How to Recover Saved Passwords from Browsers, RDP, VNC, Network Shares, Outlook, IM, and More
This script simply silently runs the most useful password recovery tools from www.nirsoft.net. The password recovery tools from nirsoft.net are highly valuable to anyone that has either forgotten their passwords, or wants to steal someone else's passwords. The list of passwords it can recover is very lengthy, and listed entirely at the bottom of this article. (You should only use these tools on your own computer. Never use them to recover passwords of a computer you don't have permission to do so on.)
A few of the applications this script will recover passwords from are: Chrome, FireFox, Opera, Internet Explorer, Windows Shares/Network, MSN Messenger, Yahoo Messenger, GAIM, Outlook, Wireless Passwords, RDP (Remote Desktop Protocol saved passwords), and VNC.
The easiest way to run this script is to place all of the files on the root of a USB flash drive, then simply double click on the NirsoftRecoverAll.bat file. It only takes about 1 - 3 seconds to finish the script and compile a csv file with all the passwords it finds. The main advantage to using this script is speed. Simply plug the flash drive in, double click on the batch file, wait about 5 seconds, then unplug the flash drive. That's it! All the stored passwords are now saved on your flash drive. This speed makes it easy to walk over to your neighbors computer while they are in the restroom, run the script, and analyze the recovered passwords later (but don't ever do that).
To begin, download the password recovery tools from nirsoft. Extract them to the root of the USB flash drive:
Now download our script that silently runs most of the password recovery tools and exports all of the data into a list:
Simply connect the flash drive to the computer that you are trying to recover (or steal) the passwords from and double click on the NirsoftRecoverAll.bat file. It will only take a few seconds, then remove the flash drive. A txt file with the name of the application ran is created for each application. The txt file contains any passwords the application recovered. If you run the script again, these txt files will be overwritten. When you run the script, a file named Master_Password_list.csv is also created. It contains all of the recovered passwords from each of the applications. It also includes the time and date the script was ran. If you run the script again, this file will be appended with the latest results, not overwritten.
If you find any of these password recovery tools useful, please consider making a donation to the NirSoft.net developer here.
Here is a list of the applications ran, and the passwords they can recover:
- MessenPass - Recovers the passwords of most popular Instant Messenger programs in Windows: MSN Messenger, Windows Messenger, Windows Live Messenger, Yahoo Messenger, ICQ Lite 4.x/2003, AOL Instant Messenger provided with Netscape 7, Trillian, Miranda, and GAIM.
- Mail PassView - Recovers the passwords of the following email programs: Windows Live Mail, Windows Mail, Outlook Express, Microsoft Outlook 2000 (POP3 and SMTP Accounts only), Microsoft Outlook 2002/2003 (POP3, IMAP, HTTP and SMTP Accounts), IncrediMail, Eudora, Netscape Mail, Mozilla Thunderbird,
Mail PassView can also recover the passwords of Web-based email accounts (HotMail, Yahoo!, Gmail), if you use the associated programs of these accounts.
IE PassView - IE PassView is a small utility that reveals the passwords stored by Internet Explorer browser. It supports the new Internet Explorer 7.0 and 8.0, as well as older versions of Internet explorer, v4.0 - v6.0
Protected Storage PassView - Recovers all passwords stored inside the Windows Protected Storage, including the AutoComplete passwords of Internet Explorer, passwords of Password-protected sites, MSN Explorer Passwords, and more...
Dialupass - Password recovery tool that reveals all passwords stored in dial-up entries of Windows. (Internet and VPN connections) This tool works in all versions of Windows, including Windows 2000, Windows XP, Windows Vista, Windows 7, and Windows Server 2003/2008.
Network Password Recovery - Recover network shares passwords stored by Windows XP, Windows Vista, Windows 7, and Windows Server 2003/2008.
PasswordFox - PasswordFox is a small password recovery tool for Windows that allows you to view the user names and passwords stored by Mozilla Firefox Web browser. By default, PasswordFox displays the passwords stored in your current profile, but you can easily select to watch the passwords of any other Firefox profile. For each password entry, the following information is displayed: Record Index, Web Site, User Name, Password, User Name Field, Password Field, and the Signons filename.
ChromePass - ChromePass is a small password recovery tool for Windows that allows you to view the user names and passwords stored by Google Chrome Web browser. For each password entry, the following information is displayed: Origin URL, Action URL, User Name Field, Password Field, User Name, Password, and Created Time. You can select one or more items and then save them into text/html/xml file or copy them to the clipboard.
OperaPassView - OperaPassView is a small password recovery tool that decrypts the content of the Opera Web browser password file (wand.dat) and displays the list of all Web site passwords stored in this file. You can easily select one or more passwords in the OperaPassView window, and then copy the passwords list to the clipboard and save it into text/html/csv/xml file.
WebBrowserPassView - WebBrowserPassView is a password recovery tool that reveals the passwords stored by the following Web browsers: Internet Explorer (Version 4.0 - 8.0), Mozilla Firefox (All Versions), Google Chrome, and Opera. This tool can be used to recover your lost/forgotten password of any Website, including popular Web sites, like Facebook, Yahoo, Google, and GMail, as long as the password is stored by your Web Browser. After retrieving your lost passwords, you can save them into text/html/csv/xml file, by using the 'Save Selected Items' option (Ctrl+S).
WirelessKeyView - WirelessKeyView recovers all wireless network keys (WEP/WPA) stored in your computer by the 'Wireless Zero Configuration' service of Windows XP and by the 'WLAN AutoConfig' service of Windows 7 and Windows Vista. It allows you to easily save all keys to text/html/xml file, or copy a single key to the clipboard.
Remote Desktop PassView - Remote Desktop PassView is a small utility that reveals the password stored by Microsoft Remote Desktop Connection utility inside the .rdp files.
VNCPassView - VNCPassView is a small Windows utility that recover the passwords stored by the VNC tool. It can recover 2 of passwords: password stored for the current logged-on user (HKEY_CURRENT_USER in the Registry), and password stored for the all users.