hi bddy


service.pwd contains the list of users and encrypted passwords for the FrontPage-extended web.

I think you should setup .htaccess permissions on directory _vti_pvt

jst create a file .htaccess in the directory _vti_pvt

and

put in this stuff

Options None

<Limit GET POST PUT DELETE>
order deny,allow
deny from all
</Limit>



regards

It uses standard DES encryption , any DES/Unix password cracker can do the stuff so beware.

try Jhon the Ripper