Wednesday, September 17, 2008

SwordFish - MS Access Password Recovery Tool

SwordFish is a free MS Access password recovery tool. Presently it can only recover passwords for MS Access 97/2003/XP on Windows XP/2000. This tool was wrote by the author nearly five years back but was never before publicly released. Althought there were no specific reason behind the late release however it is always better late than never. The tool can be downloaded here.

Friday, September 12, 2008

[Whitepaper] Defeating Virtual Keyboards

Around mid of year 2005 I was bit intrigued to write a proof-of-concept keylogger to capture texts emulated using virtual keyboards. The PoC keylogger was publicly released on 5th Aug, 2005 to demonstrate the hack for a particular banking site however the fact that remains same is any site which uses similar VK or OSK can be defeated. As you read this whitepaper, you’ll understand how this particular approach of defeating OSK and VK cannot be easily tricked unlike ordinary keyloggers. This paper was public released by Hakin9 magazine in their Nov, 2007 issue and as per the copyrights contract I am allowed to publish the free copy after six months of their release. Downlaod this whitepaper here.