IE remember password?

[high6]

So firefox has a manager for rememer password but IE7 doesn't. So I was wondering if anyone can help me with this.

I have analyzed IE7 decrypting the usernames/passwords and this is what I got.

• Get every visited page.
  
• Hash each visted page and see if it is in the registry
  
• Grab that registries data
  
• Decrypt with CryptUnprotectdata (Key is the forms name)
  

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IntelliForms\Storage2 contains the usernames/passwords held like.

name(site hashed), value(data struct crypted with CryptProtect)

Don't know what HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IntelliForms\Storage1 is for though. Maybe has the form names.

is this close to right?

Edited May 20, 2008 by high6

[Hikaru]

I ever thought that IE was storing the usernames/passwords on HKCU\Software\Microsoft\Protected Storage System Provider\*

[high6]

I ever thought that IE was storing the usernames/passwords on HKCU\Software\Microsoft\Protected Storage System Provider\*

IE7 saves them in

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IntelliForms\Storage2

but they are encrypted.

Name is the website hashed, the data is protected with the website.

[Hikaru]

Oops, I just dind't noticed the change from IE6. Sorry.

IE6 stored information about the forms names and fields, so it makes sense to me that IE7 stores them in Storage1 (seeing that they're not on Storage2).