• XSS.stack #1 – первый литературный журнал от юзеров форума

asp.net ... sha256 base64? хз

x999xx

HDD-drive
Забанен
Регистрация
01.11.2018
Сообщения
27
Реакции
7
Депозит
0.0088
Пожалуйста, обратите внимание, что пользователь заблокирован
вообщем есть вот такое
Код:
<?xml version="1.0" encoding="utf-8"?>
<configuration>
  <appSettings>
    <add key="aspnet:UseTaskFriendlySynchronizationContext" value="true" />
    <add key="Environment" value="blabla" />
    <!--Required for Ovs.Web.Security.AuthenticationData-->
    <add key="EncryptedKey" value="SudfOmm6aKo4gTJMXDawXbaSM9xDtGh79O/XBMdPv4cGiOGWx8A2XY8goyGj8yaS" />
    <add key="WsDbKey" value="QZbT3AxQz6BRg7rJYlSCvhiF7o2JaJbVmshXEGgPY8DyWV3D84P5uRSMtuJma2iR" />
    <add key="CngEncryptionKey" value="/nVHJJw99+78/otEt/WhjpKUzA6YufibT8DV8i4hga0=" />
   ...
  </appSettings>
  <connectionStrings>
    <add name="MySqlConnectionString" connectionString="ipAYCyBJeSOHJb3hYunUqLi7O1J55Qc8FHCJQ0zI/9vDqNuY58iytgwA3OfiQuwF5LQMfdG1+xs5OxcMTr8b4g6MxlHPnle1GkUat6+ixcw=" />
    <add name="WsDb" connectionString="/T+oBS9uIN58IS/EHN1K+BSEMPTa1NPZ8kzOVYTZXfZ9JYZDOtid/FQgOYiQsOCeXcjHKC98CW4x6e7PfmYD5uVHjeVhcQOFhnWgQqTnEm8=" />
  </connectionStrings>
  <system.web>
    <compilation targetFramework="4.6.2" />
    <httpRuntime targetFramework="4.6.1" />
    <customErrors mode="Off" />
  </system.web>
  <system.serviceModel>
    <behaviors>
      <endpointBehaviors>
        <behavior name="jsonBehavior">
          <webHttp />
        </behavior>
      </endpointBehaviors>
      <serviceBehaviors>
        <behavior>
          <!-- To avoid disclosing metadata information, set the values below to false before deployment -->
          <serviceMetadata httpGetEnabled="false" httpsGetEnabled="true" />
          <!-- To receive exception details in faults for debugging purposes, set the value below to true.  Set to false before deployment to avoid disclosing exception information -->
          <serviceDebug includeExceptionDetailInFaults="false" />
        </behavior>
      </serviceBehaviors>
    </behaviors>
    <protocolMapping>
      <add binding="basicHttpsBinding" scheme="https" />
    </protocolMapping>
    <serviceHostingEnvironment aspNetCompatibilityEnabled="true" multipleSiteBindingsEnabled="true" />
    <services>
      <service name="Ovs.Insurance.Svc.Tii">
        <endpoint name="EndpointSoap" address="soap" binding="basicHttpsBinding" bindingConfiguration="basicBinding" contract="Ovs.Insurance.Svc.ITii" />
        <endpoint name="EndpointJson" address="json" binding="webHttpBinding" behaviorConfiguration="jsonBehavior" bindingConfiguration="webBinding" contract="Ovs.Insurance.Svc.ITii" />
      </service>
      <service name="Ovs.Insurance.Svc.Csa">
        <endpoint name="EndpointSoap" address="soap" binding="basicHttpsBinding" bindingConfiguration="basicBinding" contract="Ovs.Insurance.Svc.ICsa" />
        <endpoint name="EndpointJson" address="json" binding="webHttpBinding" behaviorConfiguration="jsonBehavior" bindingConfiguration="webBinding" contract="Ovs.Insurance.Svc.ICsa" />
      </service>
    </services>
    <bindings>
      <basicHttpsBinding>
        <binding name="Ovs.Insurance.Svc.TiiSoap">
          <security mode="Transport" />
        </binding>
        <binding name="basicBinding" maxReceivedMessageSize="65536">
          <security mode="Transport">
            <transport clientCredentialType="None" proxyCredentialType="None" realm="" />
          </security>
          <readerQuotas maxDepth="32" maxStringContentLength="12288" maxArrayLength="16384" maxBytesPerRead="4096" maxNameTableCharCount="16384" />
        </binding>
      </basicHttpsBinding>
      <webHttpBinding>
        <binding name="webBinding" maxReceivedMessageSize="65536">
          <security mode="Transport">
            <transport clientCredentialType="None" proxyCredentialType="None" realm="" />
          </security>
          <readerQuotas maxDepth="32" maxStringContentLength="12288" maxArrayLength="16384" maxBytesPerRead="4096" maxNameTableCharCount="16384" />
        </binding>
      </webHttpBinding>
    </bindings>
  </system.serviceModel>
  <system.webServer>
    <modules runAllManagedModulesForAllRequests="true" />
    <directoryBrowse enabled="true" />
  </system.webServer>
  <runtime>
    <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
      <dependentAssembly>
        <assemblyIdentity name="System.Net.Http" publicKeyToken="b03f5f7f11d50a3a" culture="neutral" />
        <bindingRedirect oldVersion="0.0.0.0-4.1.1.2" newVersion="4.1.1.2" />
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="Newtonsoft.Json" publicKeyToken="30ad4fe6b2a6aeed" culture="neutral" />
        <bindingRedirect oldVersion="0.0.0.0-10.0.0.0" newVersion="10.0.0.0" />
      </dependentAssembly>
    </assemblyBinding>
  </runtime>
  <system.data>
    <DbProviderFactories>
      <remove invariant="MySql.Data.MySqlClient" />
      <add name="MySQL Data Provider" invariant="MySql.Data.MySqlClient" description=".Net Framework Data Provider for MySQL" type="MySql.Data.MySqlClient.MySqlClientFactory, MySql.Data, Version=6.7.9.0, Culture=neutral, PublicKeyToken=c5687fc88969c44d" />
    </DbProviderFactories>
  </system.data>
</configuration>
<!--ProjectGuid: 0620DD1C-1977-4B47-9E08-F42F8F3A695F-->

как мне расхешить connectionStrings ?

вот скрипт вчера накидывал, но никак и нивкакую ничего не получалось ((

PHP:
<?php

// 32 byte binary blob
$aes256Key = hash("SHA256", $password, true);

// for good entropy (for MCRYPT_RAND)
srand((double) microtime() * 1000000);
// generate random iv
$iv = mcrypt_create_iv(mcrypt_get_iv_size(MCRYPT_RIJNDAEL_256, MCRYPT_MODE_CBC), MCRYPT_RAND);

//$crypted = fnEncrypt($messageClear, $aes256Key);
//$newClear = fnDecrypt($crypted, $aes256Key);
$newClear = fnDecrypt("9KxPseuaIWQFvPhLFeSBqvqkHjKt5HbEaFN+vHKAwzCeeR0K0mtwy4zaA9NTpDE6qv7WpE0nB0bP2UuvTi2YHG5E/eQZC9Sh", base64_decode("bQEHWs7A3Dc7/IvetjQDI07p+uUL+nZ7uaHjYvPYgbYZG+/hX3i/jRAWJ4jt7LGO"));

echo
"IV:       ".$iv."\n".

"Decrypred: ".$newClear."\n\n";

function fnEncrypt($sValue, $sSecretKey) {
    global $iv;
    return rtrim(base64_encode(mcrypt_encrypt(MCRYPT_RIJNDAEL_256, $sSecretKey, $sValue, MCRYPT_MODE_CBC, $iv)), "\0\3");
}

function fnDecrypt($sValue, $sSecretKey) {
    global $iv;
    return rtrim(mcrypt_decrypt(MCRYPT_RIJNDAEL_256, $sSecretKey, base64_decode($sValue), MCRYPT_MODE_CBC, $iv), "\0\3");
}

ч
 


Напишите ответ...
  • Вставить:
Прикрепить файлы
Верх