Get the Password Saved By fterm

Tombkeeper's harmonious Blog

It is estimated that in order to celebrate the holiday, shuimu's WEB has suspended all Guest. However, I forgot to keep my password in fterm. I remember Xiaohai was involved in the development of cterm, so I asked him if he had any fterm code, saving him trouble. As a result, he advised me to "reverse it ".

After a brief look, the fterm password is encrypted using a certain algorithm with the "dot66" as the key. I wanted to simulate an algorithm to write a small program for decryption. Later I thought it was not worth it. This function is not commonly used. I just need to find a password.

In the fterm directory, save the following line as getpasswd. cmd. Run getpasswd. cmd and use fterm normally. When it is disconnected, the password is displayed in the debugger window.

Ntsd-c "g 00581936; g 00581936; da edx" FTERM.exe

00581936 this address is only valid for fterm 2.5.0.20.. if you use another version, you may need to adjust the address. However, downloading a fterm 2.5.0.133 may be faster.