<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>What&#039;s My Pass?</title>
	<atom:link href="http://www.whatsmypass.com/feed" rel="self" type="application/rss+xml" />
	<link>http://www.whatsmypass.com</link>
	<description>Password Recovery for Windows, Mac, Linux, browsers, email, instant messengers, BIOS</description>
	<lastBuildDate>Tue, 24 Jan 2012 16:08:10 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Cracking WPA/WPA2 with Reaver</title>
		<link>http://www.whatsmypass.com/cracking-wpawpa2-with-reaver</link>
		<comments>http://www.whatsmypass.com/cracking-wpawpa2-with-reaver#comments</comments>
		<pubDate>Tue, 24 Jan 2012 15:57:02 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Privilege Escalation]]></category>
		<category><![CDATA[Wireless]]></category>

		<guid isPermaLink="false">http://www.whatsmypass.com/?p=1311</guid>
		<description><![CDATA[The WiFi Protected Setup (WPS) protocol is vulnerable to a brute force attack that allows an attacker to recover an access point’s WPS pin, and subsequently the WPA/WPA2 passphrase, in just a matter of hours, using the open source tool called Reaver. Think your 32 character alpha-numeric password is uncrackable? If your wireless router is [...]]]></description>
			<content:encoded><![CDATA[<p>The WiFi Protected Setup (WPS) protocol is vulnerable to a brute force attack that allows an attacker to recover an access point’s WPS pin, and subsequently the WPA/WPA2 passphrase, in just a matter of hours, using the open source tool called <a href="http://code.google.com/p/reaver-wps/" title="http://code.google.com/p/reaver-wps/" target="_blank">Reaver</a>. Think your 32 character alpha-numeric password is uncrackable? If your wireless router is using WPS then your router may be spit back your password in plain-text to the attacker in less than 10 hrs. WPS allows users to enter an 8 digit PIN to connect to a secured network without having to enter a passphrase. When a user supplies the correct PIN the access point essentially gives the user the WPA/WPA2 PSK that is needed to connect to the network. Reaver will determine an access point&#8217;s PIN and then extract the PSK and give it to the attacker. When we tested Reaver in our labs we were able to recovery the WPA password in 1.5hrs and the longest run was 7.5hrs <img alt="Reaver Test" src="http://i.imgur.com/MQ0Su.jpg" title="Reaver Test" class="aligncenter" width="520" height="480" /></p>
]]></content:encoded>
			<wfw:commentRss>http://www.whatsmypass.com/cracking-wpawpa2-with-reaver/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>iPhone iOS 4.3.5 vulnerability</title>
		<link>http://www.whatsmypass.com/iphone-ios-4-3-5-vulnerability</link>
		<comments>http://www.whatsmypass.com/iphone-ios-4-3-5-vulnerability#comments</comments>
		<pubDate>Mon, 12 Dec 2011 15:16:49 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Apple]]></category>
		<category><![CDATA[News]]></category>
		<category><![CDATA[Privilege Escalation]]></category>

		<guid isPermaLink="false">http://www.whatsmypass.com/?p=1309</guid>
		<description><![CDATA[iPhone iOS 4.3.5 vulnerability (pin/password bypass to make calls) from Sigtrap. Turn on the phone. Slide to unlock. Press Emergency Call. Enter a very long phone number. Press and hold down the Power button. Wait for one second. Press the Call button. The phone will show the &#8220;Slide to power off&#8221; screen. Release the Power [...]]]></description>
			<content:encoded><![CDATA[<p><center><iframe src="http://player.vimeo.com/video/31654453?title=0&amp;byline=0&amp;portrait=0" width="400" height="300" frameborder="0" webkitAllowFullScreen mozallowfullscreen allowFullScreen></iframe>
<p><a href="http://vimeo.com/31654453">iPhone iOS 4.3.5 vulnerability (pin/password bypass to make calls)</a> from <a href="http://vimeo.com/sigtrap">Sigtrap</a>.</p>
<p></center></p>
<ol>
<li>Turn on the phone.</li>
<li>Slide to unlock.</li>
<li>Press Emergency Call.</li>
<li>Enter a very long phone number.</li>
<li>Press and hold down the Power button.</li>
<li>Wait for one second.</li>
<li>Press the Call button.</li>
<li>The phone will show the &#8220;Slide to power off&#8221; screen.</li>
<li>Release the Power button.</li>
<li>Press Cancel.</li>
<li>Double press the Home button.</li>
<li>Press the Phone icon.</li>
<li>Make calls. </li>
</ol>
]]></content:encoded>
			<wfw:commentRss>http://www.whatsmypass.com/iphone-ios-4-3-5-vulnerability/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>How secure is your password?</title>
		<link>http://www.whatsmypass.com/how-secure-is-your-password</link>
		<comments>http://www.whatsmypass.com/how-secure-is-your-password#comments</comments>
		<pubDate>Mon, 28 Nov 2011 18:04:00 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[cracking]]></category>
		<category><![CDATA[Life]]></category>
		<category><![CDATA[News]]></category>
		<category><![CDATA[Password Info]]></category>

		<guid isPermaLink="false">http://www.whatsmypass.com/?p=1304</guid>
		<description><![CDATA[Just head over to the service’s website and enter a password in the form. You do not necessarily have to enter a password that you use actively. You can alternatively enter a comparable password to find out how long it would take to hack your password with a brute force, or maybe a combined dictionary [...]]]></description>
			<content:encoded><![CDATA[<p><img src="http://i.imgur.com/FYlTc.jpg" alt="" / width="495"><br />
Just head over to the service’s <a href="http://www.howsecureismypassword.net/" target="_blank">website</a> and enter a password in the form. You do not necessarily have to enter a password that you use actively. You can alternatively enter a comparable password to find out how long it would take to hack your password with a brute force, or maybe a combined dictionary and brute force attack. </p>
<p><a href="http://www.howsecureismypassword.net/" target="_blank">http://www.howsecureismypassword.net/</a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.whatsmypass.com/how-secure-is-your-password/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Bypass IPad 2 passcode with a smart cover</title>
		<link>http://www.whatsmypass.com/bypass-ipad-2-passcode-with-a-smart-cover</link>
		<comments>http://www.whatsmypass.com/bypass-ipad-2-passcode-with-a-smart-cover#comments</comments>
		<pubDate>Fri, 21 Oct 2011 04:13:55 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Apple]]></category>
		<category><![CDATA[Privilege Escalation]]></category>

		<guid isPermaLink="false">http://www.whatsmypass.com/?p=1292</guid>
		<description><![CDATA[Anyone with a Smart Cover can break into your “password-protected” iPad 2. This issue occurs in iOS 5, but we’re hearing uncorroborated reports of it also working in earlier versions of iOS 4.3. What the flaw allows: As you can see in the video above, a Smart Cover can essentially unlock an iPad 2. The [...]]]></description>
			<content:encoded><![CDATA[<p>Anyone with a Smart Cover can break into your “password-protected” iPad 2. This issue occurs in iOS 5, but we’re hearing uncorroborated reports of it also working in earlier versions of iOS 4.3.<br />
<iframe width="500" height="315" src="http://www.youtube.com/embed/NLgQ22naQhE" frameborder="0" allowfullscreen></iframe></p>
<p><strong>What the flaw allows:</strong></p>
<p>As you can see in the video above, a Smart Cover can essentially unlock an iPad 2. The person who unlocks your iPad 2 will not have complete access to your iPad, but will be able to gain entrance to whatever you locked your iPad 2 on. If your iPad 2 went to sleep in Mail, Safari, Messages, Contacts, or Maps, you can imagine the sorts of personal information that can be viewed on your iPad. If you left your iPad 2 on its Home screen, the person can view which applications you have on your device, control media from the multitasking bar, but not much else.</p>
<p><strong>How to re-create it:</strong></p>
<p>1) Lock a password protected iPad 2</p>
<p>2) Hold down power button until iPad 2 reaches turn off slider</p>
<p>3) Close Smart Cover</p>
<p>4) Open Smart Cover</p>
<p>5) Click cancel on the bottom of the screen</p>
<p>(src:<a href="http://9to5mac.com/2011/10/20/anyone-with-a-smart-cover-can-break-into-your-ipad-2/" title="9to5mac" target="_blank">9to5mac.com</a>)</p>
]]></content:encoded>
			<wfw:commentRss>http://www.whatsmypass.com/bypass-ipad-2-passcode-with-a-smart-cover/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Hard Drive Master Passwords</title>
		<link>http://www.whatsmypass.com/hard-drive-master-passwords</link>
		<comments>http://www.whatsmypass.com/hard-drive-master-passwords#comments</comments>
		<pubDate>Sun, 16 Oct 2011 08:13:09 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Password Info]]></category>
		<category><![CDATA[Privilege Escalation]]></category>

		<guid isPermaLink="false">http://www.whatsmypass.com/?p=1278</guid>
		<description><![CDATA[Here&#8217;s a small compilation of passwords. If you have any to add please email us. We also can crack DELL HDD passwords for $10 ::Here:: SEAGATE -&#62; “Seagate” +25 spaces MAXTOR series N40P -&#62; “Maxtor INIT SECURITY TEST STEP ” +1 or +2 spaces series N40P -&#62; “Maxtor INIT SECURITY TEST STEP F” series 541DX -&#62; [...]]]></description>
			<content:encoded><![CDATA[<p>Here&#8217;s a small compilation of <a href="http://ipv5.wordpress.com/2008/04/14/list-of-hard-disk-ata-master-passwords/" target="_blank">passwords</a>. If you have any to add please email us. We also can crack DELL HDD passwords for $10 <a href="http://www.whatsmypass.com/bios-password-recovery-service">::Here::</a></p>
<p><strong>SEAGATE</strong> -&gt; “Seagate” +25 spaces</p>
<p><strong>MAXTOR</strong><br />
series N40P -&gt; “Maxtor INIT SECURITY TEST STEP ” +1 or +2 spaces<br />
series N40P -&gt; “Maxtor INIT SECURITY TEST STEP F”<br />
series 541DX -&gt; “Maxtor” +24 spaces<br />
series Athena (D541X model 2B) and diamondmax80 -&gt; “Maxtor”</p>
<p><strong>WESTERN DIGITAL</strong> -&gt; “WDCWDCWDCWDCWDCWDCWDCWDCWDCWDCWD”</p>
<p><strong>FUJITSU</strong> -&gt; 32 spaces</p>
<p><strong>SAMSUNG</strong> -&gt; “ttttttttttttttttttttttttttttttttt” (32 times t)</p>
<p><strong>IBM</strong><br />
series DTTA -&gt; “CED79IJUFNATIT” +18 spaces<br />
series DJNA -&gt; “VON89IJUFSUNAJ” +18 spaces<br />
series DPTA -&gt; “VON89IJUFSUNAJ” +18 spaces<br />
series DTLA -&gt; “RAM00IJUFOTSELET” +16 spaces<br />
series DADA-26480 (6,4gb) -&gt; “BEF89IJUF__AIDACA” +15 spaces</p>
<p><strong>HITACHI</strong> series DK23AA, DK23BA and DK23CA -&gt; 32 spaces</p>
<p><strong>TOSHIBA</strong> -&gt; 32 spaces</p>
<p>For xbox hdds try “XBOXSCENE” or “TEAMASSEMBLY” too</p>
<p>There is also some software available to reset the password called <a href="http://hddguru.com/software/2005.10.02-MHDD/" target="_blank">MHDD</a>, another suggested program is <a href="http://www.rockbox.org/atapwd.zip" target="_blank">ATAPWD</a>. A Commercial tool from <a href="http://www.hddunlock.com/download/" target="_blank">HDDLock</a> claims to unlock drives and prices <a href="http://www.hddunlock.com/purchase/" target="_blank">vary</a> with drive size.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.whatsmypass.com/hard-drive-master-passwords/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Password Reset CD</title>
		<link>http://www.whatsmypass.com/password-reset-cd</link>
		<comments>http://www.whatsmypass.com/password-reset-cd#comments</comments>
		<pubDate>Fri, 07 Oct 2011 14:46:02 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Password Info]]></category>
		<category><![CDATA[Privilege Escalation]]></category>

		<guid isPermaLink="false">http://www.whatsmypass.com/?p=1286</guid>
		<description><![CDATA[Looks like pcloginnow.com is now offering their password reset CD for free on their site. Click the image to download it. PCLoginNow is an easy-to-use tool to reset local administrator and other accounts passwords on Windows system. No need to reinstall the system. It resets Windows passwords and Windows security settings instantly. All version of [...]]]></description>
			<content:encoded><![CDATA[<p>Looks like <a href="http://www.pcloginnow.com/" title="http://www.pcloginnow.com/" target="_blank">pcloginnow.com</a> is now offering their password reset CD for free on their site. Click the image to download it.<br />
<center><a href="http://www.pcloginnow.com/download/PCLoginNow_Full.exe" title="PCLoginNow_Full.exe" target="_blank"><img src="http://www.pcloginnow.com/images/box_only.jpg" alt="" /></a></center><br />
<br />PCLoginNow  is an easy-to-use tool to reset local administrator and other accounts passwords on Windows system. No need to reinstall the system. It resets Windows passwords and Windows security settings instantly. All version of Windows are completely supported.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.whatsmypass.com/password-reset-cd/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Aim Recover</title>
		<link>http://www.whatsmypass.com/aim-recover-2</link>
		<comments>http://www.whatsmypass.com/aim-recover-2#comments</comments>
		<pubDate>Fri, 07 Oct 2011 14:42:46 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[AIM]]></category>
		<category><![CDATA[Our Tools]]></category>
		<category><![CDATA[Password Info]]></category>

		<guid isPermaLink="false">http://www.whatsmypass.com/?p=1284</guid>
		<description><![CDATA[Working on a newer version of our AIM password recovery tool. The newer versions of AIM 7.x changed the way they stored the saved passwords. More info to come soon]]></description>
			<content:encoded><![CDATA[<p>Working on a newer version of our <a href="http://www.whatsmypass.com/aim-recover" title="http://www.whatsmypass.com/aim-recover">AIM password recovery tool</a>. The newer versions of AIM 7.x changed the way they stored the saved passwords. More info to come soon <img src='http://www.whatsmypass.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
]]></content:encoded>
			<wfw:commentRss>http://www.whatsmypass.com/aim-recover-2/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>WarParty</title>
		<link>http://www.whatsmypass.com/warparty</link>
		<comments>http://www.whatsmypass.com/warparty#comments</comments>
		<pubDate>Fri, 07 Oct 2011 14:36:31 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Uncategorized]]></category>

		<guid isPermaLink="false">http://www.whatsmypass.com/?p=1273</guid>
		<description><![CDATA[One of my friends is trying to raise money for his own D&#038;D type board game on kickstarter so im trying to give a little plug http://www.kickstarter.com/projects/1408460255/warparty?ref=live]]></description>
			<content:encoded><![CDATA[<p>One of my friends is trying to raise money for his own D&#038;D type board game on kickstarter so im trying to give a little plug <img src='http://www.whatsmypass.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /><br />
<a href="http://www.kickstarter.com/projects/1408460255/warparty?ref=live" title="http://www.kickstarter.com/projects/1408460255/warparty" target="_blank">http://www.kickstarter.com/projects/1408460255/warparty?ref=live</a><br />
<a href="http://warpartygames.net/" title="http://warpartygames.net/" target="_blank"><img src="http://web.me.com/websites101/WARPARTY/Cover_Art_files/logo%5B1%5D.PNG"></a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.whatsmypass.com/warparty/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>OS X Lion bugs allow changing local user passwords and viewing shadow files</title>
		<link>http://www.whatsmypass.com/os-x-lion-bugs-allow-changing-local-user-passwords-and-viewing-hash</link>
		<comments>http://www.whatsmypass.com/os-x-lion-bugs-allow-changing-local-user-passwords-and-viewing-hash#comments</comments>
		<pubDate>Tue, 20 Sep 2011 13:55:16 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Apple]]></category>
		<category><![CDATA[cracking]]></category>
		<category><![CDATA[News]]></category>
		<category><![CDATA[Privilege Escalation]]></category>
		<category><![CDATA[Uncategorized]]></category>

		<guid isPermaLink="false">http://www.whatsmypass.com/?p=1265</guid>
		<description><![CDATA[The latest version of OS X Lion allows any user to easily change the password of any local account, due to permissions oversights on Apple&#8217;s part. The news comes less than a month after another Lion vulnerability that let users bypass LDAP without a password gained notoriety. Originally reported by Defence in Depth blogger Patrick [...]]]></description>
			<content:encoded><![CDATA[<p><center><img src="http://news.hitb.org/sites/default/files/styles/large/public/field/image/5974823525_071b06d1b4_z.jpg" alt="http://www.flickr.com/photos/rubendomfer/5974823525/" title="Credit: Ruben Domfer (Flickr) "></a></center></p>
<p>The latest version of OS X Lion allows any user to easily change the password of any local account, due to permissions oversights on Apple&#8217;s part. The news comes less than a month after another Lion vulnerability that let users bypass LDAP without a password gained notoriety.</p>
<p>Originally reported by Defence in Depth blogger Patrick Dunstan, the root of the newly discovered problem in Mac OS X 10.7 is tied to the user-specific shadow files used in modern OS X platforms. These files are essentially hash databases and contain, among other things, the user&#8217;s encrypted passwords. Ideally, they should be accessible only via high-privilege accounts.</p>
<p>According to Dunstan, Apple dropped the ball in terms of how Lion handles privilege. &#8220;Whilst non-root users are unable to access the shadow files directly, Lion actually provides non-root users the ability to still view password hash data,&#8221; Dunstan wrote. &#8220;This is accomplished by extracting the data straight from Directory Services.&#8221; Any user can accomplish this trick by simply invoking the directory services listing using the /Search/ path &#8212; for example, $ dscl localhost -read /Search/Users/bob (where &#8220;bob&#8221; is the username). This causes Lion OS X to spew out the contents of Bob&#8217;s shadow hash file, including data that can be used to crack Bob&#8217;s password with a simple script, such as a Python script written by Dunstan.</p>
<p>Source: <a href="http://www.infoworld.com/t/password-security/os-x-lion-bugs-let-hackers-view-change-local-user-passwords-173463" rel="nofollow" target="_blank">Info World</a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.whatsmypass.com/os-x-lion-bugs-allow-changing-local-user-passwords-and-viewing-hash/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Should I change My Password</title>
		<link>http://www.whatsmypass.com/should-i-change-my-password</link>
		<comments>http://www.whatsmypass.com/should-i-change-my-password#comments</comments>
		<pubDate>Mon, 05 Sep 2011 20:43:02 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Life]]></category>
		<category><![CDATA[News]]></category>

		<guid isPermaLink="false">http://www.whatsmypass.com/?p=1256</guid>
		<description><![CDATA[Recently, hackers hacked into the databases of various public and private organizations (Sony, MySpace, Gawker, PBS, etc) and released millions of user accounts along with associated emails and passwords. Since there are a number of different databases, it is not really viable to check them on your own and see if your account was also [...]]]></description>
			<content:encoded><![CDATA[<p><img src="http://main.makeuseoflimited.netdna-cdn.com/dir/wp-content/uploads/2011/06/119.png" alt="" width="500" height="425"/></p>
<p>Recently, hackers hacked into the databases of various public and private organizations (Sony, MySpace, Gawker, PBS, etc) and released millions of user accounts along with associated emails and passwords. Since there are a number of different databases, it is not really viable to check them on your own and see if your account was also leaked.</p>
<p>Should I Change My Password is a useful website that was created to help you easily check if your account was among those released to the public by hackers. The site uses databases released by hackers to check and match your email against the records in those databases. Simply enter your email and click “Check it!”.</p>
<p>If your email is found among the records, you should immediately change your password to protect your account.</p>
<p>&nbsp;</p>
<p>Features:</p>
<ul>
<li>Checks if your password was compromised in recent hacker attacks (in 2011).</li>
<li>Uses a number of databases released by hackers to the public.</li>
<li>Your emails and passwords are not stored in their database.</li>
<li>List of compromised databases posted on the website. See “Sources” at the bottom.</li>
<li>Free, no registration needed. Simply enter your email address to search the records.</li>
</ul>
<p>Check out ShouldIChangeMyPassword @ <a href="http://www.shouldichangemypassword.com/">www.shouldichangemypassword.com</a> (via <a href="http://lifehacker.com/5814917/should-i-change-my-password-quickly-checks-if-your-password-was-compromised-in-a-recent-hack">Lifehacker</a>)</p>
]]></content:encoded>
			<wfw:commentRss>http://www.whatsmypass.com/should-i-change-my-password/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

