IEYES：https://github.com/SiJiDo/IEyes

import java.security.Security; import java.io.IOException;import javax.crypto.Cipher; import javax.crypto.SecretKey; import javax.crypto.spec.SecretKeySpec; import sun.misc.BASE64Decoder;import sun.misc.BASE64Encoder;import javax.crypto.NoSuchPaddingException;import java.security.NoSuchAlgorithmException;public class getkey {public static byte[] hex(){//String key = "test";String f = "8a86f8a60xxxxxxxxxxa157627311422";byte bkeys[] = (new String(f)).getBytes();byte enk[] = new byte[24];for(int i = 0; i < 24; i++)enk[i] = bkeys[i];//System.out.println(enk);return enk;}public static byte[] decryptMode(byte keybyte[], byte src[]){try{javax.crypto.SecretKey deskey = new SecretKeySpec(keybyte, "DESede");Cipher c1 = Cipher.getInstance("DESede");c1.init(2, deskey);return c1.doFinal(src);}catch(NoSuchAlgorithmException e1){e1.printStackTrace();}catch(NoSuchPaddingException e2){e2.printStackTrace();}catch(Exception e3){e3.printStackTrace();}return null;}public static String decrypt(String desContent){byte enk[] = hex();Security.addProvider(new com.sun.crypto.provider.SunJCE());byte reqPassword[] = null;try{reqPassword = (new BASE64Decoder()).decodeBuffer(desContent);}catch(IOException e){e.printStackTrace();}byte srcBytes[] = decryptMode(enk, reqPassword);return new String(srcBytes);}public static void main(String[] args){System.out.println(decrypt("fEHldNxxxxxxxxxxxxxxxxxxxMflwXr"));//user:R9uxxxxxxxxx//pass:fEHldNxxxxxxxxxxxxxxxxxxxMflwXrJ}}

END

windows提权总结

一次SSH爆破攻击haiduc工具的应急响应

记一次艰难的SQL注入(过安全狗)

记一次溯源