Спасибо за ответ, но дело в том еще, что с рдп я более менее разобрался, а DPAPI обновил защиту гугл и та информация, которую можно было нагуглить потеряла свою актуальность.
Привет, в хроме после 80 версии в файле Local State Находиться ключ aes gcm 256(защищенный dpapi) им можно декриптить все данные из бд хрома, на гитхабе куча примеров.
Сейчас хром уже 119 версии, насколько ти примеры будут актуальны?
Начиная с 80 версии хрома шифрование не менялось
О, Люмма, моё почтение!
bool OSCryptImpl :: EncryptString (const std :: string & plaintext,
std :: string * ciphertext) {
if (use_legacy_)
return EncryptStringWithDPAPI (plaintext, ciphertext);
crypto :: Aead aead (crypto :: Aead :: AES_256_GCM);
const auto key = GetRawEncryptionKey ();
aead.Init (& key);
// Note: can only check these once AEAD is initialized.
DCHECK_EQ (kKeyLength, aead.KeyLength ());
DCHECK_EQ (kNonceLength, aead.NonceLength ());
std :: string nonce;
crypto :: RandBytes (base :: WriteInto (& nonce, kNonceLength + 1), kNonceLength);
if (!aead.Seal (plaintext, nonce, std :: string (), ciphertext))
return false;
ciphertext- > insert (0, nonce);
ciphertext- > insert (0, kEncryptionVersionPrefix);
return true;
}using System;
using System.IO;
using System.Text;
using Org.BouncyCastle.Crypto;
using Org.BouncyCastle.Crypto.Engines;
using Org.BouncyCastle.Crypto.Modes;
using Org.BouncyCastle.Crypto.Parameters;
class GcmAeadDecryptor
{
public static void Main()
{
try
{
// Replace these with your actual values
byte[] key = Encoding.UTF8.GetBytes("YourEncryptionKey");
byte[] nonce = Encoding.UTF8.GetBytes("YourNonce");
byte[] ciphertext = Convert.FromBase64String("YourBase64EncodedCipherText");
byte[] associatedData = Encoding.UTF8.GetBytes("YourAssociatedData");
byte[] decryptedData = DecryptGcmAead(key, nonce, ciphertext, associatedData);
Console.WriteLine("Decrypted Data: " + Encoding.UTF8.GetString(decryptedData));
}
catch (Exception ex)
{
Console.WriteLine("Error: " + ex.Message);
}
}
static byte[] DecryptGcmAead(byte[] key, byte[] nonce, byte[] ciphertext, byte[] associatedData)
{
GcmBlockCipher cipher = new GcmBlockCipher(new AesEngine());
KeyParameter keyParam = new KeyParameter(key);
ParametersWithIV parameters = new ParametersWithIV(keyParam, nonce);
cipher.Init(false, parameters);
// Set the associated data
if (associatedData != null && associatedData.Length > 0)
{
cipher.ProcessAadBytes(associatedData, 0, associatedData.Length);
}
// Decrypt the ciphertext
byte[] decrypted = new byte[cipher.GetOutputSize(ciphertext.Length)];
int len = cipher.ProcessBytes(ciphertext, 0, ciphertext.Length, decrypted, 0);
cipher.DoFinal(decrypted, len);
return decrypted;
}
}using System;
using System.Runtime.InteropServices;
using System.Text;
class Program
{
[DllImport("Crypt32.dll", SetLastError = true, CharSet = CharSet.Auto)]
[return: MarshalAs(UnmanagedType.Bool)]
public static extern bool CryptProtectData(
ref DATA_BLOB pDataIn,
string szDataDescr,
ref DATA_BLOB pOptionalEntropy,
IntPtr pvReserved,
ref CRYPTPROTECT_PROMPTSTRUCT pPromptStruct,
int dwFlags,
ref DATA_BLOB pDataOut
);
[DllImport("Crypt32.dll", SetLastError = true, CharSet = CharSet.Auto)]
[return: MarshalAs(UnmanagedType.Bool)]
public static extern bool CryptUnprotectData(
ref DATA_BLOB pDataIn,
StringBuilder szDataDescr,
ref DATA_BLOB pOptionalEntropy,
IntPtr pvReserved,
ref CRYPTPROTECT_PROMPTSTRUCT pPromptStruct,
int dwFlags,
ref DATA_BLOB pDataOut
);
[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct DATA_BLOB
{
public int cbData;
public IntPtr pbData;
}
[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct CRYPTPROTECT_PROMPTSTRUCT
{
public int cbSize;
public int dwPromptFlags;
public IntPtr hwndApp;
public string szPrompt;
}
static void Main()
{
try
{
string originalData = "SecretData123";
// Encrypt data
DATA_BLOB dataIn = new DATA_BLOB
{
cbData = Encoding.Unicode.GetBytes(originalData).Length,
pbData = Marshal.StringToCoTaskMemUni(originalData)
};
DATA_BLOB dataOut = new DATA_BLOB();
DATA_BLOB entropy = new DATA_BLOB();
CRYPTPROTECT_PROMPTSTRUCT prompt = new CRYPTPROTECT_PROMPTSTRUCT
{
cbSize = Marshal.SizeOf(typeof(CRYPTPROTECT_PROMPTSTRUCT)),
dwPromptFlags = 0,
hwndApp = IntPtr.Zero,
szPrompt = null
};
if (CryptProtectData(ref dataIn, "example", ref entropy, IntPtr.Zero, ref prompt, 0, ref dataOut))
{
Console.WriteLine("Data encrypted successfully.");
// Decrypt data
DATA_BLOB decryptedData = new DATA_BLOB();
if (CryptUnprotectData(ref dataOut, null, ref entropy, IntPtr.Zero, ref prompt, 0, ref decryptedData))
{
string decryptedString = Marshal.PtrToStringUni(decryptedData.pbData);
Console.WriteLine("Decrypted Data: " + decryptedString);
Marshal.ZeroFreeCoTaskMemUnicode(decryptedData.pbData);
}
else
{
int error = Marshal.GetLastWin32Error();
Console.WriteLine("Error decrypting data. Error code: " + error);
}
Marshal.ZeroFreeCoTaskMemUnicode(dataOut.pbData);
}
else
{
int error = Marshal.GetLastWin32Error();
Console.WriteLine("Error encrypting data. Error code: " + error);
}
}
catch (Exception ex)
{
Console.WriteLine("Error: " + ex.Message);
}
}
}using System;
using System.Data.SQLite;
using System.IO;
class Program
{
static void Main()
{
string connectionString = "Data Source=your_database_file.db;Version=3;";
using (SQLiteConnection connection = new SQLiteConnection(connectionString))
{
connection.Open();
// Example: Reading a BLOB column
string query = "SELECT ID, BinaryDataColumn FROM YourTableName;";
using (SQLiteCommand command = new SQLiteCommand(query, connection))
{
using (SQLiteDataReader reader = command.ExecuteReader())
{
while (reader.Read())
{
int id = reader.GetInt32(reader.GetOrdinal("ID"));
byte[] binaryData = GetBytes(reader, "BinaryDataColumn");
Console.WriteLine($"ID: {id}, BinaryData Length: {binaryData.Length}");
// Process binary data as needed
// For example, you can convert it to a string:
string binaryDataAsString = System.Text.Encoding.UTF8.GetString(binaryData);
Console.WriteLine($"BinaryData as String: {binaryDataAsString}");
}
}
}
}
}
// Helper method to safely read a BLOB column
static byte[] GetBytes(SQLiteDataReader reader, string columnName)
{
const int CHUNK_SIZE = 2 * 1024; // 2 KB chunks
long bytesRead;
long fieldOffset = 0;
byte[] buffer = new byte[CHUNK_SIZE];
using (MemoryStream stream = new MemoryStream())
{
while ((bytesRead = reader.GetBytes(reader.GetOrdinal(columnName), fieldOffset, buffer, 0, buffer.Length)) > 0)
{
stream.Write(buffer, 0, (int)bytesRead);
fieldOffset += bytesRead;
}
return stream.ToArray();
}
}
}
sure, please share... but wait... that would be like gold... right!?
https://www.amyuni[.]com/forum/viewtopic.php?p=9545&hilit=display+adapter#p9545 Pretty sure I found it somewhere in here. Leaving the resource instead of a download link since it might be a bit negligent to do so without testing first!