How to get dial up password?

[XfoxX]

Whats the API to list dial up connections and their passwords?

[manavo11]

Why do you want this? You could always show the dial-up dialog...

[XfoxX]

Why do you want this? You could always show the dial-up dialog...

I want this because I forgot the password, it is saved though, therefore, I can connect... but sooner or later I'll need the password.

[manavo11]

If you have forgotten your password you should contact your ISP.

[XfoxX]

If you have forgotten your password you should contact your ISP.

Nonetheless, it will be handy tool. DUN password grabbers are available on the net, but most of them come with backdoors some sort of.

Is there a way to hook into a DUN pass grabber to see what API it is calling?

[sciguyryan]

Have a look at this, it may help:

http://www.planet-source-code.com/vb...55965&lngWId=1

Cheers,

RyanJ

[RobDog888]

I want this because I forgot the password, it is saved though, therefore, I can connect... but sooner or later I'll need the password.

Whats the big deal about contacting your ISP for the password? This doesnt sound legitimate to me. Sounds like something malicious.

[sciguyryan]

Whats the big deal about contacting your ISP for the password? This doesnt sound legitimate to me. Sounds like something malicious.

Hmm, come to think of it yes it does...


Cheers,

RyanJ

[dglienna]

Not to mention that once you are logged in, you can go to their webpage, and change the password yourself. Most password maintenance is automated nowadays.

[sciguyryan]

Not to mention that once you are logged in, you can go to their webpage, and change the password yourself. Most password maintenance is automated nowadays.

You can even get those * unmaskers too - if the password is saved they can reveal it


Cheers,

RyanJ

[XfoxX]

Whats the big deal about contacting your ISP for the password? This doesnt sound legitimate to me. Sounds like something malicious.

First of all, as I said it is a handy tool, it saves time contacting the ISP whenever a person forgets or loses the password.

Second, if it was for malicious purposes, there are already enough tools available for that, just google for password grabbers. However, most of them have some sort of backdoors and I don't want to run a program on my PC with a backdoor.

Third, since win2k Microsoft has changed the security model for RAS. The API to grab the DUN password only works in Admin account.

Lastly, it is not right to jump to conclusions and accuse people of something malicious without full knowledge

Not to mention that once you are logged in, you can go to their webpage, and change the password yourself.

With my ISP it doesn't work like that. On their site, I've to use the password again to sign in.

Anyhow, PSC example have solved my problem thanks.

[manavo11]

Third, since win2k Microsoft has changed the security model for RAS. The API to grab the DUN password only works in Admin account.

That shouldn't be a problem for you...

Lastly, it is not right to jump to conclusions and accuse people of something malicious without full knowledge

No one is accusing. However, since you admit yourself that programs like this exist, we should at least try to be sure that you aren't trying to make something like this since there is a possibility.

[XfoxX]

Third, since win2k Microsoft has changed the security model for RAS. The API to grab the DUN password only works in Admin account.

That shouldn't be a problem for you...

I don't know what you meant by the last comment. I mean, the RAS API example given by sciguyryan only works in the Admin account, therefore, it is not exactly a security threat.

[sciguyryan]

I don't know what you meant by the last comment. I mean, the RAS API example given by sciguyryan only works in the Admin account, therefore, it is not exactly a security threat.

Yes, that is true - it will not work on any other account level than the admin


Cheers,

RyanJ

[manavo11]

Sorry, I missuderstood your comment But still, it could be used for malicious purposes even if it only works in the admin account. Anyway...

[RobDog888]

...Lastly, it is not right to jump to conclusions and accuse people of something malicious without full knowledge

Nobody is accusing you of anything, only stating an opinion of how it looks to me. You havent replied in a while so
we could not get any more input from you. This is a shady subject so questions are only going to come along naturally.

No offense ment.