o
    Žõ±j
  ã                   @   s6   d dl Z d dlmZ G dd„ dƒZG dd„ deƒZdS )é    N)ÚPackageDecryptorc                   @   s,   e Zd Zdd„ Zdd„ Zdd„ Zdd„ Zd	S )
ÚSspCredentialc                 C   s(   d| _ d | _d | _d | _d| _d | _d S )NÚsspó    ©ÚcredtypeÚusernameÚ
domainnameÚpasswordÚpassword_rawÚluid©Úself© r   úŸ/root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/venv/lib/python3.10/site-packages/pypykatz/lsadecryptor/packages/ssp/decryptor.pyÚ__init__   s   
zSspCredential.__init__c                 C   sD   i }| j |d< | j|d< | j|d< | j|d< | j|d< | j|d< |S )Nr   r   r	   r
   r   r   r   ©r   Útr   r   r   Úto_dict   s   





zSspCredential.to_dictc                 C   s   t  |  ¡ ¡S )N)ÚjsonÚdumpsr   r   r   r   r   Úto_json   s   zSspCredential.to_jsonc                 C   sJ   d| j  }|d| j 7 }|d| j 7 }|d| j 7 }|d| j ¡  7 }|S )Nz	== SSP [%x]==
z		username %s
z		domainname %s
z		password %s
z		password (hex)%s
)r   r   r	   r
   r   Úhexr   r   r   r   Ú__str__!   s   
zSspCredential.__str__N)Ú__name__Ú
__module__Ú__qualname__r   r   r   r   r   r   r   r   r      s
    
r   c                       s4   e Zd Z‡ fdd„Zdd„ Zdd„ Zdd„ Z‡  ZS )	ÚSspDecryptorc                    s"   t ƒ  d|||¡ || _g | _d S )NÚSsp)Úsuperr   Údecryptor_templateÚcredentials)r   Úreaderr    Úlsa_decryptorÚsysinfo©Ú	__class__r   r   r   *   s   
zSspDecryptor.__init__c                 C   s8   |   d| jj¡}| j || jj ¡}| j |¡}||fS )Nz
msv1_0.dll)Úfind_signaturer    Ú	signaturer"   Úget_ptr_with_offsetÚfirst_entry_offsetÚget_ptr)r   ÚpositionÚptr_entry_locÚ	ptr_entryr   r   r   Úfind_first_entry/   s   zSspDecryptor.find_first_entryc                 C   sð   t ƒ }|j|_|jj | j¡|_|jj | j¡|_	|jj
jdkr_|j d¡du s0|j	 d¡du rN| j|jj
 | j¡ddd�\|_|_|jd urM|j ¡ |_n| j|jj
 | j¡dd�\|_|_|jdkrp|j	dkrp|jd u rpd S | j |¡ d S )Nr   ú$Té   )Úbytes_expectedÚsegment_size)r3   Ú )r   ÚLogonIdr   r!   ÚDomaineÚread_stringr"   r   ÚUserNamer	   ÚPasswordÚLengthÚendswithÚdecrypt_passwordÚread_maxdatar
   r   r   Úappend)r   Ú	ssp_entryÚcr   r   r   Ú	add_entry5   s    $
€"zSspDecryptor.add_entryc              
   C   sr   z|   ¡ \}}W n ty" } z|  d| ¡ W Y d }~d S d }~ww | j |¡ | j | j¡}|  || j¡ d S )Nz"Failed to find structs! Reason: %s)	r/   Ú	ExceptionÚlogr"   Úmover    Ú
list_entryÚ	walk_listrA   )r   Úentry_ptr_valueÚentry_ptr_locÚeÚ	entry_ptrr   r   r   ÚstartG   s   €þzSspDecryptor.start)r   r   r   r   r/   rA   rK   Ú__classcell__r   r   r%   r   r   )   s
    r   )r   Ú%pypykatz.lsadecryptor.package_commonsr   r   r   r   r   r   r   Ú<module>   s   