Remko Weijnen's Blog (Remko's Blog)

About Virtualization, VDI, SBC, Application Compatibility and anything else I feel like

Decoding Citrix IMA Datastore Password

This morning Arjan Beijer sent me an interesting link to a youtube video about obtaining the Citrix IMA Datastore password using Windbg.

The video shows a method, discovered by Denis Gundarev to obtain the IMA Datastore password. Basically he uses DSMaint.exe and set’s a breakpoint on the call to CryptUnprotectData and then reads the password from memory.

I tried to call the CryptUnprotectData API with the data read from the registry directly but this failed with error NTE_BAD_KEY_STATE, this is defined in winerror.h and it means “Key not valid for use in specified state”.

(more…)

Encoding and Decoding Citrix Passwords

I am working on a launcher tool for Citrix XenApp that can not only connect to a published application or published desktop but can also leverage Citrix Workspace Control to reconnect to disconnected and/or active sessions.

There doesn’t seem to be any sdk that exposed the data we need so I am trying to reproduce what the Citrix online plugi-in does.

I used a HTTP monitoring tool to capture the traffic between the Online plug-in and the Web Interface. First the online plug-in will retrieve the config.xml from the server specified via the Change Server option:

What is the address of the server hosting your published resources? | Server Address | Example: servername (for non-secure connections) | https://servername (for secure connections)

(more…)

  • 6 Comments
  • Filed under: Citrix
  • Lync Client Password Recovery

    I wrote a small tool that dumps all stored password for the Microsoft Lync Client that I’d like to share here.

    It’s a commandline tool that takes no arguments:

    Lync Password Dumper

    Have fun with it!

    Lync Password Dumper (5380 downloads)
  • 8 Comments
  • Filed under: Lync
  • imageI needed to change a few settings on a McAfee VirusScan Enterprise 8.7.Oi client. However there was a password protection in place that locks the user interface and nobody around that could tell me the password. So what to do?

    Right, we check out where this password is stored and how we can get rid of it!

    I openend vsplugin.dll in Ida Pro and searched for related strings such as password, lock etc.

     

    (more…)

  • 4 Comments
  • Filed under: General
  • Donate


    Blogroll


    Categories


    Archives