IBM i Access Client Solutions Password Dumper

See our blog post for details: https://blog.silentsignal.eu/2025/01/21/ibm-acs-password-dump/

ACS before CVE-2016-0287

This one works by brute-forcing half of the round 2 key:

python3 acs_dump_old.py WIN-N6MF export_old.reg

ACS after CVE-2016-0287

This one requires the Build GUID and Product ID from the target machine:

python3 acs_dump_new.py WIN-46VO ffffffff-ffff-ffff-ffff-ffffffffffff 00431-10000-00000-AA321 export_new.reg