简介
对密码已保存在 Windwos 系统上的部分程序进行解析,包括:Navicat,TeamViewer,FileZilla,WinSCP,Xmangager系列产品(Xshell,Xftp)。
使用方法
cmd.exe
> SharpDecryptPwd.exe
Author: Uknow
Github: https://github.com/uknowsec/SharpDecryptPwd
Reference: https://rcoil.me/2019/09/SharpDecryptPwd/
Usage: SharpDecryptPwd.exe -NavicatCrypto
SharpDecryptPwd.exe -TeamViewer
SharpDecryptPwd.exe -FileZilla
SharpDecryptPwd.exe -WinSCP
SharpDecryptPwd.exe -Xmangager -p Session_Path
> SharpDecryptPwd.exe -TeamViewer
> SharpDecryptPwd.exe -NavicatCrypto
> SharpDecryptPwd.exe -FileZilla
> SharpDecryptPwd.exe -Xmangager -p D:\xshell\Xshell\Sessions
Cobalt Strike
execute-assembly /path/to/SharpDecryptPwd.exe
Reference:
https://www.t00ls.net/viewthread.php?tid=30146&highlight=WinSCP