破解Navicat Premium数据库账号密码

破解Navicat Premium数据库账号密码

如果你想破解一个已经连接好的数据库密码，可以参考这个方法。

1. 邮件查看已经连接好的数据库属性是这样的

但是密码是******谁也看不懂，博主也从网站上下载过一些星星查看器之类的东西，都无济于事。

1. 接下来就是尝试导出这些连接属性，选择文件---->导出连接，勾选想要导出的数据库，导出.ncx后缀的文件

   

打开导出后的文件，本以为就能看到数据库密码，没想到竟然加密了！！！！

1. 没办法，Google it ，后来发现GitHub上一个大神写了一个PHP，可以直接破解这个密码，一切成功的开始。https://github.com/tianhe1986/FatSmallTools

2. 本地没有安装PHP，so直接找个在线运行的工具https://tool.lu/coderunner/

3. 粘贴代码，修改参数，一切顺利

   

   <?php
   
   namespace FatSmallTools;
   
   class NavicatPassword
   {
       protected $version = 0;
       protected $aesKey = 'libcckeylibcckey';
       protected $aesIv = 'libcciv libcciv ';
       protected $blowString = '3DC5CA39';
       protected $blowKey = null;
       protected $blowIv = null;
       
       public function __construct($version = 12)
       {
           $this->version = $version;
           $this->blowKey = sha1('3DC5CA39', true);
           $this->blowIv = hex2bin('d9c7c3c8870d64bd');
       }
       
       public function encrypt($string)
       {
           $result = FALSE;
           switch ($this->version) {
               case 11:
                   $result = $this->encryptEleven($string);
                   break;
               case 12:
                   $result = $this->encryptTwelve($string);
                   break;
               default:
                   break;
           }
           
           return $result;
       }
       
       protected function encryptEleven($string)
       {
           $round = intval(floor(strlen($string) / 8));
           $leftLength = strlen($string) % 8;
           $result = '';
           $currentVector = $this->blowIv;
           
           for ($i = 0; $i < $round; $i++) {
               $temp = $this->encryptBlock($this->xorBytes(substr($string, 8 * $i, 8), $currentVector));
               $currentVector = $this->xorBytes($currentVector, $temp);
               $result .= $temp;
           }
           
           if ($leftLength) {
               $currentVector = $this->encryptBlock($currentVector);
               $result .= $this->xorBytes(substr($string, 8 * $i, $leftLength), $currentVector);
           }
           
           return strtoupper(bin2hex($result));
       }
       
       protected function encryptBlock($block)
       {
           return openssl_encrypt($block, 'BF-ECB', $this->blowKey, OPENSSL_RAW_DATA|OPENSSL_NO_PADDING); 
       }
       
       protected function decryptBlock($block)
       {
           return openssl_decrypt($block, 'BF-ECB', $this->blowKey, OPENSSL_RAW_DATA|OPENSSL_NO_PADDING); 
       }
       
       protected function xorBytes($str1, $str2)
       {
           $result = '';
           for ($i = 0; $i < strlen($str1); $i++) {
               $result .= chr(ord($str1[$i]) ^ ord($str2[$i]));
           }
           
           return $result;
       }
       
       protected function encryptTwelve($string)
       {
           $result = openssl_encrypt($string, 'AES-128-CBC', $this->aesKey, OPENSSL_RAW_DATA, $this->aesIv);
           return strtoupper(bin2hex($result));
       }
       
       public function decrypt($string)
       {
           $result = FALSE;
           switch ($this->version) {
               case 11:
                   $result = $this->decryptEleven($string);
                   break;
               case 12:
                   $result = $this->decryptTwelve($string);
                   break;
               default:
                   break;
           }
           
           return $result;
       }
       
       protected function decryptEleven($upperString)
       {
           $string = hex2bin(strtolower($upperString));
           
           $round = intval(floor(strlen($string) / 8));
           $leftLength = strlen($string) % 8;
           $result = '';
           $currentVector = $this->blowIv;
           
           for ($i = 0; $i < $round; $i++) {
               $encryptedBlock = substr($string, 8 * $i, 8);
               $temp = $this->xorBytes($this->decryptBlock($encryptedBlock), $currentVector);
               $currentVector = $this->xorBytes($currentVector, $encryptedBlock);
               $result .= $temp;
           }
           
           if ($leftLength) {
               $currentVector = $this->encryptBlock($currentVector);
               $result .= $this->xorBytes(substr($string, 8 * $i, $leftLength), $currentVector);
           }
           
           return $result;
       }
       
       protected function decryptTwelve($upperString)
       {
           $string = hex2bin(strtolower($upperString));
           return openssl_decrypt($string, 'AES-128-CBC', $this->aesKey, OPENSSL_RAW_DATA, $this->aesIv);
       }
   }
   
   
   use FatSmallTools\NavicatPassword;
   
   //需要指定版本，11或12
   //$navicatPassword = new NavicatPassword(12);
   $navicatPassword = new NavicatPassword(11);
   
   //解密
   //$decode = $navicatPassword->decrypt('15057D7BA390');
   $decode = $navicatPassword->decrypt('73EFB530B74DCCE359F34539742ECD9E8D1FE826F5C263CE');
   echo $decode."\n";