Ogopogo Autothenticate 1.1.5 - Weak Password Encryption

Author: Prozaq of mSec
type: local
platform: osx
port: 
date_added: 1999-07-29 
date_updated: 2012-06-28 
verified: 1 
codes: OSVDB-83445 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/552/info

Autothenticate is an extension for MacOS that remembers usernames and passwords from visited websites, and atomatically enters them when the site is visited again. It can be configured to store the username and password, the username only, or nothing. It stores this information in encrypted form in a preference file called "AutothenticatePreferences" located in the Preferences folder in the System Folder. The encryption mechanism used is weak and can be broken.

This program, written by mSec, decrypts the Autothenticate information.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/19438.sit