Outlook Express password retrieval

A user was converting from Outlook Express to Thunderbird (at my recommendation) and did not remember her password. I found a program called abfpr, which claims to retrieve passwords not just OE but several others as well. I tried the trial version (avg scanned before and after unzipping - clean), which only shows the first three characters... and it was enough to jog her memory and the day was saved without having to jack around with AT&T tech support...

I promptly removed it anyway), but it seems like a possibly worthwhile thing to have in the toolkit... I usually contact ISP and have the p/w changed.

Question: has anyone had experience with this software?

 

Interesting. In the past, I've just opened a listening port 110 on localhost using netcat and added an entry to the hosts file redirecting their mail server to localhost. Then connected with outlook express and in netcat emulated the POP3 serverside protocol by hand.

Outlook express and every other email program that is configured to do POP3 will gladly give up the password in plaintext.

Optionally, you could use a packet sniffer to pick up the packets from the mail client and look at the password that way as it negotiates with the server (assuming you can configure it to not use an encryption layer).