|
-
July 3rd, 2002, 09:29 PM
#1
win 98 and their .pwl file
i have noticed recently with my interest in .pwl files that every win 98 coputer has a .pwl file called ADMINIST.pwl...now, does this file have a preset password? or does the system administrator set it when he is setting up his computers? and here is an equally important question. lets say someone stole that file, and decrypted it..if they were to log onto the system after that, would they gain administrator priviledges? how could someone prevent that from happening?
-
July 3rd, 2002, 09:32 PM
#2
Windows 98 doesn't have any type of admin login. The security is just not there. I've never noticed that file. I'll have a look into it later tonight.
x
-
July 3rd, 2002, 09:34 PM
#3
well to prevent someone from stealing and cracking their pwl, they could just use some insane 12+ char alpahnumeric pw, or for the truely insane, 12 chars alpahnumeric with a special characters thrown in like []}{';:"/?<>.
You're not your post count, You're not your avatar or sig, You're not how fast your internet connection is, You are not your processor, hard drive, or graphics card. You're the all-singing, all-dancing crap of AO
09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0
-
July 3rd, 2002, 09:37 PM
#4
Re: win 98 and their .pwl file
Originally posted here by drew_1791
i have noticed recently with my interest in .pwl files that every win 98 coputer has a .pwl file called ADMINIST.pwl...now, does this file have a preset password? or does the system administrator set it when he is setting up his computers? and here is an equally important question. lets say someone stole that file, and decrypted it..if they were to log onto the system after that, would they gain administrator priviledges? how could someone prevent that from happening?
You couldn't really gain administrative priviledges on a Windows 98 box because there really isn't such a thing. If you're in Windows, you have 'admin' rights. Security on a 98 box, at least security provided by the OS, is something that just doesn't exist.
I'll take a look for that file too, though...
-
July 3rd, 2002, 09:37 PM
#5
xmad > yeah, win98 is pretty security weak, it stores passwds in the .PWL files, thats how i found out the Netware passwords to my highschool. Lame, yes, but it was a learning experience.
You're not your post count, You're not your avatar or sig, You're not how fast your internet connection is, You are not your processor, hard drive, or graphics card. You're the all-singing, all-dancing crap of AO
09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0
-
July 3rd, 2002, 09:37 PM
#6
-
July 3rd, 2002, 09:38 PM
#7
I had a Windows 98box and I never saw that file. I have seen *every* file...
-
July 3rd, 2002, 09:39 PM
#8
If memory serves, win95/98 will create a PWL file for every user. You may get the lame logon window when you fire up windows95/98 but you can put whatever you want as the username in. Everytime you do it, it will create a new user...
Someone probably typed that username in and it therefore created that file...gotta love winderz
Neb
There is only one constant, one universal, it is the only real truth: causality. Action. Reaction. Cause and effect...There is no escape from it, we are forever slaves to it. Our only hope, our only peace is to understand it, to understand the 'why'. 'Why' is what separates us from them, you from me. 'Why' is the only real social power, without it you are powerless.
(Merovingian - Matrix Reloaded)
-
July 3rd, 2002, 09:53 PM
#9
I am not going to negate the fact that you found ADMINISTR.pwl on "your" PC. That is neihter here nor there. But here is a run down on the PWL.
A pwl file is an encrypted password file. There is a service that runs on most, if not all win9x boxes called "Client for Microsoft Networks", this is the service that basically saves the password and username. It also does all the stupid windows logon crap. Saves profiles ect ect... You will notice, that if you remove Client for MSN you can no longer save passwords. And you will get prompted upon restart for a new windows logon. Thats because your network's Primary Network Logon defaults to Windows Logon. Now, you asked how can you make sure it doesnt happen again? Dont let Windows Save any passwords. That easy.
It is better to be HATED for who you are, than LOVED for who you are NOT.
THC/IP Version 4.2
-
July 3rd, 2002, 10:09 PM
#10
Like nebulus said, someone probably typed in Admin or whatever and it came up as a user. Unless someone created an account with the name "Admin" and it is just a regular user but name is Admin.
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|