Log in

View Full Version : username^system info


jackall
February 13th, 2011, 13:10
what system information is accessible, (like motherboard number) that could be used to - xor encrypt the username entered - so that the value obtained after the encryption, could be used as the password..?

char username [];
.. ..
char systeminfo [] = retrieved system info dynamically.

for ()
{
username [] = username [] ^systeminfo [];
}
any relevant information would be greatly appreciated
thank you.
..

ha33
February 14th, 2011, 03:43
The possibilities are endless.

Can you further clarify what you're trying to accomplish?
If you just want to know how this info is retrieved start playing with memory breakpoints on data section.

jackall
February 14th, 2011, 05:15
Quote:
[Originally Posted by ha33;89429]The possibilities are endless.

Can you further clarify what you're trying to accomplish?
If you just want to know how this info is retrieved start playing with memory breakpoints on data section.

...its very kind of you..
in fact you’ve mentioned also the second part of my tight spot..

the issue is nothing very original, mere a beginner’s curiosity, like this:

i need a - numeral to xor with user name entered - to be used as passwd.
and that number to be accessed from the system where the username is used.

yes...as you had mentioned, i like to know too, how this info is retrieved..!

and iam only just beginning to make out, A pointer from AN array in C.
...thank you very much

radix
February 14th, 2011, 09:17
Quote:
[Originally Posted by jackall;89430]...
i need a - numeral to xor with user name entered - to be used as passwd.
and that number to be accessed from the system where the username is used.


Hi,

I would not use somethink like XOR - if the strings have different lengths you have to fill the shorter string, it has weak security. I recommend to append the username and some hardware info (maybe two or more items) and calculate some kind of hash like MD5/SHAx from that.

Usable hardware info could be the MAC address of the network card (look at the WinSock APIs), the computer name (Win API: GetComputerName), the volume serial of the system partition (Win API: GetVolumeInformation) - the last two not really hard.

radix

jackall
February 15th, 2011, 00:23
Quote:
[Originally Posted by radix;89433]Hi,

I would not use somethink like XOR - if the strings have different lengths you have to fill the shorter string, it has weak security. I recommend to append the username and some hardware info (maybe two or more items) and calculate some kind of hash like MD5/SHAx from that.

Usable hardware info could be the MAC address of the network card (look at the WinSock APIs), the computer name (Win API: GetComputerName), the volume serial of the system partition (Win API: GetVolumeInformation) - the last two not really hard.

radix


The information you had provided, was certainly very useful to me..!

mac address, seemed to be an attractive option, and accessing it in c,
was not an easy deed to be done for me all alone... anyway it’s done..!

thank you... for the right direction shown and for the timely help...