Added more screenshots
@ -149,13 +149,13 @@ if ${FSSTAT_BIN} -o "${OFFSET}" "${SOURCE}" > /dev/null 2>&1 ; then
|
|||||||
if ! ${ICAT_BIN} -o "${OFFSET}" "${SOURCE}" "${user}" > "/tmp/${user}.plist" ; then
|
if ! ${ICAT_BIN} -o "${OFFSET}" "${SOURCE}" "${user}" > "/tmp/${user}.plist" ; then
|
||||||
echo " During the execution of icat an error occurred." >> "${CREDENTIALS}"
|
echo " During the execution of icat an error occurred." >> "${CREDENTIALS}"
|
||||||
fi
|
fi
|
||||||
${PLUTIL_BIN} -i "/tmp/${user}.plist" -o "${DIRNAME}/${user}.plist"
|
${PLUTIL_BIN} -i "/tmp/${user}.plist" -o "${TMP}/${user}.plist"
|
||||||
${RM_BIN} "/tmp/${user}.plist"
|
${RM_BIN} "/tmp/${user}.plist"
|
||||||
fi
|
fi
|
||||||
echo -e -n " " >> "${CREDENTIALS}"
|
echo -e -n " " >> "${CREDENTIALS}"
|
||||||
${PPEPY_BIN} "${DIRNAME}/${user}.plist" "name" >> "${CREDENTIALS}"
|
${PPEPY_BIN} "${TMP}/${user}.plist" "name" >> "${CREDENTIALS}"
|
||||||
echo -e -n " " >> "${CREDENTIALS}"
|
echo -e -n " " >> "${CREDENTIALS}"
|
||||||
${PPEPY_BIN} "${DIRNAME}/${user}.plist" "hint" >> "${CREDENTIALS}"
|
${PPEPY_BIN} "${TMP}/${user}.plist" "hint" >> "${CREDENTIALS}"
|
||||||
echo >> "${CREDENTIALS}"
|
echo >> "${CREDENTIALS}"
|
||||||
done
|
done
|
||||||
else
|
else
|
||||||
@ -172,15 +172,15 @@ if ${FSSTAT_BIN} -o "${OFFSET}" "${SOURCE}" > /dev/null 2>&1 ; then
|
|||||||
echo " During the execution of icat an error occurred." \
|
echo " During the execution of icat an error occurred." \
|
||||||
>> "${CREDENTIALS}"
|
>> "${CREDENTIALS}"
|
||||||
fi
|
fi
|
||||||
${PLUTIL_BIN} -i "/tmp/${calp}.plist" -o "${DIRNAME}/${calp}.plist"
|
${PLUTIL_BIN} -i "/tmp/${calp}.plist" -o "${TMP}/${calp}.plist"
|
||||||
${RM_BIN} "/tmp/${calp}.plist"
|
${RM_BIN} "/tmp/${calp}.plist"
|
||||||
fi
|
fi
|
||||||
echo -e -n " Some content from com.apple.loginwindow.plist:\n " \
|
echo -e -n " Some content from com.apple.loginwindow.plist:\n " \
|
||||||
>> "${CREDENTIALS}"
|
>> "${CREDENTIALS}"
|
||||||
${PPEPY_BIN} "${DIRNAME}/${calp}.plist" "lastUserName" \
|
${PPEPY_BIN} "${TMP}/${calp}.plist" "lastUserName" \
|
||||||
>> "${CREDENTIALS}"
|
>> "${CREDENTIALS}"
|
||||||
echo -e -n " " >> "${CREDENTIALS}"
|
echo -e -n " " >> "${CREDENTIALS}"
|
||||||
${PPEPY_BIN} "${DIRNAME}/${calp}.plist" "autoLoginUser" \
|
${PPEPY_BIN} "${TMP}/${calp}.plist" "autoLoginUser" \
|
||||||
>> "${CREDENTIALS}"
|
>> "${CREDENTIALS}"
|
||||||
echo >> "${CREDENTIALS}"
|
echo >> "${CREDENTIALS}"
|
||||||
else
|
else
|
||||||
|
BIN
home/lucifer/Pictures/Screenshots/05a-Windows.png
Normal file
After Width: | Height: | Size: 50 KiB |
BIN
home/lucifer/Pictures/Screenshots/macos-credentials.png
Normal file
After Width: | Height: | Size: 167 KiB |
After Width: | Height: | Size: 184 KiB |
After Width: | Height: | Size: 162 KiB |
BIN
home/lucifer/Pictures/Screenshots/macos-dump-hashes-lion.png
Normal file
After Width: | Height: | Size: 164 KiB |
BIN
home/lucifer/Pictures/Screenshots/macos-hashcat-dict-lion.png
Normal file
After Width: | Height: | Size: 145 KiB |
BIN
home/lucifer/Pictures/Screenshots/macos-timezone.png
Normal file
After Width: | Height: | Size: 170 KiB |
BIN
home/lucifer/Pictures/Screenshots/macos-tz-select-partition.png
Normal file
After Width: | Height: | Size: 23 KiB |
@ -1,4 +1,4 @@
|
|||||||
#!/usr/bin/python2
|
#!/usr/bin/python3
|
||||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
# you may not use this file except in compliance with the License.
|
# you may not use this file except in compliance with the License.
|
||||||
# You may obtain a copy of the License at
|
# You may obtain a copy of the License at
|
||||||
@ -21,13 +21,13 @@ magic_static='7d895223d2bcddeaa3b91f'
|
|||||||
pwd = ''
|
pwd = ''
|
||||||
|
|
||||||
if len(sys.argv) != 2:
|
if len(sys.argv) != 2:
|
||||||
print 'Please write as a first argv the hexadecimal kcpassword value:'
|
print( 'Please write as a first argv the hexadecimal kcpassword value:' )
|
||||||
print 'Example: python {} 1ceb3147d2172f1140ff63bf'.format(sys.argv[0])
|
print( 'Example: python {} 1ceb3147d2172f1140ff63bf'.format(sys.argv[0]) )
|
||||||
exit(1)
|
exit(1)
|
||||||
|
|
||||||
kcpasswd=sys.argv[1]
|
kcpasswd=sys.argv[1]
|
||||||
print u'\n\tKcpasswd: 0x{}.'.format(kcpasswd)
|
print( '\n\tKcpasswd: 0x{}.'.format(kcpasswd) )
|
||||||
print u'\tMagic Xor: 0x{}.'.format(magic_static)
|
print( '\tMagic Xor: 0x{}.'.format(magic_static) )
|
||||||
|
|
||||||
tam_xor = len(magic_static)
|
tam_xor = len(magic_static)
|
||||||
tam = len(kcpasswd) - tam_xor
|
tam = len(kcpasswd) - tam_xor
|
||||||
@ -35,7 +35,7 @@ magic = magic_static
|
|||||||
while tam > 0:
|
while tam > 0:
|
||||||
tam -= tam_xor
|
tam -= tam_xor
|
||||||
magic += magic_static
|
magic += magic_static
|
||||||
print u'\tUsed Magic Xor: 0x{}.'.format(magic)
|
print( '\tUsed Magic Xor: 0x{}.'.format(magic) )
|
||||||
|
|
||||||
i = 0
|
i = 0
|
||||||
while i < len(kcpasswd):
|
while i < len(kcpasswd):
|
||||||
@ -46,6 +46,8 @@ while i < len(kcpasswd):
|
|||||||
r = charkch ^ charmh
|
r = charkch ^ charmh
|
||||||
pwd += chr(r)
|
pwd += chr(r)
|
||||||
if r == 0:
|
if r == 0:
|
||||||
print '\n\tThe password is: "{}".\n'.format(pwd.rstrip('\0'))
|
print( '\n\tThe password is: "{}".\n'.format(pwd.rstrip('\0')) )
|
||||||
break
|
break
|
||||||
i += 2
|
i += 2
|
||||||
|
|
||||||
|
exit(0)
|
||||||
|