Quickly crack UC password in one minute

UC attracts more and more chat users with its low resource consumption and complete functions. Since there are not many attacks against UC, many users are taken care of by the security of UC. Here I introduce a UC vulnerability to everyone, I hope everyone will strengthen their security awareness.
Easy Peeping - Modify UC to implement password-free automatic login

For convenience, you will often set UC to "automatic login". So when we run UC on the network, UC will automatically log in, avoiding the trouble of entering our password. The vulnerability I am going to say is hidden in the "automatic login" function.

To verify the correctness of this vulnerability, we installed two UC clients on the machine. Use the "automatic login" and "normal login" methods to log in to the UC, and use the file editor "UltraEdit" to open the two "UC.exe" files that have been automatically logged in and logged in. Obviously, the difference between the two can be seen (Figure 1 is the UC executable file after automatic login, Figure 2 is the UC executable file in normal login mode). FIG

UC

main routine of FIG. 1 in an automatic logon mode UC main
under normal login mode 2

By comparison analysis can be found, the same number of the first four lines It is the same as the last three bytes of code. In the last line, only the fourth and sixth bytes of the countdown are different (the parts marked with dark colors in Figures 2 and 3). And there is a feature that the value of the automatic login method is "1" (hexadecimal value) larger than the value of the normal login.

When we log in with other UC numbers, we find that they all have the same pattern. Seeing this, I believe that many of my friends know that as long as the UC file that does not select "automatic login" is added with "1" in the corresponding position with "UltraEdit", it can be modified to automatically log in. This way, others can log in directly to UC without entering your login password. What privacy is there with UC!

Deep Mining - Password Viewing Software to Find UC Passwords

This method is better by modifying the main program file, but the technical requirements are relatively high. The method we will introduce below is simple and practical. This is also the method that most people generally adopt, but it is not as flexible as the method of modifying the main program file.

Software such as the "asterisk viewer" is now everywhere, everywhere. When we select "Auto Login", the UC password will be displayed with the "*" sign. Take the "Viewpass" password viewing software as an example (Figure 3). Figure 3 "Viewpass" is an asterisk under a command-line prompt viewer

according to the software, as long as you move the mouse to the password box, asterisks password will be displayed automatically. Use "UltraEdit" to modify the UC login mode to "automatic login". Select "Menu" → "Change User". When changing the user interface, just move your mouse over the password box and the password will appear immediately (Figure 4). 4 Move your mouse over the password box you can see the password.

these two methods to crack passwords UC, time is not more than one minute. No matter what software, or the old saying "safety first."