+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [.NET] [VB.NET] Password Safe (/showthread.php?tid=4474341)
Pages: Pages
1
2
[VB.NET] Password Safe - SIM-1984933 - Oct 3, 2014
i was inspired to make this when i got tired of Getting on my email just to get my HF password my Paypal Password I know what your thing how can you forget your password Well for one i make sure my password looks like this "z5j8_=;,123<>$#!*(&HOTDOG......//||" something along that line.
so i i started putting my infos into a .txt then i was like wait....
if my system was ever compromised by a rat,keylogger,File Grabber that my passwords Would be unprotected so i went into VB.net and made a simple Safe.
well anyway here the source files.
http://www.mediafire.com/download/u459r9q9vqsufgp/Password_Safe.zip
Virus Scan
https://www.virustotal.com/en/file/6a8eb60cd2eb583e79e34f81e8959c94bd9e798d50170d95a0d98c416316bba2/analysis/1412398112/
You Might Want to encrypt better safe then sorry.
* - $lick - Oct 3, 2014
Form1;
Quote:Public Class Form1
Private Sub Form1_Load(sender As Object, e As EventArgs) Handles MyBase.Load
Label1.Text = "Waiting on user....."
Label1.ForeColor = Color.Green
End Sub
Private Sub Button1_Click(sender As Object, e As EventArgs) Handles Button1.Click
If TextBox1.Text = "Mypassword" Then
Label1.Text = "info shown"
Label1.ForeColor = Color.Green
RichTextBox1.Text = My.Resources.info
Else
Label1.Text = "Failed Invalied password!"
Label1.ForeColor = Color.Red
End If
End Sub
Private Sub Button2_Click(sender As Object, e As EventArgs) Handles Button2.Click
RichTextBox1.Clear()
End Sub
End Class
'| Hex |
Saved Text;
Quote://Account Info\\
Host:
UserName:
Password:
======
Passwords are saved in plain text and stored in resources and the in-app password to get your details is in plain text and easily cracked.
![[Image: KHHEn2q.png]](https://i.imgur.com/KHHEn2q.png)
OP I recommend you remove all these files off your PC, having passwords in plain text is a terrible idea.
* - Moon Rock - Oct 3, 2014
Maybe add some base64 encryption? and change the extension when saved?
* - $lick - Oct 3, 2014
(Oct 3, 2014 10:29 PM)Hitman Agency Wrote: Maybe add some base64 encryption? and change the extension when saved?
http://hfshame.pw/view.php?id=30
Base64... Known too stop hackers everywhere.
* - SIM-964740 - Oct 3, 2014
You should look for some Pword Manager source codes on the web so you can learn encryption and such.
* - SIM-1984933 - Oct 3, 2014
Alright well do thank you for the tips.
* - SIM-964740 - Oct 3, 2014
(Oct 3, 2014 10:34 PM)๖ۣۜLazy™ Wrote: http://hfshame.pw/view.php?id=30
Base64... Known too stop hackers everywhere.
LMFAO! Bookmarked that website! That's great XD.
* - Moon Rock - Oct 3, 2014
(Oct 3, 2014 10:34 PM)๖ۣۜLazy™ Wrote: http://hfshame.pw/view.php?id=30
Base64... Known too stop hackers everywhere.
Lol, who says I'm a hacker? Nice website btw 🙂
* - zeroexp - Oct 4, 2014
Hello | Hex | , I like your project idea, but I have some things to add since you metioned keyloggers / RATs and such.
First off, it is NOT safe to store the password for the safe in the application. It can be decompiled and everything is ruined. Actually, there's no way around that, so the best you can do it to improve it.
Now, what you can do to improve it. Instead of the plain text password you could try to get the SHA1 (or other hashing algorithm) hash of the plain text password.
So, when the user inputs his password the program converts it to SHA1 and compares it to the hash stored in the application.
If they are the same, the password is correct.
Also, I am not 100% sure if this works but i think it would be safer to use a virtual keyboard when inputting the password.
*Virtual keyboard -
Spoiler (Click to View)
But the difference is that you should re-create the same thing built-in in your application and so that it sends the character the user clicks directly to the password field.
But that doesn't matter if you save the actual information in plain text.
Also, storing it in the resources is just... NO... Please...
Split the information into 2 separate parts , encrypt the first part with an encryption algorithm and the other one with a different algorithm.
The passwords for the algorithms ? I suggest your PC Name for the first part and your IP Address with slight modifications for the second part so if someone has your info it's harder for him to decrypt it.
I could add more but I'm too lazy at the moment xD
About the code... Make sure it's hard to read after you finish everything. 👍
* - SIM-1984933 - Oct 4, 2014
Wops thank you for the tip. i will look into this
* - WZDY - Oct 5, 2014
The best place to store things in in your desk, buy some sticky notes and stick on to the back side of it if you don't want anyone to see it.
These apps aren't very good for Windows and things like that because as you mencioned, they can be decompiled or if you get infected. When using these apps like such (safes), the best choice is to search the App Store with some "Password Lockers" because there's no "hacks" or anything for iOS atmoment.
Anyways, nice program and thanks for sharing.
* - SIM-1984933 - Oct 5, 2014
(Oct 5, 2014 12:50 PM)The Flash ϟ Wrote: The best place to store things in in your desk, buy some sticky notes and stick on to the back side of it if you don't want anyone to see it.
These apps aren't very good for Windows and things like that because as you mencioned, they can be decompiled or if you get infected. When using these apps like such (safes), the best choice is to search the App Store with some "Password Lockers" because there's no "hacks" or anything for iOS atmoment.
Anyways, nice program and thanks for sharing.
Thanks man.. yea notebook irl sounds good cant give me a Computer Virus irl anyway
* - Y0uth - Oct 6, 2014
You could always add some simple encryption. As long as the attacker doesn't get his hands on the encryption than you should be fine.
Example:
Code
Private arLetterChars() As Char = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz1234567890@ .:"
Private arEncryptedChars() As Char = "¿s¢çc‹i˜Ö´åÄÚKÍìæ¯~4Ûÿ5ÑûÏÉí³èô§ŠÀÙ9ÒÓ?þʯʞäƒ%*š¾†±HI2ʥæŒ,ϡϮϟϖЩЙʨʤ"
REM encrypt
Private Sub btnEncrypt_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles btnEncrypt.Click
With txtEncrypt
For Each myTextBoxChar As Char In .Text '// loop thru TextBox, one char. at a time.
For i As Integer = 0 To arLetterChars.Length - 1 '// loop thru all letters in the Array.
'// if TextBox char ='s the char in your Array, replace the TextBox char with the same #'ed Array char of the Encrypted letters.
If myTextBoxChar = arLetterChars(i) Then .Text = .Text.Replace(myTextBoxChar, arEncryptedChars(i))
Next
Next
End With
End Sub* - nuk - Oct 6, 2014
Someone on here posted a password manager (last year I believe) that was pretty nice... maybe do a search for that and see what they did? The idea is nice, but the "security" is bad (for now anyway) ;) Hope you don't give up on this and make it work nice :)
* Please don't take what I say as an insult... *
* - SIM-1456245 - Oct 6, 2014
(Oct 3, 2014 10:25 PM)๖ۣۜLazy™ Wrote: Form1;
Saved Text;
Passwords are saved in plain text and stored in resources and the in-app password to get your details is in plain text and easily cracked.
OP I recommend you remove all these files off your PC, having passwords in plain text is a terrible idea.
Damn that skin looks nice. Which one is it ?