Guy’s Best Practice Ezine 154 – Free Security Tools
Neither computer security nor physical house security come naturally to me. Therefore, I am most grateful to Paul DeBrino for pointing me to interesting security tools at NirSoft.
I found these free security utilities fascinating at two levels. Firstly, one day I may be locked out of an application and need help in getting one of my forgotten passwords. In passing, I wonder if internet sites where I register my details, use similar technology to send me a password that I cannot remember.
Secondly, on the rare occasions when I do put on my ‘security hat’, I am curious to know which utilities could attack my applications. In this scenario, I am relieved when the password cracking tools fails on my up-to-date applications, but slightly concerned if it works.
NirSoft’s Security Tools
IE PassView v1.10
IE PassView is a utility that reveals the passwords stored by Internet Explorer 7.0 and 8.0. Incidentally, PasswordFox v1.10 performs similar password recovery for Mozilla Firefox.
To show how up-to-date nirsoft are, they have just released ChromePass v1.00 for Google’s now Chrome browser.
Protected Storage PassView v1.63
This utility can read data stored in Protected Storage and thus can reveal passwords stored on your computer by Outlook Express and POP3 accounts including Outlook.
LSASecretsView lists the LSA secrets stored in the Registry on your computer. This data is stored under HKEY_LOCAL_MACHINE\Security\Policy\Secrets. Examples include AutoAdminLogon and VPN passwords.
WirelessKeyView recovers wireless network keys (WEP/WPA) stored in your computer by the ‘Wireless Zero Configuration’ service of Windows XP and by the ‘WLAN AutoConfig’ service of Windows Vista. It allows you to easily save all keys to text/html/xml file, or copy a single key to the clipboard.
You are going to find this hard to believe, but there are another 10 password recovery utilities at the nirsoft site. They cover programs such as MSN Messenger, Remote Desktop, some versions of Access and SQL.
Tired of writing scripts? The User Management Resource Administrator solution by Tools4ever offers an alternative to time-consuming manual processes.
It features 100% auto provisioning, Helpdesk Delegation, Connectors to more than 130 systems/applications, Workflow Management, Self Service and many other benefits. Click on the link for more information onUMRA.
Summary of Free Security Tools
There are two situations where you may need security tools to reveal passwords, you may be frustrated at forgetting a password, or you may wish to test your applications against freely available security cracking tools.
Will and Guy’s Humour
This week Will has decided to get fit. See why Guy is smiling at his diet and fitness regime.