How to Recover Saved Passwords in Tencent QQ browser

XenEditor — Sun, 22 Sep 2019 08:42:56 +0000

This research article shows you all password secrets of Tencent QQ browser including where all your website passwords are stored, how it is stored and how to recover it automatically. QQ Browser Password Secrets QQ browser stores all your website login passwords in the “EncryptedStorage” file at following location [Windows Vista/7/8/10] C:\Users\[user_name]\AppData\Local\Tencent\QQBrowser\User Data\Default\ [Windows XP/2003] C:\Documents and Settings\[user_name]\Local Settings\Application Data\Tencent\QQBrowser\User Data\Default\ This “EncryptedStorage” file is stored in SQLite database format. It contains database table called “entries” where each website login details are stored. Here are some of the interesting fields stored in this table, str1 - main link of the website str3 - login link of the website str2 - username used for login blob0 - password used for login (encrypted) date - date when it is stored Here str3, str2 and blob0 refers to website login link, username and encrypted password respectively. QQ browser encrypts the website password using Windows DPAPI (Data Protection API) functions. These DPAPI functions perform encryption of password using user and machine specific data. As a result encrypted password cannot be decrypted by another user or another computer. Hence QQ browser password recovery has to be performed on the same computer as same user. How to Decrypt QQ Browser Passwords QQ uses Windows DPAPI function, CryptProtectData to encrypt the website password. We can decrypt this password using the function called CryptUnprotectData. Here is the sample C++ program to decrypt the website passwords from QQ browser. void DecryptPassword(char *passData, int passLen, char *password, int length) { DATA_BLOB DataPassword; DATA_BLOB DataOutput; DataPassword.cbData = passLen; DataPassword.pbData = (BYTE *) passData; if( CryptUnprotectData(&DataPassword, NULL, 0, 0, 0, 0, &DataOutput) == FALSE ) { printf("CryptUnprotectData failed with error 0x%.8x", GetLastError()); return; } memcpy(password, DataOutput.pbData, DataOutput.cbData); password[DataOutput.cbData] = 0; printf("Successfully Decrypted Password is %s ", password); } How to Recover QQ...

The post How to Recover Saved Passwords in Tencent QQ browser first appeared on XenArmor.

qq browser password | XenArmor

How to Recover Saved Passwords in Tencent QQ browser