'' returned = raw_input('Press any button to return to the menu...') elif option == '2': print '' print '' title = raw_input('Type the name of the application: ') password = raw_input('Type the password(BEWARE OF SHOULDER SURFING!!!): ') generate_key(password, title, key, iv) print '' print '' returned = raw_input('Press any button to return to the menu...') else: if option == '3': loop = False print '' return 'Bye Byeeeeeeeeeeeee' print '' print '' print 'WHAT? FAILURE TO COMMUNICATE... Reseting connection...' print '' print '' returned = raw_input('Press any button to return to the menu...') if __name__ == '__main__': print main() # okay decompiling .password_keeper.pyc
在运行exe文件时,输入“1”是查询密码的功能,在代码中,输入1后会调用show_keys()函数
show_keys()函数
可以看出,输入的密码值正确时if条件成立,进行显示表格文件密码,所以输入的密码就是base64.decode(key)
N2FlMjE4ZmYyOTI4ZjZiMg==
解密后:7ae218ff2928f6b2
使用exe查看密码
Tag: instagram Password: S3x1B0y Tag: facebook Password: M4rK1sS0s3X1 Tag: Accountabilty_not_cooked Password: co8oiads13kt Tag: MoneyBalance Password: C5Y0wzGqq4Xw8XGD Tag: Pending_to_erase Password: 1hi2ChHrtkQsUTOc
文件名字取得很贴切了
Accountabilty_not_cooked.xlsx,密码co8oiads13kt。没有伪造的账单
AccountabiltyReportMorning-1112018.xlsx,没有加密。伪造后可以上交的账单报告
MoneyBalance.xlsx,密码C5Y0wzGqq4Xw8XGD。自己的非法收入金额
Pending_to_erase.xlsx,密码1hi2ChHrtkQsUTOc。等待删除的账单
这次靶场渗透不难,就是犯罪证据的查找没有了解,参考了一下大佬的做法,自己也做了一遍,有收获!继续努力。
https://blog.csdn.net/weixin_43784056/article/details/112182458