Esato

Forum > Sony Ericsson / Sony > General > C902 Cache Password Hack

Author C902 Cache Password Hack
calissons
Model not set
Joined: Sep 23, 2009
Posts: 9
PM
Posted: 2009-09-23 15:28
Reply with quoteEdit/Delete This PostPrint this post
Hello,
I was wondering if anyone knows how to access the WAP Cache files in a SE C902 and extract Passwords from saved webpages.
As I have couple of passwords saved on my C902 on different websites and wanted to know how can I get into the cache files copy them to my pc and decrypt the passwords. Is it possible using A2 Uploader? Won't it rest my C902 if I use it?

Thanks for the help.
StevenC
W910 Black
Joined: Aug 23, 2008
Posts: > 500
From: NY
PM
Posted: 2009-09-24 09:20
Reply with quoteEdit/Delete This PostPrint this post
If those password are yours, why the hell do you need to decrypt?
calissons
Model not set
Joined: Sep 23, 2009
Posts: 9
PM
Posted: 2009-09-24 15:29
Reply with quoteEdit/Delete This PostPrint this post
I lost the passwords and need them back.
You think there is a possible way?
I asked SE directly they said there is no option to view the passwords.
But am sure they must be stored somewhere...
StevenC
W910 Black
Joined: Aug 23, 2008
Posts: > 500
From: NY
PM
Posted: 2009-09-24 15:41
Reply with quoteEdit/Delete This PostPrint this post
If you really own those accounts, why don't you use 'forgot my password' to change the old passwords.
centur
C902 Black
Joined: Jun 10, 2007
Posts: > 500
From: Bulgaria
PM, WWW
Posted: 2009-09-24 23:08
Reply with quoteEdit/Delete This PostPrint this post

On 2009-09-23 15:28:43, calissons wrote:
Hello,
I was wondering if anyone knows how to access the WAP Cache files in a SE C902 and extract Passwords from saved webpages.
As I have couple of passwords saved on my C902 on different websites and wanted to know how can I get into the cache files copy them to my pc and decrypt the passwords. Is it possible using A2 Uploader? Won't it rest my C902 if I use it?

Thanks for the help.


TPA > SYSTEM > WAP > CACHE > cache.fat
Last file have all saved passwords, domains...
fluke9
Samsung Galaxy S III
Joined: Oct 31, 2006
Posts: 461
From: Sarf Lundun UK
PM
Posted: 2009-09-25 04:06
Reply with quoteEdit/Delete This PostPrint this post

On 2009-09-24 15:41:53, StevenC wrote:
If you really own those accounts, why don't you use 'forgot my password' to change the old passwords.


Dodgy Why would you need to extract your own passwords.
[ This Message was edited by: fluke9 on 2009-09-25 03:07 ]
calissons
Model not set
Joined: Sep 23, 2009
Posts: 9
PM
Posted: 2009-09-28 21:07
Reply with quoteEdit/Delete This PostPrint this post
Heyy!! Thanks for the help!!
i found the file you are talking about, but i also found another file:

TPA > SYSTEM > WAP > Cookies.bin
That is the only file where I found my emails and something that looks like a saved encrypted password.
Looking like this:

MYEMAILADDRESS%40gmail.com%3A512984255%3AmgRQKbKpS3cQ61hr

So apparently i need to decrypt that last part of it... but how to ?

Thanks again.
fluke9
Samsung Galaxy S III
Joined: Oct 31, 2006
Posts: 461
From: Sarf Lundun UK
PM
Posted: 2009-09-29 05:34
Reply with quoteEdit/Delete This PostPrint this post
Why do you want to decrypt your own password.

Just get it reset, problem solved, or maybe there is another reason ?????????????????????
calissons
Model not set
Joined: Sep 23, 2009
Posts: 9
PM
Posted: 2009-09-30 00:21
Reply with quoteEdit/Delete This PostPrint this post
The email address password I need is my own university pass you could check it online at www.usj.edu.lb.
Only problem no password reset are allowed (check it directly on the page http://mail.usj.edu.lb/) without passing thru our sections IT team that will charge every student arround 60 000 LBP (40$) for the password reset. So why pay for something I already have knowing that during my first year I already had the same problem ??!
Now I know I have the pass right in front of me only problem it's encrypted...
centur
C902 Black
Joined: Jun 10, 2007
Posts: > 500
From: Bulgaria
PM, WWW
Posted: 2009-09-30 18:38
Reply with quoteEdit/Delete This PostPrint this post

On 2009-09-28 21:07:52, calissons wrote:
Heyy!! Thanks for the help!!
i found the file you are talking about, but i also found another file:

TPA > SYSTEM > WAP > Cookies.bin
That is the only file where I found my emails and something that looks like a saved encrypted password.
Looking like this:

MYEMAILADDRESS%40gmail.com%3A512984255%3AmgRQKbKpS3cQ61hr

So apparently i need to decrypt that last part of it... but how to ?

Thanks again.


The problem is Gmail use SSL encryption and I try to see my password (on my Gmail), but cann't.
calissons
Model not set
Joined: Sep 23, 2009
Posts: 9
PM
Posted: 2009-10-08 20:21
Reply with quoteEdit/Delete This PostPrint this post
FOUND!!!

The file we are looking for is: TPA > SYSTEM > WAP > Authentication.bin
Contains saved passwords uncrypted.

Thanks for the help y'all!!
Access the forum with a mobile phone via esato.mobi