search

ash47 / EnterpriseWifiPasswordRecover

This is a tool that recovers WPA2 Enterprise Wifi Credentials from a machine.
100 stars 23 forks source link

One click deal #2

Open LawnSounds opened 6 years ago

LawnSounds commented 6 years ago

Is it possible to make it a one click deal - run it as user/admin and get the password instantly? Currently it needs to be run as admin first (sometimes with PsExec) and then user...

ash47 commented 6 years ago

It should be possible, but it needs to be able to be able to impersonate users, which there is c# api to do that, but it is also complex.

It would be noted that this works in one step if you run it as system on Windows 7.

Are you also saying that this exe should elevate itself without the use of psexec?

On Feb 7, 2018 9:24 PM, "vlldk" notifications@github.com wrote:

Is it possible to make it a one click deal - run it as user/admin and get the password instantly? Currently it needs to be run as admin first (sometimes with PsExec) and then user...

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/ash47/EnterpriseWifiPasswordRecover/issues/2, or mute the thread https://github.com/notifications/unsubscribe-auth/ADlKDnbO4hAkKfFFjXHtsmhkf2Aa2e4rks5tSXnAgaJpZM4R8eAY .

LawnSounds commented 6 years ago

Yea, was talking about Win10... Could a bad/easy solution be to create a batch script (run as admin) that would run the PsExec.exe and your .exe as system first and then as the current user? I know the program can’t elevate itself (right?) as it has to run as system at some point....

I would like to help but don’t know c# only the very basics of batch....

ash47 commented 6 years ago

It's easy enough for it to elevate itself (it will prompt for uac), and it can run itself as system, it just all looks a whole lot more dodgy lol

On Feb 8, 2018 8:12 AM, "vlldk" notifications@github.com wrote:

Yea, was talking about Win10... Could a bad/easy solution be to create a batch script (run as admin) that would run the PsExec.exe and your .exe as system first and then as the current user? I know the program can’t elevate itself (right?) as it has to run as system at some point....

I would like to help but don’t know c# only the very basics of batch....

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/ash47/EnterpriseWifiPasswordRecover/issues/2#issuecomment-363912374, or mute the thread https://github.com/notifications/unsubscribe-auth/ADlKDjTP1AF9SO2vUd_CWUKP8EOXbEj8ks5tShHVgaJpZM4R8eAY .

LawnSounds commented 6 years ago

Yea i see.... maybe there could be two versions, a dodgy and non-dodgy?

silvestro23 commented 6 years ago

Hi Ash,

just for your info, I am not a techguru, I am a simply end-user that needed to recover the password of a PEAP wifi connection on my personal pc with WIN7 PRO Downloaded Ms Visual Studio Community 2017, added extra compenents (.net I think) , compile and son on

Following your instruction I was able to retrieve it...! So it seems that it is working also on win 7 Thanks a lot

ash47 commented 6 years ago

That's good to hear -- there's a release section BTW, if you look in there, there's a compiled EXE version you can just download, you don't have to build it yourself.

On Tue, May 15, 2018, 12:30 AM silvestro23 notifications@github.com wrote:

Hi Ash,

just for your info, I am not a techguru, I am a simply end-user that needed to recover the password of a PEAP wifi connection on my personal pc with WIN7 PRO Downloaded Ms Visual Studio Community 2017, added extra compenents (.net I think) , compile and son on

Following your instruction I was able to retrieve it...! So it seems that it is working also on win 7 Thanks a lot

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/ash47/EnterpriseWifiPasswordRecover/issues/2#issuecomment-388837813, or mute the thread https://github.com/notifications/unsubscribe-auth/ADlKDu2DkXTzf2g7slp1enjKW6aP3mExks5tyZUPgaJpZM4R8eAY .

silvestro23 commented 5 years ago

Hi All,

just to let you know that using the already compiled EXE version I cannot retrieve any password, in this moment I am not connected to the WPA2 Enterprise Wifi. I just got a txt file inside the folder Profiles stage 1{BBFCF2C9-D555-45AA-ADFE-D63D83739761} which contains strange characthers ÐŒßÑŒz ÀO—ë tºyí¡%©N”W'ƒ;išº  f  µØ€êзZÄ&þ¯àdÔ‹µÜsøÖ–Ù°5;!ö¹· €  ‹-3šäÚ›ÚQ¤Ì3¹â©=?š´™ä’³~ÏBy° Ç4Ba Ãw¤~Ú`Y¹fp„Ï3½Ö&lq~«%ÍmðcM(@†é}Ì5HuŠ¿qÄÝ4:X—yàüq;ÎáêÝõ ¨GØ·¡BÒ4A%LÀùèÙ¯Ó„ƒ|7’r{4æ’OsÆ­ìºIËpa

I am running as always win 7 pro as I did when I was able to retrieve the password compiling the source file. Bye

G

ash47 commented 5 years ago

Did you execute this using the NT AUTHORITY\SYSTEM account via PSEXEC?

On Mon, Dec 10, 2018 at 7:36 AM silvestro23 notifications@github.com wrote:

Hi All,

just to let you know that using the already compiled EXE version I cannot retrieve any password, in this moment I am not connected to the WPA2 Enterprise Wifi. I just got a txt file inside the folder Profiles stage 1{BBFCF2C9-D555-45AA-ADFE-D63D83739761} which contains strange characthers ÐŒ�ß��Ñ�Œz ÀO—ë� tºyí¡%©N”W'ƒ;išº � �f � µØ€êзZÄ&þ¯�àdÔ‹�µÜsøÖ–Ù°5;!ö¹· �€ � ‹-3šäÚ›ÚQ¤�Ì3�¹â©=?���š´™ä’³ÏBy°� Ç4�Ba Ã�w¤Ú`Y¹�fp„�Ï3½Ö�&lq~«%ÍmðcM(@�†é}Ì5HuŠ¿qÄ�Ý4:X—yàüq�;�Îáê�Ý�õ ¨GØ·¡BÒ4A%�LÀùèÙ�¯Ó„�ƒ|�7�’r{4�æ�’O�sÆ­ìºIËpa

I am running as always win 7 pro as I did when I was able to retrieve the password compiling the source file. Bye

G

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/ash47/EnterpriseWifiPasswordRecover/issues/2#issuecomment-445569389, or mute the thread https://github.com/notifications/unsubscribe-auth/ADlKDqMdXRids3c7vkhbUdShM7PYRuWYks5u3XRYgaJpZM4R8eAY .

silvestro23 commented 5 years ago

No, I just run it with double click as administrator, I was not aware of this procedure...sorry where can I find the instructions?

ash47 commented 5 years ago

Take a look at the repo, there's some instructions to help out, you need to run as system for it to decrypt

On Mon, Dec 10, 2018, 8:08 AM silvestro23 <notifications@github.com wrote:

No, I just run it with double click as administrator, I was not aware of this procedure...sorry

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/ash47/EnterpriseWifiPasswordRecover/issues/2#issuecomment-445571905, or mute the thread https://github.com/notifications/unsubscribe-auth/ADlKDo67SPoCKIJU0EWijdkYzJQlfssOks5u3XvegaJpZM4R8eAY .

silvestro23 commented 5 years ago

Hi,

did as explained...and password retrieved! So the executable works fine for me on Windows 7 Professional

thanks a lot regards

G

Artoria2e5 commented 5 years ago

Being the total dumbass I am, I wasted some five minutes before realizing that I was not running in the same working directory from psexec -s -i cmd /k [path-to-the-thing] and my normal user's [path-to-the-thing]. It might be a good idea to throw in something to accomendate my level of stupidity, in the readme or as a program argument..

xprt007 commented 5 years ago

Hi there I was very excited to find this program, as there seems to be no other way to retrieve the login credentials for WPA2-Enterprise, not even from Microsoft live support, where the offered solution is not for Enterprise.

I recently had someone enter the login credentials for a specific network I use, but was somehow not able to note them down and it's currently not possible to access the network administrator. Because in the past, I noticed once in a while one is required to login afresh, at least on the notebook, never even a single time with the Android smartphone for over 2 years, suggesting something having to do with Win 10 Pro, I immediately saved the system image as a precaution.

To my horror, today about 10 days after getting the credentials, just as I urgently needed to access the internet on my notebook and use it for a number of tasks, it needed re-authentication. Not even using a recovery point of a couple of days ago helped. I feared the password had been changed. The last option was the system image recovery, I had made and this worked, which however is no good solution as it takes hours to do the recovery.

I had already tried to retrieve the username + password so I write them down for backup, but completely failed at using the instructions on this site under "How do I use this?". In the next step, I had that program from Systeminternals, have used elevated cmd before, but the combination as needed in those instructions, I did not understand enough to get something constructive.

I have never compiled using Visual Studio, which I have installed but have no idea how to take those steps and the alternative method was equally not understandable, after trying again today.

The program was certainly written for coders. Is there any way to at least fully explain how to a newbie exactly what to do, either using Visual studio or the alternative method or indeed both so that I have the username and password?? There's really no where else to turn it seems, however much one googles.

I'm quite sure, I'm not the only non-coder that would really profit from your unique solution, if only I could use it.

Thank you in advance

ash47 commented 5 years ago

I need, the instructions are on this GitHub and are pretty simple. You don't need visual studio, per the readme, there's a compiled version within the releases section of the repo.

You need to be an administrator on the machine to retrieve the credentials, if that's not the case, you can't use this tool.

If you can highlight specifically which step is unclear or which is failing, we can look at making that more clear.

On Mon, Oct 14, 2019, 1:15 AM xprt007 notifications@github.com wrote:

Hi there I was very excited to find this program, as there seems to be no other way to retrieve the login credentials for WPA2-Enterprise, not even from Microsoft live support, where the offered solution is not for Enterprise.

I recently had someone enter the login credentials for a specific network I use, but was somehow not able to note them down and it's currently not possible to access the administrator. Because in the past, I noticed once in a while one is required to login afresh, probably something having to do with Win 10 Pro, I immediately saved the system image.

To my horror, today, just as I urgently needed to access the internet on my notebook and use it for a number of tasks, it needed re-authentication. Not even using a recovery point of a couple of days ago helped. I feared the password had been changed. The last trial was the system image recovery, I had made and this worked, which however is no good solution as it takes hours to do the recovery.

I had already tried to retrieve the username + password so I write them down for backup, but completely failed at using the instructions on this site under "How do I use this?".

I have never compiled using Visual Studio, which I have installed but have no idea how to take those steps and the alternative method was equally not understandable, after trying again today.

The program was certainly written for coders. Is there any way to at least fully explain how to a newbie exactly what to do, either using Visual studio or the alternative method or indeed both so that I have the username and password?? There's really no where else to turn it seems, however much one googles.

Thank you in advance

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/ash47/EnterpriseWifiPasswordRecover/issues/2?email_source=notifications&email_token=AA4UUDSFWUNTBKKY5VS4I7DQOMUOXA5CNFSM4EPR4AMKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEBCXDBY#issuecomment-541421959, or unsubscribe https://github.com/notifications/unsubscribe-auth/AA4UUDQRDEHCRFJN5YMKEJTQOMUOXANCNFSM4EPR4AMA .

xprt007 commented 5 years ago

Hi there

Thank you very much for your response.

OK, going with the compiled version "EnterpriseWifiPasswordRecover.exe" downloaded as zip file, I assume, ... I am the administrator on this notebook. My knowledge is basic as you will quickly note, so I request for patience.

I will need to understand exactly what that means. I'm the sole user and admin of this notebook. The network is a university network, but as said, the new credentials were typed in for me, but I did not write them down. Basically, they consist of a username with a password. as noted above, with the previous credentials, after entering them in on this notebook (Win 10, later Win 10 Pro) + android smartphone, whereas the smartphone never required re-authentication for over 2 years, the notebook now and then required that, which probably has to do with Win 10, but I had those credentials, THEN. Currently, I have new credentials, but only on the notebook and note yet on smartphone. That's partly why I need to see and note them down.

How do I run the executable as NT AUTHORITY\SYSTEM ?

C:\WINDOWS\system32>psexec -s -i cmd 'psexec' is not recognized as an internal or external command, operable program or batch file.

What is the correct way to => "Type the following to get a system level command prompt psexec -s -i cmd", where is that done?

This may sound silly, but how does the command prompt know where Systeminternal's "psexec" is?

I also tried running EnterpriseWifiPasswordRecover.exe as administrator, just in case this is what was meant, but a black window briefly appears and then quickly disappears.

I just need to understand WHERE the 2 commands above are used, and => Execute the application using the system level command prompt. Does this mean opening the file via command prompt window, and with which type of command?

Under "How are WPA2 MGT (Enterprise PEAP) Credentials stored in Windows 10?"

What more do I need to do to view the username + password?

I am the only user of the notebook and have full administrative rights.

Thank you for your help and above all time and patience.

Kind regards

xprt007 commented 5 years ago

Hi

If you can highlight specifically which step is unclear or which is failing, we can look at making that more clear.

Today, just as I'm writing this, I am running a system image restoration, the second in 3 weeks because Windows 10 last night inexplicably wanted a re-authentication on this specific network just as I urgently needed to do some work. I had used the notebook earlier on in the day with no problem.

As mentioned above, with the expired credentials I previously had which were also used for an Android smart phone, I never needed this re-authentication in over 2 years, but now & then in contrast on the Win 10 notebook. That is why I believe the re-authentication is Windows 10 related for this enterprise Wifi, otherwise the phone would have also required it at the same time.

So after my detailed statement of where I specifically needed some more detailed instructions as requested above, about 3 weeks ago, what more can I do? Or should I post the request a separate thread?

I just need to extract the username + password because I currently have no contact to the network system administrator.

It's very cumbersome doing a 2 - 3 hour long system image restoration to get Wi9fi working again.

I'm quite sure you are busy, but your help would very much be appreciated.