Ointment exploits a design problem with the Palm OS Debug Mode and the use of weak obfuscated system passwords. Ointment will emulate the Palm OS serial link protocol (SLP) and the 'export' and 'reset' commands of the Palm OS Console Debug Mode, retrieve the encoded password block from the "Unsaved Preferences" database of the target device, and decode and display the resultant ASCII password.

Platforms: Palm OS 3.5.2 and earlier

Tool: Ointment: A password recovery tool for Palm OS devices

Documentation: How to Apply Ointment