Friday, January 8, 2010

Where Tritek Case Management Stores Passwords and Login Information

In order to move Tritek users over to MerusCase, the superior case management system, one of my projects has been to reverse engineer and write a migration system for Tritek.

If you have lost your password or simply would like to hack into Tritek or impersonate someone else, it is easy to find the passwords and logins in plain text in the DATA/ folder that Tritek uses.

First, if you don't know where to find where Tritek is storing its data tables, open up the executable SETUP1.exe in the XMGMT/ folder. Alternatively, open up DATA/parms.dbf with a DBF (dBASE) viewer (For example DBFView or DBFViewer 2000) -- there is a 'data' column that specifies a file path to your data.

Now, open up DATA/logins.dbf with your dbf viewer and there are columns for name, password, login dates, and so on. They are all stored in plain text so you won't have to do any password hashing or such.

9 comments:

  1. WOW!!! That's scary... I can't beleive it. Security must not be a worry for Tritek users.

    ReplyDelete
  2. Such a very beneficial article. Very thrilling to read this text.I would really like to thank you for the efforts you had made for writing this amazing article.

    write my essay

    ReplyDelete
  3. We are the company http://www.unitedcheckcashing.com providing you the best services about unitedcheckcashing.com within a short period. In USA you may find us everywhere, every city and 24/7. We actually love to oblige you the best things with 100% agreements and faster ever.
    check casher

    ReplyDelete
  4. Presently, utilizing the Internet, securing a money finance credit is quick, simple and advantageous. You can visit an online monetary moneylender and apply for a money finance credit utilizing a protected Web webpage. check cashing san diego

    ReplyDelete
  5. Explore the profiles of guwahati escorts, guwahati call girls, call girls in guwahati
    and escorts in guwahati for female companionship in top rated hotels.
    Get affordable escort services in guwahati hotels now.
    College escorts in Guwahati |
    Housewife escorts in Guwahati |
    Assamese call girls in Guwahati |
    Nepali call girls in Guwahati |
    Female escorts in Guwahati |
    High profile escorts in Guwahati |
    Russian escorts in Guwahati |
    College call girls in Guwahati |

    ReplyDelete
  6. Guwahati Escorts or call girls in Guwahati are those call girl who are rocking and
    amazing in terms of better-quality sexual performance for the customer.
    Guwahati escort
    Guwahati escort service

    ReplyDelete
  7. How to Play Casino: Easy Guide to playing slots on
    Casino apr casino games are jancasino played by 4 players, the https://jancasino.com/review/merit-casino/ average time they take turns 토토 is around 14:20. The house is divided into 도레미시디 출장샵 three distinct categories: the house

    ReplyDelete