FinalShell是一体化的的服务器,网络管理软件,不仅是ssh客户端,还是功能强大的开发,运维工具,充分满足开发,运维需求

连接信息存储

连接信息存储在C:\Users\oneseven\AppData\Local\finalshell\conn\目录下 有多少条连接就会有多少个xxx_connect_config.json文件
用户登录时必须勾选记住密码，否则不会在xxx_connect_config.json文件中保存密码

离线解密

FinalShellDecodePass.java

  1. import java.io.ByteArrayOutputStream;
  2. import java.io.DataOutputStream;
  3. import java.io.IOException;
  4. import java.math.BigInteger;
  5. import java.security.MessageDigest;
  6. import  java.security.NoSuchAlgorithmException;
  7. import java.security.SecureRandom;
  8. import java.util.Base64;
  9. import java.util.Random;
  11. import javax.crypto.Cipher;
  12. import javax.crypto.SecretKey;
  13. import javax.crypto.SecretKeyFactory;
  14. import javax.crypto.spec.DESKeySpec;
  16. public class FinalShellDecodePass {
  18.      public static void main(String[] args)throws Exception {
  20.          System.out.println(decodePass(args[0]));
  21.      }
  22.      public static byte[] desDecode(byte[] data, byte[] head) throws  Exception {
  24.          SecureRandom sr = new SecureRandom();
  25.          DESKeySpec dks = new DESKeySpec(head);
  26.          SecretKeyFactory keyFactory =  SecretKeyFactory.getInstance("DES");
  27.          SecretKey securekey = keyFactory.generateSecret(dks);
  28.          Cipher cipher = Cipher.getInstance("DES");
  29.          cipher.init(2, securekey, sr);
  30.          return cipher.doFinal(data);
  31.      }
  32.      public static String decodePass(String data) throws Exception {
  34.          if (data == null) {
  36.             return null;
  37.          } else {
  39.             String rs = "";
  40.             byte[] buf =  Base64.getDecoder().decode(data);
  41.             byte[] head = new byte[8];
  42.             System.arraycopy(buf, 0, head, 0,  head.length);
  43.             byte[] d = new byte[buf.length -  head.length];
  44.             System.arraycopy(buf,  head.length, d, 0, d.length);
  45.             byte[] bt = desDecode(d,  ranDomKey(head));
  46.             rs = new String(bt);
  48.             return rs;
  49.          }
  50.      }
  51.      static byte[] ranDomKey(byte[] head) {
  53.          long ks = 3680984568597093857L / (long)(new  Random((long)head[5])).nextInt(127);
  54.          Random random = new Random(ks);
  55.          int t = head[0];
  57.          for(int i = 0; i < t; ++i) {
  59.             random.nextLong();
  60.          }
  62.          long n = random.nextLong();
  63.          Random r2 = new Random(n);
  64.          long[] ld = new long[]{
  65.      (long)head[4], r2.nextLong(), (long)head[7], (long)head[3],  r2.nextLong(), (long)head[1], random.nextLong(), (long)head[2]};
  66.          ByteArrayOutputStream bos = new ByteArrayOutputStream();
  67.          DataOutputStream dos = new DataOutputStream(bos);
  68.          long[] var15 = ld;
  69.          int var14 = ld.length;
  71.          for(int var13 = 0; var13 < var14; ++var13) {
  73.             long l = var15[var13];
  75.             try {
  77.                 dos.writeLong(l);
  78.             } catch (IOException var18) {
  80.                 var18.printStackTrace();
  81.             }
  82.          }
  84.          try {
  86.             dos.close();
  87.          } catch (IOException var17) {
  89.             var17.printStackTrace();
  90.          }
  92.          byte[] keyData = bos.toByteArray();
  93.          keyData = md5(keyData);
  94.          return keyData;
  95.      }
  96.      public static byte[] md5(byte[] data) {
  98.          String ret = null;
  99.          byte[] res=null;
  101.          try {
  103.             MessageDigest m;
  104.             m =  MessageDigest.getInstance("MD5");
  105.             m.update(data, 0, data.length);
  106.             res=m.digest();
  107.             ret = new BigInteger(1,  res).toString(16);
  108.          } catch (NoSuchAlgorithmException e) {
  110.             e.printStackTrace();
  111.          }
  112.          return res;
  113.      }
  114. }

先编译

  1. javac FinalShellDecodePass.java

运行

  1. java FinalShellDecodePass <password>

其中password就是xxx_connect_config.json文件中的password字段