-
Notifications
You must be signed in to change notification settings - Fork 132
/
Whatsnew.txt
1818 lines (1458 loc) · 71.3 KB
/
Whatsnew.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
====================================
Version 4.9.56 (07-04-2014)
====================================
[+] Added Root Certificate Generator in Certificate Spoofing configuration page.
[+] Added experimental Certificate Injection feature to inject custom certificates into HTTPS/ProxyHTTPS responses directed to victim APR's clients.
[!] Fixed several memory leaks in all APR-SSL sniffer filters.
====================================
Version 4.9.55 (03-03-2014)
====================================
[+] Added TLS SNI (Server Name Indication) parameter in APR-HTTPS and APR-ProxyHTTPS lists.
[!] Fixed a bug in Certificate Collector and fake Self-Signed certificates generation.
====================================
Version 4.9.54 (21-02-2014)
====================================
[!] Fixed a bug in HTTP sniffer filter and FORM/COOKIE based authentications.
====================================
Version 4.9.53 (20-02-2014)
====================================
[+] Added progress bar in Hostnames resolution function.
[+] Added callback functions for thread-safe operations by OpenSSL.
[!] OpenSSL library upgrade to version 1.0.1f.
====================================
Version 4.9.52 (15-01-2014)
====================================
[!] Fixed a bug in Cain's APR configuration dialog regarding to Spoofed IP address selection.
====================================
Version 4.9.51 (08-01-2014)
====================================
[+] Speed improvement in APR engine.
[+] Speed improvement all APR-SSL sniffer filters.
[!] Fixed a bug in Cain's Traceroute WHOIS resolver.
[!] ICMP and UDP Traceroute now uses Winpcap to send probe network packets.
====================================
Version 4.9.50 (10-12-2013)
====================================
[+] Anticompress option for APR-IMAPS (touch "COMPRESS=DEFLATE" field in capabilities from server).
[!] Paste operation now allowed in SQL Query tool.
[!] Fixed a bug Microsoft SQL Server Password Extractor via ODBC.
[!] Fixed some memory leaks in APR-SSL sniffer filters.
====================================
Version 4.9.49 (06-12-2013)
====================================
[+] Anticache option for APR-HTTPS/APR-ProxyHTTPS (touch "If-Modified-Since" and "If-None-Match" fields in HTTP headers from client).
[+] Anticompress option for APR-HTTPS/APR-ProxyHTTPS (touch "Accept-Encoding" field in HTTP headers from client).
[+] Speed improvement in Certificate Collector.
[+] Automatic extraction of Subject Common Name (CN) from server certificates to be used as hostname in APR-SSL lists.
[+] Preservation of Subject Alternative Name extension in fake certificates.
[+] New Base64 Password Decoder dialog.
====================================
Version 4.9.48 (03-12-2013)
====================================
[!] Fixed a bug in HTTPS and ProxyHTTPS sniffer filters causing crashes.
[!] Fixed a bug in DCE/RPC Sniffer filtercausing application crashes.
[!] OUI List updated.
====================================
Version 4.9.47 (25-11-2013)
====================================
[+] Added support for aes256-cts-hmac-sha1-96 hashes in Kerberos5 PreAuth Sniffer filter.
[!] Fixed a bug in LDAP Sniffer causing application crashes.
[!] Fixed some bugs in VoIP Sniffer causing application crashes.
[!] Fixed a bug in Passive Wireless Scanner related to clients identification.
[!] Fixed a bug WPA-PSK Authentications sniffer.
[!] Performance improvement in all sniffer filters.
====================================
Version 4.9.46 (27-05-2013)
====================================
[+] Added Windows Vault Password Decoder.
====================================
Version 4.9.45 (14-05-2013)
====================================
[+] Added support for Windows 8 RDP Client in APR-RDP sniffer filter.
[!] Fixed a bug in HTTPS and ProxyHTTPS sniffer filters causing crashes.
[!] Fixed a bug in Credential Manager Password Decoder.
====================================
Version 4.9.44 (03-05-2013)
====================================
[+] Added Windows 8 support in LSA Secret Dumper.
[+] Added Windows 8 support in Credential Manager Password Decoder.
[+] Added Windows 8 support in EditBox Revealer.
[+] Added ability to keep original extensions in fake certificates.
[!] Winpcap library upgrade to version 4.1.3 (Windows8 supported).
[!] OUI List updated.
====================================
Version 4.9.43 (03-12-2011)
====================================
[+] Added SAP R/3 sniffer filter for SAP GUI authentications and SAP DIAG protocol decompression.
[+] Added progress bar in Groups enumeration function.
[!] Fixed a bug connecting to Abel Remote Console if running on the same computer.
====================================
Version 4.9.42 (08-08-2011)
====================================
[+] Added support for Licensing Mode Terminal Server connections to Windows 2008 R2 servers in APR-RDP sniffer filter.
[!] Fixed a bug (crash) in Certificate Collector with Proxy settings enabled.
====================================
Version 4.9.41 (03-08-2011)
====================================
[+] Added support for MSCACHEv2 Hashes (used by Vista/Seven/2008) in Dictionary and Brute-Force Attacks.
[+] Added MSCACHEv2 Hashes Cryptanalysis via Sorted Rainbow Tables.
[+] Added MSCACHEv2 RainbowTables to WinRTGen v2.6.3.
[+] MS-CACHE Hashes Dumper now supports MSCACHEv2 hashes extraction from Windows Vista/Seven/2008 machines and offline registry files.
[!] Fixed a memory allocation bug in Cryptanalysis Attacks to support very small RainbowTables.
[!] Added UAC compatibility in WinRTGen v2.6.3.
====================================
Version 4.9.40 (07-04-2011)
====================================
[+] Added progress bar indicator in the off-line capture file function.
[!] Bug fixed in ProxyHTTPS Man-in-the-Middle Sniffer parsing "Connection Established" string.
[!] Bug fixed in VoIP Sniffer creating MP3 Mono files.
[!] Bug fixed in RTP Sniffer processing off-line capture files.
[!] WinRTGen recompiled with OpenSSL library version 0.9.8q.
====================================
Version 4.9.39 (02-03-2011)
====================================
[+] Added Proxy support for Cain's Certificate Collector.
[+] Added the ability to specify custom proxy authentication credentials for Certificate Collector.
[+] Added ProxyHTTPS Man-in-the-Middle Sniffer (TCP port 8080).
[!] HTTP, APR-HTTPS and APR-ProxyHTTPS sniffer filters are now separated.
[!] OpenSSL library upgrade to version 0.9.8q.
[!] Winpcap library upgrade to version 4.1.2.
====================================
Version 4.9.38 (01-02-2011)
====================================
[!] Fixed a Cain's runtime error when SIP/RTP sniffer filter is disabled.
[!] SIP, MGCP and RTP sniffer filters are now separated.
[!] Fixed RTP sniffer filter to avoid processing Link-local Multicast Name Resolution (LLMNR) traffic on UDP port 5355.
[!] Fixed RTP sniffer filter to avoid processing SSDP traffic on UDP port 1900.
[!] Fixed RTP sniffer filter to avoid processing Multicast DNS (MDNS) traffic on UDP port 5353.
[!] Improved RTP protocol validation function.
====================================
Version 4.9.37 (21-01-2011)
====================================
[+] Added TCP/UDP Large Send Offloading status detection on Windows Vista/Seven.
[!] Better handling of APR-SSL MitM threads.
[!] Fixed a problem with APR in Windows7 causing attacker's machine to be isolated from poisoned hosts.
[!] Speed improvement in Credential Manager Password Decoder for x64 operating systems.
====================================
Version 4.9.36 (19-06-2010)
====================================
[+] Added MP3 audio file generation in VoIP sniffer.
[!] Fixed Abel DLL crashes on 64-bit operating systems.
[!] Modified Export function to Users, Groups, Services and Shares lists with TAB separators.
[!] Fixed a bug in Wireless Password Decoder concerning Microsoft Virtual WiFi Miniport Adapter.
[!] Fixed a bug in NTLMv2 Cracker within the "Test Password" function.
[!] Removed "WindowsFirewallInitialize failed" startup error message if Windows Firewall service is stopped.
====================================
Version 4.9.35 (25-10-2009)
====================================
[!] Added Windows Firewall status detection on startup.
[!] Added UAC compatibility in Windows Vista/Seven.
[!] Winpcap library upgrade to version 4.1.1.
====================================
Version 4.9.34 (16-10-2009)
====================================
[!] Fixed a bug in Cain's configuration dialog.
====================================
Version 4.9.33 (16-10-2009)
====================================
[+] Added support for Windows 2008 Terminal Server in APR-RDP sniffer filter.
[!] Fixed a bug in all APR-SSL based sniffer filters to avoid 100% CPU utilization while forwarding data.
====================================
Version 4.9.32 (25-09-2009)
====================================
[+] Added Abel64.exe and Abel64.dll to support hashes extraction on x64 operating systems.
[+] Added x64 operating systems support in NTLM hashes Dumper, MS-CACHE hashes Dumper, LSA Secrets Dumper, Wireless Password Decoder,
Credential Manager Password Decoder, DialUp Password Decoder.
[+] Added Windows Live Mail (Windows 7) Password Decoder for POP3, IMAP, NNTP, SMTP and LDAP accounts.
[!] Fixed a bug of RSA SecurID Calculator within XML import function.
[!] Executables rebuilt with Visual Studio 2008.
====================================
Version 4.9.31 (27-05-2009)
====================================
[+] SIPS Man-in-the-Middle Sniffer (TCP port 5061; successfully tested with Microsoft Office Communicator with chained certificates).
[+] Added support for RTP G726-64WB codec (Wengo speex replacement ) in VoIP sniffer.
[!] X509 certificate's extensions are now preserved in chained fake certificates generated by Certificate Collector.
[!] Extended ASCII characters support for SSID in Passive Wireless Scanner.
[!] Some bugs in Cain's Traceroute fixed.
====================================
Version 4.9.30 (21-04-2009)
====================================
[+] Added support for the following codecs in VoIP sniffer: G722, Speex-16Khz, Speex-32Khz, AMR-NB, AMR-WB.
[!] Transmission rate fixed to 6Mbps in enumeration function of airpcap TX channels.
====================================
Version 4.9.29 (04-03-2009)
====================================
[+] Added Certificate Collector ability to generate self-signed or chained fake certificates.
[+] Added certificate format conversion function (from PKCS#12 to PEM).
[+] Added "_history_X" trailer to usernames extracted by History Hashes Dumper.
[!] Removed "Ctrl-S" and "Ctrl-N" hotkeys causing strange application behavior.
====================================
Version 4.9.28 (25-02-2009)
====================================
[!] Fixed a bug in all APR-SSL based sniffer filters to avoid 100% CPU utilization while forwarding data.
[!] Fixed a bug in Certificate Collector and automatic fake certificate generation (issuers with CN field instead of OU are now handled).
[!] Fixed a bug in PPPoE sniffer about CHAP-MD5 hashes incorrectly recognized as MS-CHAP hashes.
[!] OpenSSL library upgrade to version 0.9.8j.
[!] OUI List updated.
====================================
Version 4.9.27 (20-02-2009)
====================================
[+] Added channel hopping capability on A, BG and ABG channels in Passive Wireless Sniffer.
[+] Added support for A channels in Passive Wireless Sniffer.
[+] Added automatic detection of RX/TX ABG channels for AirPcap NX adapters.
[!] WEP ARP Injection thread now avoid sending packets to disassociated stations.
[!] Fixed a bug in visualization list of wireless clients (thanks: spino).
[!] Fixed a bug (program's crash) when starting the sniffer on wireless adapters (es Intel PRO/Wireless 3945ABG) using with Winpcap 4.x.
[!] Fixed a bug in WinRTgen about tables size visualization.
[!] AirPcap library upgrade to version 4.0.0 (to support the new AirPcap NX adapters from CACE Technologies).
[!] Winpcap library upgrade to version 4.1 beta 5.
====================================
Version 4.9.26 (05-01-2009)
====================================
[+] Added support for Licensing Mode Terminal Server connections in APR-RDP sniffer filter.
[!] Fixed RTP sniffer filter to avoid processing XBOX Live traffic on UDP port 3074.
[!] Fixed a possible buffer overflow condition in Cisco IOS-MD5 Cracker import function.
[!] Corrected some charsets in charset.txt file.
====================================
Version 4.9.25 (01-12-2008)
====================================
[!] Fixed a buffer overflow condition in Remote Desktop Password Decoder.
Advisory:
- http://secunia.com/advisories/32794/
- http://www.frsirt.com/english/advisories/2008/3286/products
PoC:
- http://www.milw0rm.com/exploits/7297
====================================
Version 4.9.24 (28-11-2008)
====================================
[+] Oracle 11g (case sensitive) Password Extractor via ODBC.
[+] Added Oracle 11g Password Cracker (Dictionary and Brute-Force Attacks).
[+] Added support for Oracle TNS 11g (AES-192) in Oracle TNS Hashes Password Cracker.
[+] Added support for Oracle TNS 11g (AES-192) in Oracle TNS sniffer filter.
[+] Experimental SQL Query tool via ODBC.
====================================
Version 4.9.23 (03-10-2008)
====================================
[+] Added LRWB-16Khz codec support in VoIP sniffer.
[+] Added MGCP/RTP sniffer filter. Cain can now extract SDP-RTP parameters from MGCP protocol.
[!] Fixed some bugs in SIP/RTP sniffer filter causing crashes while sniffing.
====================================
Version 4.9.22 (15-08-2008)
====================================
[!] All Dumper's DLL Injection functions have been rewritten to directly use undocumented ZwCreateThread
API instead of CreateRemoteThread. On XP/2003, Cain now supports passwords/hashes/secrets extraction even
if executed in Terminal Server sessions.
[!] Fixed a bug in dictionary attack "Double" option.
====================================
Version 4.9.21 (25-08-2008)
====================================
[+] Added dictionary attack variant "Double" to check for repeated passwords (Pass -> PassPass).
[+] Added dictionary attack variant "Numbers substitution permutations" with the following substitution rules:
o or O -> 0; i or I -> 1; z or Z -> 2; e or E -> 3; a or A -> 4; s or S -> 5;
[!] Modified the dictionary attack to support dictionary words with <space> character.
[!] Fixed some uppercase-only bugs in Dictionary Password Crackers.
[!] Fixed error lookup function to avoid "Failed to retrive error description !" message.
====================================
Version 4.9.20 (20-08-2008)
====================================
[+] Added PPPoE sniffer filter for PAP, CHAP, MS-CHAPv1 and MS-CHAPv2 authentications.
[+] Added GRE/PPP sniffer filter for MS-CHAPv2 authentications.
[+] Added automatic translation of MS-CHAPv2 to NT-challanges in "Send to Cracker" function.
[!] Modified the BPF filter to support processing of PPPoE packets.
[!] Increased the max password length for words in dictionary file to 64 characters.
[+] Added ability to change the initial position of dictionary files.
[!] Modified the dictionary attack dialog to show the current password tested during case permutations.
[!] Fixed a bug parsing RainbowTables filenames in subdirectories with "_" character.
[!] Fixed few lines in charset.txt file.
[!] OUI List updated.
====================================
Version 4.9.19 (17-07-2008)
====================================
[!] Added UserField and PassField columns in HTTP sniffer list.
[!] Added support for Remote Desktop client v6 in APR-RDP sniffer.
====================================
Version 4.9.18 (10-07-2008)
====================================
[!] Fixed a bug in offline NTLM hashes dumper when LM hash is not present.
[!] Charset file updated to support German an Danish special characters in rainbowtables (for Cain and Winrtgen).
====================================
Version 4.9.17 (07-07-2008)
====================================
[!] Fixed a bug in Oracle TNS sniffer filter for Oracle 8i authentications.
[!] Fixed a bug in Oracle TNS sniffer filter for Oracle 10g authentications.
[!] Fixed a bug in RTP sniffer: incorrect handling of multiple SSRC parameters within the same RTP session.
====================================
Version 4.9.16 (02-07-2008)
====================================
[+] Added support for Oracle TNS 10g (AES-128) in Oracle TNS Hashes Password Cracker.
[+] Added support for Oracle TNS 10g (AES-128) in Oracle TNS sniffer filter.
[+] Added a "Note" column in all Cracker's lists.
[!] Fixed a bug in offline NTLM hashes dumper when BootKey parameter is not specified.
====================================
Version 4.9.15 (20-06-2008)
====================================
[+] Oracle TNS Hashes Password Cracker (Dictionary and Brute-Force Attacks).
[+] Added Oracle TNS sniffer filter for DES and 3DES authentications.
[!] Fixed a bug in VNC sniffer filter for new RFB protocol versions.
[!] Fixed a bug with TCP/UDP/ICMP traceroute and Windows raw socket error code 10022.
[!] Fixed a bug in RSA SecurID Calculator for tokens with serial numbers of more than 8 digits.
[!] Fixed a bug in Dictionary Attack crackers regarding Mixed Hybrid and Case Permutations variants for each word.
[!] Fixed a bug in challenge spoofing and NTLM downgrading when one of the victim hosts is a gateway.
[!] OpenSSL library upgrade to version 0.9.8h.
====================================
Version 4.9.14 (06-03-2008)
====================================
[+] Added sniffer analysis on GRE/PPP incapsulated traffic; MPPC compression not supported yet.
[!] Fixed a bug reading packets from from external capture files: Ethernet FCS numbers strip-off.
====================================
Version 4.9.13 (04-03-2008)
====================================
[+] Added GRE/PPP sniffer filter for PAP, CHAP and MS-CHAPv1 (LM & NTLM) authentications.
[+] CHAP-MD5 (Dictionary and Brute-Force Attacks).
====================================
Version 4.9.12 (28-02-2008)
====================================
[+] Added Windows Vista compatibility in all APR-SSL sniffers.
====================================
Version 4.9.11 (26-02-2008)
====================================
[+] Added support for new Aircrack-ng's IVs file format in WEP IVs sniffer and cracker.
[+] Added ability to hash bytes in Hashes Calculator.
[!] Fixed Cain logo half-visualization in Windows Vista with Desktop Composition enabled.
[!] Fixed a bug in RSA SecurID XML single token add function.
[!] Modified separator character in cracker's and sniffer's LST files from ";" to "TAB".
====================================
Version 4.9.10 (11-12-2007)
====================================
[+] Added Remote Registry Editor.
[!] Fixed a bug in RSA SecurID XML import function.
[!] AirPcap library upgrade to version 3.2.
[!] Winpcap library upgrade to version 4.0.2.
====================================
Version 4.9.9 (28-11-2007)
====================================
[+] Added SIREN codec support in VoIP sniffer.
====================================
Version 4.9.8 (26-10-2007)
====================================
[+] Added support for new AES-128bit Keyfobs in RSA SecurID Token Calculator.
[-] Removed support for old 64bit Keyfobs in RSA SecurID Token Calculator.
====================================
Version 4.9.7 (09-10-2007)
====================================
[+] Microsoft SQL Server 2005 Password Extractor via ODBC.
[!] Fixed a bug in Internet Explorer 7 AutoComplete password decoder.
[!] Default HTTP users and passwords fields updated.
[!] Automatic recognition of AirPcap TX capability based on channels.
====================================
Version 4.9.6 (29-07-2007)
====================================
[+] Added Windows Vista support in LSA Secrets Dumper for external registry files (Policy revision > 9, AES-SHA256).
[!] Fixed a bug in LSA Secrets Dumper causing application crashes.
[!] Fixed a bug in NT Hashes dumper for hive files when only NT hashes are present.
[!] Winpcap library upgrade to version 4.0.1.
====================================
Version 4.9.5 (17-07-2007)
====================================
[+] Added Windows Vista support for Active Wireless Scanner.
[+] Off-line capture file processing now compatible with 802.1Q Vlan encapsulation.
[+] Sniffer filter for LDAP passwords.
[+] Automatic Certificate Collector for LDAPS protocol.
[+] LDAPS Man-in-the-Middle Sniffer and password collector (TCP port 636).
====================================
Version 4.9.4 (19-06-2007)
====================================
[+] Automatic Certificate Collector for FTPS (implicit), IMAPS and POP3S protocols.
[+] FTPS Man-in-the-Middle Sniffer and password collector (Implicit FTPS on TCP port 990).
[+] POP3S Man-in-the-Middle Sniffer and password collector (TCP port 995).
[+] IMAPS Man-in-the-Middle Sniffer and password collector (TCP port 993).
====================================
Version 4.9.3 (30-05-2007)
====================================
[+] Added Windows Mail (Vista) Password Decoder for POP3, IMAP, NNTP, SMTP and LDAP accounts.
[!] Wireless Password Decoder incorrectly sends decoded WPAPSK passwords to the cracker.
====================================
Version 4.9.2 (23-05-2007)
====================================
[+] Added PTW WEP cracking attack.
[+] Added Windows Vista support in Wireless Password Decoder.
[!] Wireless Password Decoder now uses DLL injection under XP.
====================================
Version 4.9.1 (03-05-2007)
====================================
[+] Added Windows Vista support in NT Hashes Dumper.
[+] Added Windows Vista support in LSA Secrets Dumper.
[+] Added Windows Vista support in Credential Manager Password Decoder.
[+] Added Windows Vista support in DialUp Password Decoder.
[+] Added Windows Vista support in all DLL Injection functions.
[+] Added support for Internet Explorer 7 AutoComplete passwords.
[+] Added support for Outlook Express Deleted Accounts in Protected Storage Password Manager.
[!] Added a control function to avoid IP/MAC spoofing when promiscuous mode is disabled.
====================================
Version 4.9 (13-04-2007)
====================================
[!] Added Vista compatibility in the enumeration of network adapter's IP parameters.
[!] Added capability to find a remote writable share installing Abel service.
====================================
Version 4.8 (03-04-2007)
====================================
[+] WPA-PSK Hashes Cryptanalysis via Sorted Rainbow Tables.
[+] WPA-PSK RainbowTables have been added to Winrtgen v2.5.
====================================
Version 4.7 (26-03-2007)
====================================
[+] WPA-PSK Authentications sniffer.
[!] Fixed a bug sending WPA-PSK hashes to the cracker.
[!] OpenSSL library upgrade to version 0.9.8e.
====================================
Version 4.6 (16-03-2007)
====================================
[+] WPA-PSK (Dictionary and Brute-Force Attacks).
[+] WPA-PSK Auth (Dictionary and Brute-Force Attacks).
[+] Added IE7 passwords support in Credential Manager Password Decoder.
[!] Fixed high CPU usage into wireless ARP Injection thread when no ARP request packets are available.
====================================
Version 4.5 (25-02-2007)
====================================
[+] Added Windows Vista compatibility in NTLM Hashes Dumper, LSA Hashes Dumper and Syskey Dumper for hive files.
[!] Fixed a bug in Wireless AP and Stations lists.
[!] Fixed a bug in NTLM Hashes Dumper for hive files.
====================================
Version 4.4 (21-02-2007)
====================================
[+] WEP cracking speed up via wireless ARP requests injection (AirPcap USB adapter is needed).
This feature actually works with Airpcap drivers v2.0 beta TX; the release version v2.0 of those drivers
still have problems sending wireless frames.
[+] Ability to deauthenticate client stations from Access Points.
====================================
Version 4.3 Release (29-01-2007)
====================================
[+] Ability to dump LSA Secrets directly from SYSTEM and SECURITY registry hive files.
[+] Added HALFLMCHALL hashes submission to rainbowcrack-online client.
[+] Winrtgen v2.4 added to installation package.
[!] Added a function to Auto-Clear the WAN list every 30 minutes.
[!] Fixed a list bug when cracking LM+challange hashes with cryptanalysis and brute-force attacks.
[!] Winpcap library upgrade to version 4.0 final.
====================================
Version 4.2 Release (30-11-2006)
====================================
[+] Added "Challenge Spoofing" configuration dialog.
[+] Added "Challenge Spoofing Reset" button to limit spoofed challenges in the first NTLM authentication only.
[!] Separated "Challenge Spoofing" and "NTLM Downgrading" functions.
[!] Removed Winrtgen fixed challenge limitation for "lmchall", "ntlmchall" and "halflmchall" tables.
[!] Added Cain support for RinbowTables with a custom spoofed challenge.
[!] SID Scanner modified for custom starting RID.
====================================
Version 4.1 Release (23-11-2006)
====================================
[+] HALFLM + spoofed challenge Hashes Cryptanalysis via Sorted Rainbow Tables.
[+] New types of RainbowTables have been added to Winrtgen v2.2.
"halflmchall" tables can be used against the first 8 bytes LM response hashes for spoofed challenges (0x1122334455667788)
to recover the first 7 characters of the original password.
====================================
Version 4.0 Release (22-11-2006)
====================================
[+] Cain's MitM NTLM Challenge Spoofing. (Requires APR to be active and a MitM condition between victim hosts)
You can now spoof server challenges in NTLM authentications; this feature enables the use of RainbowTables for cracking network hashes.
WARNING !!! Enabling Challenge Spoofing cause users to fail authentications so please use it carefully.
[+] NTLM Session Security authentications downgrade to LM&NTLMv1.
The following protocols are supported: SMB, DCE/RPC, TDS, HTTP, POP3, IMAP, SMTP.
[+] LM + spoofed challenge Hashes Cryptanalysis via Sorted Rainbow Tables.
[+] NTLM + spoofed challenge Hashes Cryptanalysis via Sorted Rainbow Tables.
[+] New types of RainbowTables have been added to Winrtgen v2.1.
"lmchall" and "ntlmchall" tables can be used against LM and NTLM response hashes for spoofed challenges (0x1122334455667788).
====================================
Version 3.9 Release (17-11-2006)
====================================
[+] Ability to dump MS-CACHE hashes directly from SYSTEM and SECURITY registry hive files.
====================================
Version 3.8 Release (12-11-2006)
====================================
[!] Fixed a bug during OphCrack's RainbowTables attack againts big number of hashes.
====================================
Version 3.7 Release (12-11-2006)
====================================
[+] AirPcap library upgrade to version 2.0 beta2.
[!] Fixed problems during OphCrack's RainbowTables recognition.
====================================
Version 3.6 Release (10-11-2006)
====================================
[+] Added Ophcrack's RainbowTables support for NTLM Hashes Cryptanalysis attack.
[!] Winpcap library upgrade to version 4.0 beta2.
====================================
Version 3.5 Release (09-11-2006)
====================================
[+] ORACLE Hashes Cryptanalysis via Sorted Rainbow Tables.
[+] A new type of RainbowTables has been added to Winrtgen v2.0. "oracle" tables can be used against ORACLE hashes for
specific usernames that can be set in the configuration dialog.
====================================
Version 3.4 Release (07-11-2006)
====================================
[+] MSCACHE Hashes Cryptanalysis via Sorted Rainbow Tables.
[+] A new type of RainbowTables has been added to Winrtgen v1.9. "mscache" tables can be used against MSCACHE hashes for
specific usernames that can be set in the configuration dialog.
[!] Fixed a bug in TDS sniffer filter for NTLM authentications.
[!] DCE/RPC sniffer filter now follows dynamic TCP ports.
[!] Fixed startup problem using WinPcap driver 3.1.
[!] Fixed a problem within syskey dumper (now looking for the correct ControlSet LSA key).
[!] Fixed a memory allocation error in cryptanalysis attack via Ophcrack's RainbowTables on systems with 2Gb of RAM or more.
====================================
Version 3.3 Release (27-10-2006)
====================================
[!] Fixed a problem in G722.1 codec initialization causing Cain crashes while sniffing or processing capture files.
====================================
Version 3.2 Release (27-10-2006)
====================================
[+] Added an option to disable the promiscuous mode of the network card (NDIS_PACKET_TYPE_ALL_LOCAL will be used instead).
[!] Fixed a problem within dictionary attack dialog.
[!] Fixed a problem with bugus lengths in UDP header.
====================================
Version 3.1 Release (26-10-2006)
====================================
[+] Sniffer filter for DCE/RPC authentications (Outlook connectiing to Exchange server).
[!] Fixed a problem in MS-CACHE hashes dumper.
[!] Fixed a memory allocation error in cryptanalysis attack via RainbowTables on systems with 2Gb of RAM or more.
[!] Second half of LM passwords, if valid, are immediately processes by cryptanalysis attack via RainbowTables to save time.
====================================
Version 3.0 Release (18-10-2006)
====================================
[+] Support for AirPcap USB 2.0 adapter in Wireless Scanner.
[+] Passive Wireless Scanner with channel hopping support.
[+] AirpCap.DLL dynamically linked.
[+] WEP IVs sniffer. (Capture files are compatible with Aircrack's .ivs files)
[+] 802.11 capture files analyzer compatible with PCAP and Aircrack's .ivs file formats.
[+] 802.11 capture files decoder (support WEP and WPA-PSK encryption.
[+] WPA-PSK pre-shared key calculator.
[+] WEP Keys Cracker using Korek Attack (64-bit and 128-bit key length supported).
[!] Off-line capture file processing now compatible with Wireless extensions.
[+] Added G722.1 codec support in the VoIP sniffer.
[+] Added support fo Winpcap library version 4.0 and higher.
[!] Voip sniffer decoding problem when the communication is made by different codecs.
[!] WSNMPAPI.DLL dynamically linked to let Cain start on systems where that DLL is not present.
[!] OpenSSL library upgrade to version 0.9.8d.
[!] Winpcap library upgrade to version 4.0 beta1.
[!] OUI List updated.
====================================
Version 2.9 Release (22-05-2006)
====================================
[+] Added Ophcrack's RainbowTables support for LM Hashes Cryptanalysis attack.
[!] Fixed support fo Winpcap library version 3.2 in Wireless Scanner.
====================================
Version 2.8.9 Release (19-04-2006)
====================================
[!] RASAPI32.DLL dynamically linked to let Cain start on Windows NT systems where that DLL is not present.
[!] Added support fo Winpcap library version 3.2.
[!] Fixed problems for some German's characters in Dictionary Cracker. Thanks to bd66 for the bug report.
[!] OUI List (UPDATED).
====================================
Version 2.8.8 Release (16-03-2006)
====================================
[!] RAPI.DLL dynamically linked to let Cain start if ActiveSync is not installed.
====================================
Version 2.8.7 Release (16-03-2006)
====================================
[+] Added hashes syncronization functions (Export/Import) to/from Cain for PocketPC via ActiveSync.
====================================
Version 2.8.6 Release (16-02-2006)
====================================
[+] Added VoIP sniffer support for the following codecs: G723.1, G726-16, G726-24, G726-32, G726-40, LPC-10.
==========================================
Version 2.8.5 Private Release (25-01-2006)
==========================================
[!] Bug fixed in HTTP sniffer. Thanks to bd66 for the bug report.
====================================
Version 2.8.4 Release (10-01-2006)
====================================
[!] Manual updated.
[!] Little bug fixed in Rainbowcrack-online client.
====================================
Version 2.8.3 Release (26-12-2005)
====================================
[!] Installation package rewritten using NullSoft Install system.
[!] Bug fixed in Rainbowcrack-Online client when there are no hashes in list.
[!] Bug fixed in Syskey dumper.
====================================
Version 2.8.2 Release (14-12-2005)
====================================
[+] Rainbowcrack-Online client.
Cain can now submit and retrieve hashes/passwords to/from the online cracking
service at www.rainbowcrack-online.com. Of course you need a valid account to
use this feature. The communication from Cain and the web site is SSL enabled.
====================================
Version 2.8.1 Release (09-11-2005)
====================================
[+] Oracle Password Cracker (Dictionary and Brute-Force Attacks).
[+] Oracle Password Extractor via ODBC.
[+] MySQL Password Extractor via ODBC.
[!] Bug fixed in MySQL password sniffer (incorrect challenge length).
[!] UDP port 1812 added by default to RADIUS sniffer filter.
====================================
Version 2.8 Release (17-10-2005)
====================================
[+] Cisco VPN Client Password Decoder.
[!] OpenSSL library upgrade to version 0.9.8a.
====================================
Version 2.7.9 Release (16-10-2005)
====================================
[+] Added "Export" and "Refresh" functions to Wireles Scanner list.
[!] Fixed a serious bug in Cain's internals.
[-] Removed some low-used icons from the toolbar.
====================================
Version 2.7.8 Release (09-10-2005)
====================================
[!] Fixed a bug in tooltip visulization.
====================================
Version 2.7.7 Release (07-10-2005)
====================================
[+] Wireless Zero Configuration Password Dumper.
====================================
Version 2.7.6 Release (21-09-2005)
====================================
[!] Fixed a problem in the LSA Secrets Dumper causing system crashes. Thanks to Nicolas RUFF for
the bug report.
====================================
Version 2.7.5 Release (07-09-2005)
====================================
[!] Fixed a problem with extended ASCII characters in the Cryptanalysis Attack. Thanks to Ramius
from http://www.rainbowtables.net/ for the bug report.
====================================
Version 2.7.4 Release (07-09-2005)
====================================
[+] Syskey Decoder. Cain can now extract the Boot Key, generated with the Syskey utility, from the local system
or external registry files (Eg: C:\<windir>\system32\config\system).
[+] NT Hashes Dumper can now extract password hashes from external SAM files encrypted with the Syskey utility.
[!] OpenSSL library upgrade to version 0.9.8.
[!] Winpcap library updated to version 3.1.
====================================
Version 2.7.3 Release (10-06-2005)
====================================
[!] Fixed another little bug in fastlm RainbowTable's algorithm.
[+] Winrtgen v1.7 added to the installation package.
====================================
Version 2.7.2 Release (09-06-2005)
====================================
[!] Fixed another little bug in RainbowTable's verification function.
[+] Winrtgen v1.6 added to the installation package.
====================================
Version 2.71 Release (31-05-2005)
====================================
[!] Fixed a little bug in RainbowTable's verification function.
====================================
Version 2.7 Release (28-05-2005)
====================================
[+] RDPv4 session sniffer for APR (experimental).
Cain can now perform man-in-the-middle attacks against the heavy encrypted Remote Desktop Protocol (RDP),
the one used to connect to the Terminal Server service of a remote Windows computer. The entire session
from/to the client/server is decrypted and saved to a text file. Client-side key strokes are also decoded
to provide some kind of password interception. The attack can be completely invisible because of the use
of APR (Arp Poison Routing) and other protocol weakness.
[!] Winrtgen v1.4 added to the installation package.
====================================
Version 2.69 Release (07-05-2005)
====================================
[+] A new type of Rainbow Tables has been added to Winrtgen v1.3. "FastLM" tables can be used against
LM Hashes and provide both faster generation and cryptanalysis. FastLM tables are not compatible with
standard tables for LM Hashes generated by RainbowCrack, renaming the filenames is useless.
[+] LM Hashes Cryptanalysis via FastLM Sorted Rainbow Tables.
[+] Winrtgen v1.3 added to installation package.
[!] Benchmark added to Cain's cryptanalysis dialog.
[!] Fixed a bug in Kerberos5 sniffer filter.
[!] Fixed a bug in SNMP community sniffer filter.
====================================
Version 2.68 Release (22-04-2005)
====================================
[+] Off-line capture file processing compatible with winpcap, tcpdump, ethereal format.
[+] Sniffer filter for SIP-MD5 authentications.
[+] Brute-Force and Dictionary Attacks for SIP-MD5 Hashes.
[+] Cain's MSCACHE Hashes Dumper.
[+] Brute-Force and Dictionary Attacks for MSCACHE Hashes.
[+] VNC Hash added to the Hash Calculator.
[!] Fixed "unknown" type in IKE-PSK hashes list.
[!] Sniffer's lists code cleanup.
[!] OpenSSL library upgrade to version 0.9.7g.
====================================
Version 2.67 Release (20-03-2005)
====================================
[!] Fixed several HEAP overflow conditions in POP3, IMAP, SMTP, NNTP and TDS sniffer filters.
====================================
Version 2.66 Release (16-03-2005)
====================================
[!] Fixed a buffer overflow condition in IKE-PSK sniffer handling long ID strings.
[!] Fixed a buffer overflow condition in HTTP sniffer handling long usernames or passwords.
====================================
Version 2.65 Release (26-02-2005)
====================================
[!] SIP/RTP sniffer filter redesigned.
[!] VoIP sniffer general code cleanup.
[!] Bug fixed in the "Test password" function in LM & NTLM Hashes list; thanks to Pawel Goleñ for the bug report.
====================================
Version 2.64 Release (26-02-2005)
====================================
[+] Added Export function to Users, Groups, Services and Shares lists.
====================================
Version 2.63 Release (25-02-2005)
====================================
[!] Fixed a bug in VoIP sniffer. Thanks to Peter Sommer for the bug report and beta testing.
====================================
Version 2.62 Release (24-02-2005)
====================================
[!] Fixed a bug in APR and DNS protocol; thanks to Patrick Geschwindner for reporting this bug.
====================================
Version 2.61 Release (24-02-2005)
====================================
[!] Fixed a bug in VoIP sniffer when the ACK packet of the SIP handshake is seen after RTP stream packets.
====================================
Version 2.6 Release (21-02-2005)
====================================
[+] Experimental VoIP Sniffer
The sniffer can now extract audio conversations based on SIP/RTP protocols and save them into WAV files.
The following codecs are supported: G711 uLaw, G711 aLaw, GSM, MS-GSM, ADPMC, DVI, LPC, L16, G729, Speex, iLBC.
[!] RC4 Key for encrypted pipes changed to "Cain & Abel".
====================================
Version 2.5 Release (15-12-2004)
====================================
[+] Winrtgen v1.2 added to installation package.
[+] Cain & Abel v2.5 User Manual added to installation package.
[!] HTTPS acceptor sockets is now active only when APR is enabled.
[!] Problem with PWL Dictionary Cracker.
[!] OUI List (UPDATED).
[!] Bug fixing in cryptanalysis charsets.
[!] Bug fixing in HTTPS to HTTP sniffer using custom ports.
[!] Bug fixing in Protected Storage Password Manager.
[!] ParseURL function in Certificate Collector (you can now use server:port syntax).
[!] Resolve best gateway in APR (Cain's APR follows the local route table when it does not know where to re-route packets).
====================================
Version 2.5 beta65 (01-12-2004)
====================================
[+] Brute-Force and Dictionary Attacks for SHA-2(256), SHA-2(384), SHA-2(512)Hashes.
[+] SHA-2(256), SHA-2(384), SHA-2(512)Hashes Cryptanalysis via Sorted Rainbow Tables.
[!] TCP Traceroute now uses Winpcap to bypass Windows XP SP2 restrictions on raw sockets.
[!] Problem adding multiple Rainbow Tables to the list.
====================================
Version 2.5 beta64 (20-11-2004)
====================================
[+] Added Hashes of type SHA-2(256), SHA-2(384), SHA-2(512) in Hash Calculator.
[+] Export function in Dialup Password Decoder.
[!] HTTP Sniffer collects only few passwords in POST methods packets.
[!] Sniffer filters still enabled if their checkbox is cleared in configuration dialog.
[!] Problems with username's length > 32 characters in Brute-Force and Dictionary Crackers.
====================================
Version 2.5 beta63 (10-11-2004)
====================================
[+] Password decoders for MSN Explorer Sign In, MSN Explorer Autocomplete,
Outlook Express Identity Manager, Outlook Express (HTTP Mail) and Outlook (IMAP,POP3,...)
in Protected Storage Password Manager.
[+] Support for Outlook Express multiple identity in Protected Storage Password Manager.
[+] Hash Calculator support for SHA-2 (256,384,512) hashes.
====================================
Version 2.5 beta62 (06-11-2004)
====================================
[+] Ability to insert/modify sniffer's TCP/UDP protocol ports.
[+] Ability to insert/modify Username and Password Fields used by HTTP Sniffer Filter.
[+] Ability to select active DNS names to spoof in APR-DNS.
[!] Winpcap library updated to version 3.1 beta4.
[!] Minor bugs fixed.
====================================
Version 2.5 beta61 (28-10-2004)
====================================
[+] SNMP Community Sniffer
[+] Support for Extended ASCII passwords (eg: mäö) in LM Hashes crackers (Dictionary and Brute-Force).
[!] NTLM Brute-Force Attack does not work with Extended ASCII passwords (eg: màò).
[!] Dictionary attack hangs in Case permutation of Extended ASCII passwords.
[!] Added hash type column in LM & NTLM Cracker for fast recognition of hashes.
[!] OpenSSL library upgrade to version 0.9.7e.
====================================
Version 2.5 beta60 (14-10-2004)
====================================
[+] Credential Manager Password Decoder for Windows XP/2003.
[!] OUI List (UPDATED).
====================================
Version 2.5 beta59 (26-09-2004)
====================================
[+] Added Abel-side Password History Hashes Dumper.