sumous / anti_sign Goto Github PK
View Code? Open in Web Editor NEW反各种签名算法
反各种签名算法
大佬好,我现在已经破解了 macOS 版微信的 Backup.db 文件,方法见链接:https://github.com/nalzok/wechat-decipher-macos
接下来我希望从 BAK_0_TEXT 和 BAK_0_MEDIA 这两个文件中提取聊天记录,但是根据观察 macOS 版微信应该是直接把移动端发过来的加密数据包追加写进 BAK_0_TEXT 文件的,并没有在电脑端上使用 AES 解密。如果要进一步分析,那我还得去找台 root 或者越狱过的移动设备,而且我对移动端的逆向工程本身就不了解,就很麻烦。
不过我发现电脑端和手机端互相发 dataPush 协商同步聊天记录的时候用的 RC4 密钥和加密 Backup.db 时用的 AES 密钥一致,所以盲猜这两个文件用的密钥也是它,但解密用的参数我不清楚。目前试了下面的参数,没有成功。例子中的 501264
是 Backup.db
的 MsgSegments
表中第一行的 Length
字段,目的是要分割出供解密的第一块,然后密钥是 32 个 hexadecimal digits,来自 xlogger 日志中的 DEBUG: backup db: encryptkey[xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx] from server
$ head -c 501264 BAK_0_TEXT > BAK_0_TEXT_CHUNK
$ openssl enc -d -aes-256-cbc -in BAK_0_TEXT_CHUNK -out PWN_BAK_0_TEXT_CHUNK -k xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
bad magic number
想知道我现在的方向对不对,另外请教一下把这个文件的每一块分割好之后用 AES 解密的参数应该是什么?如果担心这里说话不方便,我们也可以通过邮件交流 [email protected]
打算开放potato协议代码,基于telegram的python库telethon进行修改,但并不是所有的接口都支持。基本上登录、获取验证码、获取聊天内容、获取聊天列表、获取联系人等接口、下载图片/视频都是有的
如题
老哥,想获取用户所有作品,接口中有个sig参数,不知道怎么生成。
Please help me
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.