One click deal

[LawnSounds]

Is it possible to make it a one click deal - run it as user/admin and get the password instantly? Currently it needs to be run as admin first (sometimes with PsExec) and then user...

[ash47]

It should be possible, but it needs to be able to be able to impersonate users, which there is c# api to do that, but it is also complex. It would be noted that this works in one step if you run it as system on Windows 7. Are you also saying that this exe should elevate itself without the use of psexec?

…

On Feb 7, 2018 9:24 PM, "vlldk" ***@***.***> wrote: Is it possible to make it a one click deal - run it as user/admin and get the password instantly? Currently it needs to be run as admin first (sometimes with PsExec) and then user... — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#2>, or mute the thread <https://github.com/notifications/unsubscribe-auth/ADlKDnbO4hAkKfFFjXHtsmhkf2Aa2e4rks5tSXnAgaJpZM4R8eAY> .

[LawnSounds]

Yea, was talking about Win10...
Could a bad/easy solution be to create a batch script (run as admin) that would run the PsExec.exe and your .exe as system first and then as the current user?
I know the program can’t elevate itself (right?) as it has to run as system at some point....

I would like to help but don’t know c# only the very basics of batch....

[ash47]

It's easy enough for it to elevate itself (it will prompt for uac), and it can run itself as system, it just all looks a whole lot more dodgy lol

…

On Feb 8, 2018 8:12 AM, "vlldk" ***@***.***> wrote: Yea, was talking about Win10... Could a bad/easy solution be to create a batch script (run as admin) that would run the PsExec.exe and your .exe as system first and then as the current user? I know the program can’t elevate itself (right?) as it has to run as system at some point.... I would like to help but don’t know c# only the very basics of batch.... — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#2 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/ADlKDjTP1AF9SO2vUd_CWUKP8EOXbEj8ks5tShHVgaJpZM4R8eAY> .

[LawnSounds]

Yea i see.... maybe there could be two versions, a dodgy and non-dodgy?

[silvestro23]

Hi Ash,

just for your info, I am not a techguru, I am a simply end-user that needed to recover the password of a PEAP wifi connection on my personal pc with WIN7 PRO
Downloaded Ms Visual Studio Community 2017, added extra compenents (.net I think) , compile and son on

Following your instruction I was able to retrieve it...! So it seems that it is working also on win 7
Thanks a lot

[ash47]

That's good to hear -- there's a release section BTW, if you look in there, there's a compiled EXE version you can just download, you don't have to build it yourself.

…

On Tue, May 15, 2018, 12:30 AM silvestro23 ***@***.***> wrote: Hi Ash, just for your info, I am not a techguru, I am a simply end-user that needed to recover the password of a PEAP wifi connection on my personal pc with WIN7 PRO Downloaded Ms Visual Studio Community 2017, added extra compenents (.net I think) , compile and son on Following your instruction I was able to retrieve it...! So it seems that it is working also on win 7 Thanks a lot — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#2 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/ADlKDu2DkXTzf2g7slp1enjKW6aP3mExks5tyZUPgaJpZM4R8eAY> .

[silvestro23]

Hi All,

just to let you know that using the already compiled EXE version I cannot retrieve any password, in this moment I am not connected to the WPA2 Enterprise Wifi. I just got a txt file inside the folder Profiles stage 1_{BBFCF2C9-D555-45AA-ADFE-D63D83739761} which contains strange characthers
ÐŒ�ß��Ñ�Œz ÀO—ë� tºyí¡%©N”W'ƒ;išº � �f � µØ€êзZÄ&þ¯�àdÔ‹�µÜsøÖ–Ù°5;_!ö¹· �€ � ‹-3šäÚ›ÚQ¤�Ì3�¹â©=?���š´™ä’³ÏBy°� Ç4�Ba Ã�w¤Ú`Y¹�fp„�Ï3½Ö�&lq~«%ÍmðcM(@�†é}Ì5HuŠ¿qÄ�Ý4:X—yàüq�;�Îáê�Ý�õ¨GØ·¡BÒ4A%�LÀùèÙ�¯Ó„�ƒ|�7�’r{4�æ�’O�sÆ­ìºIËpa

I am running as always win 7 pro as I did when I was able to retrieve the password compiling the source file.
Bye

G

[ash47]

Did you execute this using the NT AUTHORITY\SYSTEM account via PSEXEC?

…

On Mon, Dec 10, 2018 at 7:36 AM silvestro23 ***@***.***> wrote: Hi All, just to let you know that using the already compiled EXE version I cannot retrieve any password, in this moment I am not connected to the WPA2 Enterprise Wifi. I just got a txt file inside the folder Profiles stage 1_{BBFCF2C9-D555-45AA-ADFE-D63D83739761} which contains strange characthers ÐŒ�ß��Ñ�Œz ÀO—ë� tºyí¡%©N”W'ƒ;išº � �f � µØ€êзZÄ&þ¯�àdÔ‹�µÜsøÖ–Ù°5;_!ö¹· �€ � ‹-3šäÚ›ÚQ¤�Ì3�¹â©=?���š´™ä’³ÏBy°� Ç4�Ba Ã�w¤Ú`Y¹�fp„�Ï3½Ö�&lq~«%ÍmðcM(@�†é}Ì5HuŠ¿qÄ�Ý4:X—yàüq�;�Îáê�Ý�õ ¨GØ·¡BÒ4A%�LÀùèÙ�¯Ó„�ƒ|�7�’r{4�æ�’O�sÆ­ìºIËpa I am running as always win 7 pro as I did when I was able to retrieve the password compiling the source file. Bye G — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#2 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/ADlKDqMdXRids3c7vkhbUdShM7PYRuWYks5u3XRYgaJpZM4R8eAY> .

[silvestro23]

No, I just run it with double click as administrator,
I was not aware of this procedure...sorry
where can I find the instructions?

[ash47]

Take a look at the repo, there's some instructions to help out, you need to run as system for it to decrypt

…

On Mon, Dec 10, 2018, 8:08 AM silvestro23 ***@***.*** wrote: No, I just run it with double click as administrator, I was not aware of this procedure...sorry — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#2 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/ADlKDo67SPoCKIJU0EWijdkYzJQlfssOks5u3XvegaJpZM4R8eAY> .

[silvestro23]

Hi,

did as explained...and password retrieved! So the executable works fine for me on Windows 7 Professional

thanks a lot
regards

G

[Artoria2e5]

Being the total dumbass I am, I wasted some five minutes before realizing that I was not running in the same working directory from psexec -s -i cmd /k [path-to-the-thing] and my normal user's [path-to-the-thing]. It might be a good idea to throw in something to accomendate my level of stupidity, in the readme or as a program argument..

[xprt007]

Hi there
I was very excited to find this program, as there seems to be no other way to retrieve the login credentials for WPA2-Enterprise, not even from Microsoft live support, where the offered solution is not for Enterprise.

I recently had someone enter the login credentials for a specific network I use, but was somehow not able to note them down and it's currently not possible to access the network administrator. Because in the past, I noticed once in a while one is required to login afresh, at least on the notebook, never even a single time with the Android smartphone for over 2 years, suggesting something having to do with Win 10 Pro, I immediately saved the system image as a precaution.

To my horror, today about 10 days after getting the credentials, just as I urgently needed to access the internet on my notebook and use it for a number of tasks, it needed re-authentication. Not even using a recovery point of a couple of days ago helped. I feared the password had been changed.
The last option was the system image recovery, I had made and this worked, which however is no good solution as it takes hours to do the recovery.

I had already tried to retrieve the username + password so I write them down for backup, but completely failed at using the instructions on this site under "How do I use this?".
In the next step, I had that program from Systeminternals, have used elevated cmd before, but the combination as needed in those instructions, I did not understand enough to get something constructive.

I have never compiled using Visual Studio, which I have installed but have no idea how to take those steps and the alternative method was equally not understandable, after trying again today.

The program was certainly written for coders. Is there any way to at least fully explain how to a newbie exactly what to do, either using Visual studio or the alternative method or indeed both so that I have the username and password?? There's really no where else to turn it seems, however much one googles.

I'm quite sure, I'm not the only non-coder that would really profit from your unique solution, if only I could use it.

Thank you in advance

[ash47]

I need, the instructions are on this GitHub and are pretty simple. You don't need visual studio, per the readme, there's a compiled version within the releases section of the repo. You need to be an administrator on the machine to retrieve the credentials, if that's not the case, you can't use this tool. If you can highlight specifically which step is unclear or which is failing, we can look at making that more clear.

…

On Mon, Oct 14, 2019, 1:15 AM xprt007 ***@***.***> wrote: Hi there I was very excited to find this program, as there seems to be no other way to retrieve the login credentials for WPA2-Enterprise, not even from Microsoft live support, where the offered solution is not for Enterprise. I recently had someone enter the login credentials for a specific network I use, but was somehow not able to note them down and it's currently not possible to access the administrator. Because in the past, I noticed once in a while one is required to login afresh, probably something having to do with Win 10 Pro, I immediately saved the system image. To my horror, today, just as I urgently needed to access the internet on my notebook and use it for a number of tasks, it needed re-authentication. Not even using a recovery point of a couple of days ago helped. I feared the password had been changed. The last trial was the system image recovery, I had made and this worked, which however is no good solution as it takes hours to do the recovery. I had already tried to retrieve the username + password so I write them down for backup, but completely failed at using the instructions on this site under "How do I use this?". I have never compiled using Visual Studio, which I have installed but have no idea how to take those steps and the alternative method was equally not understandable, after trying again today. The program was certainly written for coders. Is there any way to at least fully explain how to a newbie exactly what to do, either using Visual studio or the alternative method or indeed both so that I have the *username and password*?? There's really no where else to turn it seems, however much one googles. Thank you in advance — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#2?email_source=notifications&email_token=AA4UUDSFWUNTBKKY5VS4I7DQOMUOXA5CNFSM4EPR4AMKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEBCXDBY#issuecomment-541421959>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AA4UUDQRDEHCRFJN5YMKEJTQOMUOXANCNFSM4EPR4AMA> .

[xprt007]

Hi there

Thank you very much for your response.

OK, going with the compiled version "EnterpriseWifiPasswordRecover.exe" downloaded as zip file, I assume, ... I am the administrator on this notebook. My knowledge is basic as you will quickly note, so I request for patience.

• The executable needs to be run multiple times
  What exactly does this mean? Is this just general information for the coming steps or one needs to do that right now, before moving to the next step?

• You need to run the executable as the NT AUTHORITY\SYSTEM user to decrypt the first layer of encryption
  I assume, this is what is explained below, i.e. how to do so.

• After that, it needs to be run in the context of the user who owns the WiFi network

I will need to understand exactly what that means. I'm the sole user and admin of this notebook. The network is a university network, but as said, the new credentials were typed in for me, but I did not write them down. Basically, they consist of a username with a password. as noted above, with the previous credentials, after entering them in on this notebook (Win 10, later Win 10 Pro) + android smartphone, whereas the smartphone never required re-authentication for over 2 years, the notebook now and then required that, which probably has to do with Win 10, but I had those credentials, THEN. Currently, I have new credentials, but only on the notebook and note yet on smartphone. That's partly why I need to see and note them down.

How do I run the executable as NT AUTHORITY\SYSTEM ?

• Download psexec which is part of the Sysinternals Suite from Microsoft
  I have it right here

• Open an administrative command prompt window
  This got me a bit mixed up. Does it mean opening the CMD command as administrator and typing the command below in next step?? If not exactly what is expected?

• Type the following to get a system level command prompt psexec -s -i cmd
  I tried opening CMD as administrator, which was probably wrong, because when I typed in that command, I got the following:

C:\WINDOWS\system32>psexec -s -i cmd
'psexec' is not recognized as an internal or external command,
operable program or batch file.

What is the correct way to => "Type the following to get a system level command prompt psexec -s -i cmd", where is that done?

This may sound silly, but how does the command prompt know where Systeminternal's "psexec" is?

I also tried running EnterpriseWifiPasswordRecover.exe as administrator, just in case this is what was meant, but a black window briefly appears and then quickly disappears.

• Type whoami to confirm that the command prompt is running as system

• Execute the application using the system level command prompt

I just need to understand WHERE the 2 commands above are used, and => Execute the application using the system level command prompt.
Does this mean opening the file via command prompt window, and with which type of command?

Under "How are WPA2 MGT (Enterprise PEAP) Credentials stored in Windows 10?"

What more do I need to do to view the username + password?

I am the only user of the notebook and have full administrative rights.

Thank you for your help and above all time and patience.

Kind regards