Added more screenshots
@ -149,13 +149,13 @@ if ${FSSTAT_BIN} -o "${OFFSET}" "${SOURCE}" > /dev/null 2>&1 ; then
|
||||
if ! ${ICAT_BIN} -o "${OFFSET}" "${SOURCE}" "${user}" > "/tmp/${user}.plist" ; then
|
||||
echo " During the execution of icat an error occurred." >> "${CREDENTIALS}"
|
||||
fi
|
||||
${PLUTIL_BIN} -i "/tmp/${user}.plist" -o "${DIRNAME}/${user}.plist"
|
||||
${PLUTIL_BIN} -i "/tmp/${user}.plist" -o "${TMP}/${user}.plist"
|
||||
${RM_BIN} "/tmp/${user}.plist"
|
||||
fi
|
||||
echo -e -n " " >> "${CREDENTIALS}"
|
||||
${PPEPY_BIN} "${DIRNAME}/${user}.plist" "name" >> "${CREDENTIALS}"
|
||||
${PPEPY_BIN} "${TMP}/${user}.plist" "name" >> "${CREDENTIALS}"
|
||||
echo -e -n " " >> "${CREDENTIALS}"
|
||||
${PPEPY_BIN} "${DIRNAME}/${user}.plist" "hint" >> "${CREDENTIALS}"
|
||||
${PPEPY_BIN} "${TMP}/${user}.plist" "hint" >> "${CREDENTIALS}"
|
||||
echo >> "${CREDENTIALS}"
|
||||
done
|
||||
else
|
||||
@ -172,15 +172,15 @@ if ${FSSTAT_BIN} -o "${OFFSET}" "${SOURCE}" > /dev/null 2>&1 ; then
|
||||
echo " During the execution of icat an error occurred." \
|
||||
>> "${CREDENTIALS}"
|
||||
fi
|
||||
${PLUTIL_BIN} -i "/tmp/${calp}.plist" -o "${DIRNAME}/${calp}.plist"
|
||||
${PLUTIL_BIN} -i "/tmp/${calp}.plist" -o "${TMP}/${calp}.plist"
|
||||
${RM_BIN} "/tmp/${calp}.plist"
|
||||
fi
|
||||
echo -e -n " Some content from com.apple.loginwindow.plist:\n " \
|
||||
>> "${CREDENTIALS}"
|
||||
${PPEPY_BIN} "${DIRNAME}/${calp}.plist" "lastUserName" \
|
||||
${PPEPY_BIN} "${TMP}/${calp}.plist" "lastUserName" \
|
||||
>> "${CREDENTIALS}"
|
||||
echo -e -n " " >> "${CREDENTIALS}"
|
||||
${PPEPY_BIN} "${DIRNAME}/${calp}.plist" "autoLoginUser" \
|
||||
${PPEPY_BIN} "${TMP}/${calp}.plist" "autoLoginUser" \
|
||||
>> "${CREDENTIALS}"
|
||||
echo >> "${CREDENTIALS}"
|
||||
else
|
||||
|
BIN
home/lucifer/Pictures/Screenshots/05a-Windows.png
Normal file
After Width: | Height: | Size: 50 KiB |
BIN
home/lucifer/Pictures/Screenshots/macos-credentials.png
Normal file
After Width: | Height: | Size: 167 KiB |
After Width: | Height: | Size: 184 KiB |
After Width: | Height: | Size: 162 KiB |
BIN
home/lucifer/Pictures/Screenshots/macos-dump-hashes-lion.png
Normal file
After Width: | Height: | Size: 164 KiB |
BIN
home/lucifer/Pictures/Screenshots/macos-hashcat-dict-lion.png
Normal file
After Width: | Height: | Size: 145 KiB |
BIN
home/lucifer/Pictures/Screenshots/macos-timezone.png
Normal file
After Width: | Height: | Size: 170 KiB |
BIN
home/lucifer/Pictures/Screenshots/macos-tz-select-partition.png
Normal file
After Width: | Height: | Size: 23 KiB |
@ -1,4 +1,4 @@
|
||||
#!/usr/bin/python2
|
||||
#!/usr/bin/python3
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
@ -21,13 +21,13 @@ magic_static='7d895223d2bcddeaa3b91f'
|
||||
pwd = ''
|
||||
|
||||
if len(sys.argv) != 2:
|
||||
print 'Please write as a first argv the hexadecimal kcpassword value:'
|
||||
print 'Example: python {} 1ceb3147d2172f1140ff63bf'.format(sys.argv[0])
|
||||
print( 'Please write as a first argv the hexadecimal kcpassword value:' )
|
||||
print( 'Example: python {} 1ceb3147d2172f1140ff63bf'.format(sys.argv[0]) )
|
||||
exit(1)
|
||||
|
||||
kcpasswd=sys.argv[1]
|
||||
print u'\n\tKcpasswd: 0x{}.'.format(kcpasswd)
|
||||
print u'\tMagic Xor: 0x{}.'.format(magic_static)
|
||||
print( '\n\tKcpasswd: 0x{}.'.format(kcpasswd) )
|
||||
print( '\tMagic Xor: 0x{}.'.format(magic_static) )
|
||||
|
||||
tam_xor = len(magic_static)
|
||||
tam = len(kcpasswd) - tam_xor
|
||||
@ -35,7 +35,7 @@ magic = magic_static
|
||||
while tam > 0:
|
||||
tam -= tam_xor
|
||||
magic += magic_static
|
||||
print u'\tUsed Magic Xor: 0x{}.'.format(magic)
|
||||
print( '\tUsed Magic Xor: 0x{}.'.format(magic) )
|
||||
|
||||
i = 0
|
||||
while i < len(kcpasswd):
|
||||
@ -46,6 +46,8 @@ while i < len(kcpasswd):
|
||||
r = charkch ^ charmh
|
||||
pwd += chr(r)
|
||||
if r == 0:
|
||||
print '\n\tThe password is: "{}".\n'.format(pwd.rstrip('\0'))
|
||||
print( '\n\tThe password is: "{}".\n'.format(pwd.rstrip('\0')) )
|
||||
break
|
||||
i += 2
|
||||
|
||||
exit(0)
|
||||
|