NPART v1.00

1.1 What does NPART do?

NPART stands for Navision Password Auditing & Recovering Tool.

NPART provides two critical capabilities to Navision administrators:

• NPART helps administrators secure Navision implementations through comprehensive auditing of Navision user account passwords.
• NPART recovers Navision user account passwords

NPART uses dictionary words to try to recover the passwords. A future version will have brute force auditing available.

NPART is not a hacking or cracking tool, because one need to have access to the User table (Table 2000000002) in Navision. If a user does not have permissions to read the User table, and does not have permissions to access the NPART objects, this tool cannot be used.

1.2 Installation

Import the file npart.fob into a Navision database. NPART has been tested with Navision Attain W1 3.60. The file npart.fob contains following objects:

Table    50000 NPART Dictionary        20/01/03       12:00:00     528  NPART1.00
Table    50001 NPART Users             20/01/03       12:00:00    1264  NPART1.00
Table    50003 NPART Setup             20/01/03       12:00:00    1436  NPART1.00
Form     50000 NPART Wizard            20/01/03       12:00:00   52496  NPART1.00
Form     50001 NPART Users Subform     20/01/03       12:00:00    4956  NPART1.00
Form     50002 NPART Subform           20/01/03       12:00:00    7628  NPART1.00
Form     50003 NPART                   20/01/03       12:00:00   24928  NPART1.00
Form     50004 NPART About             20/01/03       12:00:00   19636  NPART1.00
Dataport 50000 Import Dictionary       20/01/03       12:00:00   10792  NPART1.00
Dataport 50001 Import Users            20/01/03       12:00:00    3348  NPART1.00

If the Users table does not contain the users you want to audit, then you can use Dataport 50001 to import the users-info from another database. Therefore you need to import dataport 50001 into the database which contains the users (eventually renumber the dataport, if the objectnumber is already taken). Export the info to a text-file.

Run form 50003 NPART. This is the main form from where all actions take place.

Select "Import/Export Users" if you have created a text-file with all the user-information. This will import the user data into the table Users.

Select "Import dictionary" and choose one of the dictionaries of your choice.

Select "Run wizard". The wizard will let you choose which users you want to audit. The other options are reserved for future versions.

After you have run the wizard, the auditing will start.

You can always import another dictionary, to try different words. After you have imported all the words, just select "Start Audit" to start auditing with the new dictionary.

1.4 History

20/01/2003

Initial release 1.00

1.5 TODO

• Brute force recovery of passwords
• Timing the auditing

If you want to report any bugs or changes, please be free to write me at luc@vandyck.net or leave a note in the forum on http://www.mibuso.com.