How to Recover Saved Passwords in EmFTP

How to Recover Saved Passwords in EmFTP
September 20, 2019
in Password Recovery, Password Secrets
No Comments
1013

This research article exposes the password secrets of EmFTP application. It shows all interesting details including where all your FTP passwords are stored, how it is stored and how to recover it automatically.

EmFTP Password Secrets

EmFTP stores all your FTP login passwords at following registry location

HKEY_CURRENT_USER\Software\Emurasoft\Emftp\Config

Below this Registry location, seperate registry key is created for each FTP server configuration.

Here is the sample of exported Registry entry for ftp.xenarmor.com,

[HKEY_CURRENT_USER\Software\Emurasoft\Emftp\Config\ftp.xenarmor.com]
"RegVersion"=dword:00000001
(Note: data below is truncated)
"Cust"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,66,74,70,2e,73,65,63,75,72,69,74,79,\
  2e,63,6f,6d,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,8c,00,00,00,01,02,00,00,02,66,00,00,00,a4,00,00,95,de,74,a0,77,8d,\
  06,02,78,1d,c9,81,2e,04,15,92,90,8f,13,07,5c,28,b8,3a,6b,a8,ba,83,b2,44,1f,\
  b8,09,7e,ba,04,d6,73,19,7e,7d,6a,45,59,b7,69,47,52,0b,7f,94,a8,6f,cf,04,da,\
  df,75,2a,11,3a,47,98,da,16,a0,1f,a6,d1,49,a0,b9,7f,7b,1a,88,b4,8d,3c,ca,99,\
  f0,08,d9,8c,08,93,66,a4,a1,53,17,bb,ea,1d,9b,2c,6d,c4,4b,f9,92,46,dc,73,11,\
  fa,7e,01,30,5d,f9,f7,d0,51,11,f5,a0,a3,bc,3d,e4,52,0f,b8,af,d1,1e,14,04,7e,\
  f5,a6,e7,3f,8a,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00
"NotDeleteArray"=hex(7):2e,00,2a,00,00,00,63,00,67,00,69,00,2d,00,62,00,69,00,\
  6e,00,00,00,00,00
"PermissionTypeArray"=hex(7):63,00,67,00,69,00,00,00,00,00

Here “Cust” registry value contains FTP server, username & encrypted password in binary format.

EmFTP encrypts the FTP password using RC2 algorithm with unique key. This key is stored in above “Cust” registry value itself.

How to Recover EmFTP Passwords Automatically

Here is simple way to recover all your EmFTP passwords without worrying about where it is stored and how to decrypt it.

You can use our FTP Password Recovery Pro software to instantly & easily recover all your saved FTP login passwords from EmFTP as shown in video below,

Here are the simple steps to recover all your saved passwords,

  • Step 1: Download & Install FTP Password Recovery Pro from here
  • Step 2: Next launch the software on your computer
  • Step 3: It will automatically discover, decrypt and display all the saved FTP passwords as shown below
It can also recover FTP passwords from custom profile locations, portable FTP clients & external drives

For more details, please refer to Online User Guide

 

Hope this article has helped you to understand password secrets of EmFTP. Please comment below on what do you think or if you have any queries.

 

 


Recommended Posts

Leave a Reply

Your email address will not be published. Required fields are marked *