Decrypting passwords stored using reversible encryption

I'm the system admin for a very small domain (<15 users).
I need to be able to log on with every user's account to do some work for them now and then.
I'm thinking of enabling this policy, but i need a tool to decrypt the passwords. Are there any available?

(Yea, security issue there... but consider that they were using a single administrative account with no password on the whole network up till last week.)
Giova322Asked:
Who is Participating?
 
DarthModConnect With a Mentor Commented:
Submitted to PAQ with points refunded (300)

DarthMod
Community Support Moderator
0
 
Dave_DietzCommented:
Reversible encryption is really only needed if you are using Digest Authentication for a web server.

I believe the passwords are encrypted with a 3DES algorithm, but I honestly can't guarantee that to be correct.

There are tools out there to break strong encrytpion suites, but even knowing the cipher and having access to a file with encrypted passwords is still going to take a *log* time to crack.

There is no simple tools that will look at a Security Accounts database on a Windows domain and spit out UserID/Password combos in a trivial timeframe.

(Just because it's reversible doesn't mean its easy to decrypt...)

Sorry.

Dave Dietz
0
 
Giova322Author Commented:
at the moment i'm just enabling "User cannot change password" and "Password never expires" and creating the accounts myself.
i think 3DES is a one way encryption.
I might of course be mistaken, but i thought reversible meant that it is possible to go back... while cracking one way encrypted hashes is a matter of brute force.
So there might be no tools available, but i think if it's *decryptable* there is a way to recover the original password in a matter of seconds or even much less.
0
Cloud Class® Course: Certified Penetration Testing

This CPTE Certified Penetration Testing Engineer course covers everything you need to know about becoming a Certified Penetration Testing Engineer. Career Path: Professional roles include Ethical Hackers, Security Consultants, System Administrators, and Chief Security Officers.

 
Dave_DietzCommented:
3DES (DES used 3 times with different keys) is a symmetric encryption algorythm - it is definately reversible.  It is actually the same suite used to encrypt shared session keys for SSL communications (not the public key encrytpion used to negotiate the session though).

There is no real way to decrypt a hash - those tend to be one way since there is possible duplication of hashes based on the hash algorythm used.

If something is decryptable you are correct about being able to decrypt it very quickly but that depends on your having acess to the key used to encrypt the data.  The key used to encrypt passwords stored in the SAM is something not made avaiable to a user (Admin or not) and without that you are back to brute forcing your way through the encryption used.  The OS has the key so it can decrypt the passwords wasily but there  si no way I know of to get that key for use by anything other than the OS.

If it were easy to decrypt passwords stored this way the passwords would be much too easy for a hacker to access if they gain control of the machine.

Dave Dietz
0
 
Giova322Author Commented:
well, they would still need to have admin rights, then enable the policy, and then wait for ppl to change their password.

I've heard that this policy is often enabled when dealing with macs, if that could be of any help.
0
 
Giova322Author Commented:
I object: no solution was given to the problem
I left the question open hoping for someone else's answer. In fact, i later increased the point value for that reason.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.