1

verify_hash.py

@@ -1,99 +0,0 @@
-import struct
-import hashlib
-
-def md4(data):
-    def f(x, y, z): return (x & y) | (~x & z)
-    def g(x, y, z): return (x & y) | (x & z) | (y & z)
-    def h(x, y, z): return x ^ y ^ z
-    def rot(x, n): return ((x << n) | (x >> (32 - n))) & 0xffffffff
-    
-    msg = data + b'\x80'
-    while len(msg) % 64 != 56: msg += b'\x00'
-    msg += struct.pack('<Q', len(data) * 8)
-    
-    a, b, c, d = 0x67452301, 0xefcdab89, 0x98badcfe, 0x10325476
-    for i in range(0, len(msg), 64):
-        x = struct.unpack('<16I', msg[i:i+64])
-        aa, bb, cc, dd = a, b, c, d
-        for j in range(16):
-            a = rot((a + f(b, c, d) + x[j]) & 0xffffffff, [3, 7, 11, 19][j % 4])
-            a, b, c, d = d, a, b, c
-        for j in range(16):
-            a = rot((a + g(b, c, d) + x[[0, 4, 8, 12, 1, 5, 9, 13, 2, 6, 10, 14, 3, 7, 11, 15][j]] + 0x5a827999) & 0xffffffff, [3, 5, 9, 13][j % 4])
-            a, b, c, d = d, a, b, c
-        for j in range(16):
-            a = rot((a + h(b, c, d) + x[[0, 8, 4, 12, 2, 10, 6, 14, 1, 9, 5, 13, 3, 11, 7, 15][j]] + 0x6ed9eba1) & 0xffffffff, [3, 9, 11, 15][j % 4])
-            a, b, c, d = d, a, b, c
-        a, b, c, d = (a + aa) & 0xffffffff, (b + bb) & 0xffffffff, (c + cc) & 0xffffffff, (d + dd) & 0xffffffff
-    
-    return struct.pack('<4I', a, b, c, d).hex()
-
-def verify():
-    # Данные из дампа пользователя
-    USER = "admin"
-    PASS = "12985654"
-    realm = "Keenetic Xiaomi R3P"
-    challenge = "LRIGGJJDBXQEZHCPQXOWCRLGFKWMYGXL"
-    h1 = "7984d1dba41fe075f1d7d1848432aaa0"
-    browser_hash = "f3aa27cf6a3c1d562eab5a167987289226c519deab7395d0b382cf7436443253"
-    
-    nt_hash_browser = "b32107cd9056326b61081f4fb2eec1b3"
-    nt_hash_calc = md4(PASS.encode('utf-16le'))
-    print(f"NT Hash Calc: {nt_hash_calc} {'!!! MATCH !!!' if nt_hash_calc == nt_hash_browser else ''}")
-    
-    session_id = "DFXNAXYBKRVQLFXE"
-    session_cookie = "WFGGPJJTF"
-    
-    h1_md5 = h1
-    h1_sha256 = hashlib.sha256(f"{USER}:{realm}:{PASS}".encode()).hexdigest()
-    h1_md5_utf16 = hashlib.md5(f"{USER}:{realm}:{PASS}".encode('utf-16le')).hexdigest()
-    h1_sha256_utf16 = hashlib.sha256(f"{USER}:{realm}:{PASS}".encode('utf-16le')).hexdigest()
-    
-    hashes = {
-        "PASS": PASS,
-        "MD5(PASS)": hashlib.md5(PASS.encode()).hexdigest(),
-        "MD5(USER:REALM:PASS)": h1,
-        "SHA256(PASS)": hashlib.sha256(PASS.encode()).hexdigest(),
-        "SHA256(USER:REALM:PASS)": hashlib.sha256(f"{USER}:{realm}:{PASS}".encode()).hexdigest(),
-        "MD5_UTF16(PASS)": hashlib.md5(PASS.encode('utf-16le')).hexdigest(),
-        "MD5_UTF16(USER:REALM:PASS)": hashlib.md5(f"{USER}:{realm}:{PASS}".encode('utf-16le')).hexdigest(),
-    }
-    
-    salts = {
-        "challenge": challenge,
-        "session_id": session_id,
-        "cookie": session_cookie,
-    }
-    
-    salts = {
-        "challenge": challenge,
-        "session_id": session_id,
-        "cookie_name": session_cookie,
-        "cookie_val": "KCLGIRELMRJBDBNA",
-        "phpsessid": "8494617368be96016d63e03b211d550a",
-    }
-    
-    h1_sha256_full = hashlib.sha256(f"{USER}:{realm}:{PASS}".encode()).hexdigest()
-    h1_sha256_no_realm = hashlib.sha256(f"{USER}:{PASS}".encode()).hexdigest()
-    
-    final_variants = {
-        "SHA256(challenge + SHA256_full)": hashlib.sha256((challenge + h1_sha256_full).encode()).hexdigest(),
-        "SHA256(challenge + SHA256_no_realm)": hashlib.sha256((challenge + h1_sha256_no_realm).encode()).hexdigest(),
-        "SHA256(challenge + MD5_h1)": hashlib.sha256((challenge + h1).encode()).hexdigest(),
-    }
-    
-    # И вариант с двоеточием
-    final_variants["SHA256(challenge + ':' + MD5_h1)"] = hashlib.sha256((challenge + ":" + h1).encode()).hexdigest()
-
-    print(f"Target Browser Hash: {browser_hash}")
-    for name, val in final_variants.items():
-        if val == browser_hash:
-            print(f"!!! MATCH !!! {name}: {val}")
-        else:
-            print(f"Checked {name}: {val}")
-
-if __name__ == "__main__":
-    verify()
-
-if __name__ == "__main__":
-    verify()