added new sqldevelopper support (thks to @maaaaz)

alvinmurimi · Feb 28, 2023 · 4ee523a · 4ee523a
1 parent 05fdf26
commit 4ee523a
Show file tree

Hide file tree

Showing 2 changed files with 132 additions and 1 deletion.
diff --git a/Linux/lazagne/softwares/databases/sqldeveloper.py b/Linux/lazagne/softwares/databases/sqldeveloper.py
@@ -1,14 +1,19 @@
 #!/usr/bin/env python
 # -*- coding: utf-8 -*- 
 
+# Passwords decryption for new verion have been taken from:
+# https://github.com/maaaaz/sqldeveloperpassworddecryptor
+
 import binascii
 import hashlib
 import base64
 import array
+import json
 import re
 import os
 
 from xml.etree.cElementTree import ElementTree
+from Crypto.Cipher import AES
 
 from lazagne.config.module_info import ModuleInfo
 from lazagne.config.crypto.pyDes import des, CBC
@@ -42,6 +47,28 @@ def decrypt(self, msg):
         text = crypter.decrypt(enc_text)
         return re.sub(r'[\x01-\x08]', '', text)
 
+    def aes_cbc_decrypt(self, encrypted_password, decryption_key, iv):
+        unpad = lambda s : s[:-ord(s[len(s)-1:])]
+        crypter = AES.new(decryption_key, AES.MODE_CBC, iv)
+        decrypted_password = unpad(crypter.decrypt(encrypted_password))
+
+        return decrypted_password.decode('utf-8')
+
+    def decrypt_v19_2(self, encrypted, db_system_id):
+        encrypted_password = base64.b64decode(encrypted)
+
+        salt = array.array('b', [6, -74, 97, 35, 61, 104, 50, -72])
+        key = hashlib.pbkdf2_hmac("sha256", db_system_id.encode(), salt, 5000, 32)
+
+        iv = encrypted_password[:16]
+        encrypted_password = encrypted_password[16:]
+        try:
+            decrypted = self.aes_cbc_decrypt(encrypted_password, key, iv)
+        except:
+            return False
+
+        return decrypted
+
     def get_passphrase(self, path):
         xml_name = u'product-preferences.xml'
         xml_file = None
@@ -74,6 +101,8 @@ def run(self):
                 self._passphrase = self.get_passphrase(path)
                 if self._passphrase:
                     self.info(u'Passphrase found: {passphrase}'.format(passphrase=self._passphrase))
+
+                    # Check for older version
                     xml_name = u'connections.xml'
                     xml_file = None
 
@@ -109,4 +138,39 @@ def run(self):
 
                             pwd_found.append(values)
 
+                    # Check for newer version
+                    json_name = u'connections.json'
+                    json_file = None
+
+                    if os.path.exists(os.path.join(path, xml_name)):
+                        json_file = os.path.join(path, xml_name)
+                    else:
+                        for p in os.listdir(path):
+                            if p.startswith('system'):
+                                new_directory = os.path.join(path, p)
+
+                                for pp in os.listdir(new_directory):
+                                    if pp.startswith(u'o.jdeveloper.db.connection'):
+                                        if os.path.exists(os.path.join(new_directory, pp, json_name)):
+                                            json_file = os.path.join(new_directory, pp, json_name)
+                                        break
+
+                    if json_file:
+                        with open(json_file) as jf: 
+                            data = json.load(jf)
+                            for connection in data['connections']: 
+                                values = {
+                                    'Name': connection['name'], 
+                                    'Type': connection['type']
+                                }
+                                for info in connection['info']:
+                                    if info == 'password': 
+                                        password  = self.decrypt_v19_2(connection['info'][info], self._passphrase)
+                                        if password: 
+                                            values['Password'] = password
+                                    else:
+                                        values[info.capitalize()] = connection['info'][info]
+
+                                pwd_found.append(values)
+
         return pwd_found
diff --git a/Windows/lazagne/softwares/databases/sqldeveloper.py b/Windows/lazagne/softwares/databases/sqldeveloper.py
@@ -1,11 +1,17 @@
 # -*- coding: utf-8 -*- 
+
+# Passwords decryption for new verion have been taken from:
+# https://github.com/maaaaz/sqldeveloperpassworddecryptor
+
 import array
 import base64
 import binascii
 import hashlib
+import json
 import os
 import re
 from xml.etree.cElementTree import ElementTree
+from Crypto.Cipher import AES
 
 from lazagne.config.constant import constant
 from lazagne.config.crypto.pyDes import des, CBC
@@ -40,6 +46,28 @@ def decrypt(self, msg):
         text = crypter.decrypt(enc_text)
         return re.sub(r'[\x01-\x08]', '', text)
 
+    def aes_cbc_decrypt(self, encrypted_password, decryption_key, iv):
+        unpad = lambda s : s[:-ord(s[len(s)-1:])]
+        crypter = AES.new(decryption_key, AES.MODE_CBC, iv)
+        decrypted_password = unpad(crypter.decrypt(encrypted_password))
+
+        return decrypted_password.decode('utf-8')
+
+    def decrypt_v19_2(self, encrypted, db_system_id):
+        encrypted_password = base64.b64decode(encrypted)
+
+        salt = array.array('b', [6, -74, 97, 35, 61, 104, 50, -72])
+        key = hashlib.pbkdf2_hmac("sha256", db_system_id.encode(), salt, 5000, 32)
+
+        iv = encrypted_password[:16]
+        encrypted_password = encrypted_password[16:]
+        try:
+            decrypted = self.aes_cbc_decrypt(encrypted_password, key, iv)
+        except:
+            return False
+
+        return decrypted
+
     def get_passphrase(self, path):
         xml_name = u'product-preferences.xml'
         xml_file = None
@@ -64,11 +92,15 @@ def get_passphrase(self, path):
                         return elem.attrib['v']
 
     def run(self):
+        pwd_found = []
+
         path = os.path.join(constant.profile['APPDATA'], u'SQL Developer')
         if os.path.exists(path):
             self._passphrase = self.get_passphrase(path)
             if self._passphrase:
                 self.debug(u'Passphrase found: {passphrase}'.format(passphrase=self._passphrase))
+
+                # Check for older version
                 xml_name = u'connections.xml'
                 xml_file = None
 
@@ -103,4 +135,39 @@ def run(self):
 
                         pwd_found.append(values)
 
-                    return pwd_found
+                # Check for newer version
+                json_name = u'connections.json'
+                json_file = None
+
+                if os.path.exists(os.path.join(path, xml_name)):
+                    json_file = os.path.join(path, xml_name)
+                else:
+                    for p in os.listdir(path):
+                        if p.startswith('system'):
+                            new_directory = os.path.join(path, p)
+
+                            for pp in os.listdir(new_directory):
+                                if pp.startswith(u'o.jdeveloper.db.connection'):
+                                    if os.path.exists(os.path.join(new_directory, pp, json_name)):
+                                        json_file = os.path.join(new_directory, pp, json_name)
+                                    break
+
+                if json_file:
+                    with open(json_file) as jf: 
+                        data = json.load(jf)
+                        for connection in data['connections']: 
+                            values = {
+                                'Name': connection['name'], 
+                                'Type': connection['type']
+                            }
+                            for info in connection['info']:
+                                if info == 'password': 
+                                    password  = self.decrypt_v19_2(connection['info'][info], self._passphrase)
+                                    if password: 
+                                        values['Password'] = password
+                                else:
+                                    values[info.capitalize()] = connection['info'][info]
+
+                            pwd_found.append(values)
+
+        return pwd_found