mean you can't? You certainly COULD and CAN. There's a security flaw in everything if you look and work hard enough.
But Tresky is correct in the fact you cannot get the password, due to it not being retained, it's used and discarded. But if you want to implement some sort of 'single signon' system as Novell does, you should do it via either a GINA (pre-Vista) or a Credential Provider (Vista), which will result in your code being given the username and password at login, the only time at which the password is available.
Other then that you'd have to extract the encrypted password from registry and crack it via rainbow tables (See http://lasec.epfl.ch/~oechslin/projects/ophcrack/ ) but it's too resource heavy in it's current state.
Eidt: Facial Recognition progams such as this one (http://www.guidingtech.com/27989/face-recognition-windows/ ) asks the user to provide the program with the password for it to plug into windows for you. It doesn't fetch the password from windows, it simply plugs it in for you.
But Tresky is correct in the fact you cannot get the password, due to it not being retained, it's used and discarded. But if you want to implement some sort of 'single signon' system as Novell does, you should do it via either a GINA (pre-Vista) or a Credential Provider (Vista), which will result in your code being given the username and password at login, the only time at which the password is available.
Other then that you'd have to extract the encrypted password from registry and crack it via rainbow tables (See http://lasec.epfl.ch/~oechslin/projects/ophcrack/ ) but it's too resource heavy in it's current state.
Eidt: Facial Recognition progams such as this one (http://www.guidingtech.com/27989/face-recognition-windows/ ) asks the user to provide the program with the password for it to plug into windows for you. It doesn't fetch the password from windows, it simply plugs it in for you.
Last edited on
What do you mean you can't? You certainly COULD and CAN. There's a security flaw in everything if you look and work hard enough. But Tresky is correct in the fact you cannot get the password. |
lol.
Topic archived. No new replies allowed.