FilesExpand file tree

 master

/

WebLogicPasswordDecryptor.java

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

162 lines (117 loc) · 6.04 KB

 master

/

WebLogicPasswordDecryptor.java

Copy path

Top

File metadata and controls

• Code
• Blame

162 lines (117 loc) · 6.04 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

160

161

import org.bouncycastle.jce.provider.BouncyCastleProvider;

import sun.misc.BASE64Decoder;

import javax.crypto.*;

import javax.crypto.spec.IvParameterSpec;

import javax.crypto.spec.PBEKeySpec;

import javax.crypto.spec.PBEParameterSpec;

import javax.crypto.spec.SecretKeySpec;

import java.io.FileInputStream;

import java.io.IOException;

import java.io.InputStream;

import java.security.InvalidAlgorithmParameterException;

import java.security.InvalidKeyException;

import java.security.NoSuchAlgorithmException;

import java.security.Security;

import java.security.spec.InvalidKeySpecException;

public class WebLogicPasswordDecryptor {

public static void main(String args[]) throws IOException, NoSuchPaddingException, NoSuchAlgorithmException, InvalidKeyException, BadPaddingException, IllegalBlockSizeException, InvalidKeySpecException, InvalidAlgorithmParameterException {

Security.addProvider(new BouncyCastleProvider());

String serializedSystemIniPath = args[0];

String ciphertext = args[1];

String cleartext = "";

if (ciphertext.startsWith("{AES}")){

ciphertext = ciphertext.replaceAll("^[{AES}]+", "");

cleartext = decryptAES(serializedSystemIniPath,ciphertext);

} else if (ciphertext.startsWith("{3DES}")){

ciphertext = ciphertext.replaceAll("^[{3DES}]+", "");

cleartext = decrypt3DES(serializedSystemIniPath, ciphertext);

}

System.out.println(cleartext);

}

public static String decryptAES(String SerializedSystemIni, String ciphertext) throws NoSuchAlgorithmException, InvalidKeySpecException, NoSuchPaddingException, InvalidAlgorithmParameterException, InvalidKeyException, BadPaddingException, IllegalBlockSizeException, IOException {

byte[] encryptedPassword1 = new BASE64Decoder().decodeBuffer(ciphertext);

byte[] salt = null;

byte[] encryptionKey = null;

String key = "0xccb97558940b82637c8bec3c770f86fa3a391a56";

char password[] = new char[key.length()];

key.getChars(0, password.length, password, 0);

FileInputStream is = new FileInputStream(SerializedSystemIni);

try {

salt = readBytes(is);

int version = is.read();

if (version != -1) {

encryptionKey = readBytes(is);

if (version >= 2) {

encryptionKey = readBytes(is);

}

}

} catch (IOException e) {

}

SecretKeyFactory keyFactory = SecretKeyFactory.getInstance("PBEWITHSHAAND128BITRC2-CBC");

PBEKeySpec pbeKeySpec = new PBEKeySpec(password, salt, 5);

SecretKey secretKey = keyFactory.generateSecret(pbeKeySpec);

PBEParameterSpec pbeParameterSpec = new PBEParameterSpec(salt, 0);

Cipher cipher = Cipher.getInstance("PBEWITHSHAAND128BITRC2-CBC");

cipher.init(Cipher.DECRYPT_MODE, secretKey, pbeParameterSpec);

SecretKeySpec secretKeySpec = new SecretKeySpec(cipher.doFinal(encryptionKey), "AES");

byte[] iv = new byte[16];

System.arraycopy(encryptedPassword1, 0, iv, 0, 16);

int encryptedPasswordlength = encryptedPassword1.length - 16 ;

byte[] encryptedPassword2 = new byte[encryptedPasswordlength];

System.arraycopy(encryptedPassword1, 16, encryptedPassword2, 0, encryptedPasswordlength);

IvParameterSpec ivParameterSpec = new IvParameterSpec(iv);

Cipher outCipher = Cipher.getInstance("AES/CBC/PKCS5Padding");

outCipher.init(Cipher.DECRYPT_MODE, secretKeySpec, ivParameterSpec);

byte[] cleartext = outCipher.doFinal(encryptedPassword2);

return new String(cleartext, "UTF-8");

}

public static String decrypt3DES(String SerializedSystemIni, String ciphertext) throws NoSuchAlgorithmException, InvalidKeySpecException, NoSuchPaddingException, InvalidAlgorithmParameterException, InvalidKeyException, BadPaddingException, IllegalBlockSizeException, IOException {

byte[] encryptedPassword1 = new BASE64Decoder().decodeBuffer(ciphertext);

byte[] salt = null;

byte[] encryptionKey = null;

String PW = "0xccb97558940b82637c8bec3c770f86fa3a391a56";

char password[] = new char[PW.length()];

PW.getChars(0, password.length, password, 0);

FileInputStream is = new FileInputStream(SerializedSystemIni);

try {

salt = readBytes(is);

int version = is.read();

if (version != -1) {

encryptionKey = readBytes(is);

if (version >= 2) {

encryptionKey = readBytes(is);

}

}

} catch (IOException e) {

}

SecretKeyFactory keyFactory = SecretKeyFactory.getInstance("PBEWITHSHAAND128BITRC2-CBC");

PBEKeySpec pbeKeySpec = new PBEKeySpec(password, salt, 5);

SecretKey secretKey = keyFactory.generateSecret(pbeKeySpec);

PBEParameterSpec pbeParameterSpec = new PBEParameterSpec(salt, 0);

Cipher cipher = Cipher.getInstance("PBEWITHSHAAND128BITRC2-CBC");

cipher.init(Cipher.DECRYPT_MODE, secretKey, pbeParameterSpec);

SecretKeySpec secretKeySpec = new SecretKeySpec(cipher.doFinal(encryptionKey),"DESEDE");

byte[] iv = new byte[8];

System.arraycopy(salt, 0, iv, 0, 4);

System.arraycopy(salt, 0, iv, 4, 4);

IvParameterSpec ivParameterSpec = new IvParameterSpec(iv);

Cipher outCipher = Cipher.getInstance("DESEDE/CBC/PKCS5Padding");

outCipher.init(Cipher.DECRYPT_MODE, secretKeySpec, ivParameterSpec);

byte[] cleartext = outCipher.doFinal(encryptedPassword1);

return new String(cleartext, "UTF-8");

}

public static byte[] readBytes(InputStream stream) throws IOException {

int length = stream.read();

byte[] bytes = new byte[length];

int in = 0;

int justread;

while (in < length) {

justread = stream.read(bytes, in, length - in);

if (justread == -1) {

break;

}

in += justread;

}

return bytes;

}

}