hayasec / 360safebrowsergetpass Goto Github PK
View Code? Open in Web Editor NEW这是一个一键辅助抓取360安全浏览器密码的CobaltStrike脚本以及解密小工具,用于节省红队工作量,通过下载浏览器数据库、记录密钥来离线解密浏览器密码。
这是一个一键辅助抓取360安全浏览器密码的CobaltStrike脚本以及解密小工具,用于节省红队工作量,通过下载浏览器数据库、记录密钥来离线解密浏览器密码。
(51637587F6BB463a92D17DD7903A1F6F)VrKqbejDEDzuHB/xvbseUCKB08H0FaBt1UkraRnv4evJmsBhokroJytFrfX5E7jGqmKpKnpboRzs6EhMVmrBMypsqivrLZxCwvvM013s6zw=
好像是登录账号同步过来的数据就是上面这样的。
实际测试中我的数据是这样的,而并非(4B01F200ED01)xxxxxxxxx=
用lz代码并不能正常解密出来。
不是那么简单的,替换了ID是能解开数据库了.还有第二层加密你要解开.第三层混淆你要解开.
LZ有sqlite3.dll的源码吗?
想具体看一下sqlite3_key的实现原理,官网的sqlite开源代码中并没有sqlite3_key这个函数,搜了下好像说收费版有。
然后网上的其他版本 SQLCipher 这个的sqlite3_key和LZ的好像不太一样,cipher的需要循环次数pbkdf,而LZ这个似乎没有传入过多参数,还有一个wxSqlite3这个我看了好像也对不上。或者LZ的sqlite3.dll下载地址来源能给一个吗?谢了
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.