Steam password decoder v0.2 (complete re-write)

[[myg0t]SourceX]

# 26 Feb 2008 Password_recovery: Steam password decoder 0.2
completely rewritten, multi-platform, easier to use and no longer DLL dependent (thanx to an anonymous)

http://aluigi.altervista.org/pwdrec.htm

Oldie but goodie was re-written, works great. This is kinda old news (3 weeks?) but sort of related in an off topic sort of way.

[royCe]

What good is a password decoder? Put on a cd and go to your buddies house and steal his steam ID? what are the other applications cuz I am interested lol

Edit... nvm I'm a moron - didn't see the recovery portion

[[myg0t]SourceX]

PM royCe ;)

[usedbeaten]

tut for this?

im stoopid :(

[[myg0t]SourceX]

tut for this?

im stoopid :(
if you download it and extract the exe, do this:

open a command prompt (cmd.exe) and CD (change directory) to where you extracted the executable. type the name of the exe and press enter, it shows you all the options.

[Malum]

what file is it decoding the passwords from?

[[myg0t]SourceX]

what file is it decoding the passwords from?
clientregistry.blob

[vmartin]

What is this for?

[[myg0t]SourceX]

What is this for?
Actually goto the site of the author which I linked to, there is a reason I didn't copy and paste everything on this thread.

[knobjockey]

you steal someones blob :D
decode it on your puter

[Malum]

Nice, it's easy to have someone send you their blob file. lol

[knobjockey]

google Remote administration tools

[UnevenUrinalFlow]

I have a few RAT's. They're open source so don't PM me on anything about them.

[brainscratch]

I have a few RAT's. They're open source so don't PM me on anything about them.

i've been out of the rat seen for a while, pm me some links :P

[Syntrax]

Error: wrong key (another computer?) or encrypted password

whts wrong?

[wannabe123]

Syntrax: Does the same for me. :)

[haloskinner]

You have to be on the same computer where the .blob is for the program to decrypt it I think,Or rat.

[Syntrax]

Well then theres nothing i can do with it u mean.. ?

[haloskinner]

If your on a diff pc then yes.

[Syntrax]

Whats the matter that it doesn't works now?

[NotDaed]

and can be decrypted only on the same
computer on which has been encrypted it since the key is calculated
using some values in the registry.

Aww. Would've been awesome if you could bruteforce other client.blob files or something.

[[myg0t]SourceX]

well that statement isn't really true. all you have to do is store those three values and report/copy them along with the password hash somewhere and then decode them on any computer you want.

if you've got any coding ability at all this can easily be made into an account stealer.

[Xzibit]

My friend miller coded his own steam account cracker which worked thanks to steam doing the work for him
all he said was if you know win shock and sql start at the steam community and u cna make a prog to crack them
then they put in captha or what ever its called and it doesent work so he is gonna code a proxy cracker

[SebentoX]

what excactly does this do?, will it somehowe give me a password to a steam account or wtf?? :S I dont get it :/

[D2XP]

you have to have the program on the computer u want the pass from tho right?

[[myg0t]SourceX]

you have to have the program on the computer u want the pass from tho right?
In its current form, yes.

[1234588]

Cool, great stuff for coders. Thank you for the Source.

[D2XP]

SourceX;16458']In its current form, yes.

So an updated, or possible future form, would be similar to a brute force program correct?

[[myg0t]SourceX]

If you have a ClientRegistry.blob file, you also need the values for the following three registry keys from the computer which you obtained ClientRegistry.blob:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\ProductId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography \MachineGuid
HKEY_CURRENT_USER\Software\Valve\Half-Life\Settings\io

If you have all three of those values + the file then you can decrypt the stored password on any computer using Luigi's re-written steampwd.

Here is just a quick modification I did for some for some of you, in this modified version of Luigi's program, all you need to do is run it from command-line or by double-clicking on it, it will then open a console window, and display the stored auto-login username from SteamAppData.vdf along with the stored decrypted password from ClientRegistry.blob.

http://myg0t.com/sx/bin/steampwd.exe

[satansonion]

SourceX;22339']If you have a ClientRegistry.blob file, you also need the values for the following three registry keys from the computer which you obtained ClientRegistry.blob:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\ProductId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography \MachineGuid
HKEY_CURRENT_USER\Software\Valve\Half-Life\Settings\io

If you have all three of those values + the file then you can decrypt the stored password on any computer using Luigi's re-written steampwd.

Here is just a quick modification I did for some for some of you, in this modified version of Luigi's program, all you need to do is run it from command-line or by double-clicking on it, it will then open a console window, and display the stored auto-login username from SteamAppData.vdf along with the stored decrypted password from ClientRegistry.blob.

http://myg0t.com/sx/bin/steampwd.exe

wow good thing i have great virus protection clicked on it immediatly told me about a trojan horse

[[myg0t]SourceX]

wow good thing i have great virus protection clicked on it immediatly told me about a trojan horse
I hope you're joking.

[[myg0t]SourceX]

File: steampwd.exe
Status:
POSSIBLY INFECTED/MALWARE (Note: this file was only classified as malware by scanners known to generate more false positives than the average scanner. Do not consider these results definately accurate. Also, because of this, results of this scan will not be recorded in the database.)
MD5: ff683aaac8e3be78e8f342c2b3cee54e
This was detected by AVAST as "Win32:Steam-E". Just another reason to get rid of all "anti-virus".

[NotDaed]

wow good thing i have great virus protection clicked on it immediatly told me about a trojan horse

Why are you on these forums? :rolleyes:

[satansonion]

SourceX;22371']I hope you're joking.

lol no no joke doesnt bother me though i am going my computer has been screwed up ever since i bought it so imma just reboot it

and im on these forms because i bought lifetime