Re: [PEN-TEST] Autocomplete Function

> The only place I know of that would contain the settings
> would be in user.dat, but they appear to be encoded (at
> least they are not present in plain text).

Isn't user.dat just a hive of HKEY_CURRENT_USER ?
(showing complete ignorance and indifference to NT)

Are we talking about Intelliforms or url autocompletion?,
there seems to be some confusion. But saying that they could
both contain passwords or session ids.

regards,

Nathan

--
N.Catlow_at_eris.dera.gov.uk |  All opinions  | IT Security, DERA,
                          | are my own and | WWB009, St Andrews Rd,
                          |   not DERA's   | Malvern, Worcs, England.