cisco_decrypt 0.0.1

data/bin/cisco_decrypt

@@ -0,0 +1,11 @@
+#!/usr/bin/env ruby
+
+require 'cisco_decrypt'
+
+ARGV.each do |command|
+  if File.exists?(File.expand_path(command))
+    CiscoDecrypt.from_pcf command
+  else
+    puts CiscoDecrypt.decrypt_string command
+  end
+end

data/ext/cisco_decrypt/cisco-decrypt.c

@@ -0,0 +1,158 @@
+/* Decoder for password encoding of Cisco VPN client.
+   Copyright (C) 2005 Maurice Massar
+   Thanks to HAL-9000@evilscientists.de for decoding and posting the algorithm!
+
+   This program is free software; you can redistribute it and/or modify
+   it under the terms of the GNU General Public License as published by
+   the Free Software Foundation; either version 2 of the License, or
+   (at your option) any later version.
+
+   This program is distributed in the hope that it will be useful,
+   but WITHOUT ANY WARRANTY; without even the implied warranty of
+   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+   GNU General Public License for more details.
+
+   You should have received a copy of the GNU General Public License
+   along with this program; if not, write to the Free Software
+   Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
+*/
+
+/*
+   Requires libgcrypt version 1.1.90 or newer
+   Compile with:
+    gcc -Wall -o cisco-decrypt cisco-decrypt.c $(libgcrypt-config --libs --cflags)
+   Usage:
+    ./cisco-decrypt DEADBEEF...012345678 424242...7261
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <gcrypt.h>
+#include <errno.h>
+#include <ruby.h>
+
+int hex2bin_c(unsigned int c)
+{
+	if ((c >= '0')&&(c <= '9'))
+		return c - '0';
+	if ((c >= 'A')&&(c <= 'F'))
+		return c - 'A' + 10;
+	if ((c >= 'a')&&(c <= 'f'))
+		return c - 'a' + 10;
+	return -1;
+}
+
+int hex2bin(const char *str, char **bin, int *len)
+{
+	char *p;
+	int i, l;
+
+	if (!bin)
+		return EINVAL;
+
+	for (i = 0; str[i] != '\0'; i++)
+		if (hex2bin_c(str[i]) == -1)
+			return EINVAL;
+
+	l = i;
+	if ((l & 1) != 0)
+		return EINVAL;
+	l /= 2;
+
+	p = malloc(l);
+	if (p == NULL)
+		return ENOMEM;
+
+	for (i = 0; i < l; i++)
+		p[i] = hex2bin_c(str[i*2]) << 4 | hex2bin_c(str[i*2+1]);
+
+	*bin = p;
+	if (len)
+		*len = l;
+
+	return 0;
+}
+
+int c_decrypt(char *ct, int len, char **resp, char *reslenp)
+{
+	const char *h1  = ct;
+	const char *h4  = ct + 20;
+	const char *enc = ct + 40;
+
+	char ht[20], h2[20], h3[20], key[24];
+	const char *iv = h1;
+	char *res;
+	gcry_cipher_hd_t ctx;
+	int reslen;
+
+	if (len < 48)
+		return 0;
+	len -= 40;
+
+	memcpy(ht, h1, 20);
+
+	ht[19]++;
+	gcry_md_hash_buffer(GCRY_MD_SHA1, h2, ht, 20);
+
+	ht[19] += 2;
+	gcry_md_hash_buffer(GCRY_MD_SHA1, h3, ht, 20);
+
+	memcpy(key, h2, 20);
+	memcpy(key+20, h3, 4);
+	/* who cares about parity anyway? */
+
+	gcry_md_hash_buffer(GCRY_MD_SHA1, ht, enc, len);
+
+	if (memcmp(h4, ht, 20) != 0)
+		return -1;
+
+	res = malloc(len);
+	if (res == NULL)
+		return -1;
+
+	gcry_cipher_open(&ctx, GCRY_CIPHER_3DES, GCRY_CIPHER_MODE_CBC, 0);
+	gcry_cipher_setkey(ctx, key, 24);
+	gcry_cipher_setiv(ctx, iv, 8);
+	gcry_cipher_decrypt(ctx, (unsigned char *)res, len, (unsigned char *)enc, len);
+	gcry_cipher_close(ctx);
+
+	reslen = len - res[len-1];
+	res[reslen] = '\0';
+
+	if (resp)
+		*resp = res;
+	if (reslenp)
+		*reslenp = reslen;
+	return 0;
+}
+
+char *decrypt(char *shared)
+{
+        int len, ret = 0;
+	char *bin, *pw;
+
+	ret = hex2bin(shared, &bin, &len);
+	if (ret != 0) {
+                rb_raise(rb_eStandardError, "Error decoding string");
+	}
+	ret = c_decrypt(bin, len, &pw, NULL);
+	free(bin);
+	if (ret != 0) {
+                rb_raise(rb_eStandardError, "Error decrypting string");
+	}
+        return pw;
+	free(pw);
+}
+
+static VALUE decrypt_string(VALUE klass, VALUE string)
+{
+    Check_Type(string, T_STRING);
+    char *str = StringValueCStr(string);
+    return rb_str_new2(decrypt(str));
+}
+
+void Init_cisco_decrypt()
+{
+    VALUE mCisco = rb_define_module("CiscoDecrypt");
+    rb_define_singleton_method(mCisco, "decrypt_string", decrypt_string, 1);
+}

data/ext/cisco_decrypt/extconf.rb

@@ -0,0 +1,7 @@
+require 'mkmf'
+
+dir_config('libgcrypt')
+have_library("gcrypt")
+have_header('gcrypt.h')
+
+create_makefile('cisco_decrypt/cisco_decrypt')

data/lib/cisco_decrypt.rb

@@ -0,0 +1,20 @@
+require 'cisco_decrypt/cisco_decrypt'
+require 'inifile'
+
+module CiscoDecrypt
+  def self.from_pcf(file)
+    config_file = IniFile.new(File.expand_path(file))
+    main_config = config_file['main']
+    encrypted_password = main_config['enc_GroupPwd']
+    group_name = main_config['GroupName']
+    host = main_config['Host']
+    description = main_config['Description']
+    puts <<-OUT
+      Description: #{description}
+      Host:        #{host}
+      Group Name:  #{group_name}
+      Encrypted:   \033[031m#{encrypted_password}\033[0m
+      Decrypted:   \033[032m#{self.decrypt_string(encrypted_password)}\033[0m
+    OUT
+  end
+end

metadata

@@ -0,0 +1,82 @@
+--- !ruby/object:Gem::Specification
+name: cisco_decrypt
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+  prerelease: 
+platform: ruby
+authors:
+- elcuervo
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2012-05-11 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: inifile
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: cutest
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+description: Decrypt cisco passwords to use the shared secret
+email: elcuervo@elcuervo.co
+executables:
+- cisco_decrypt
+extensions:
+- ext/cisco_decrypt/extconf.rb
+extra_rdoc_files: []
+files:
+- lib/cisco_decrypt.rb
+- ext/cisco_decrypt/cisco-decrypt.c
+- ext/cisco_decrypt/extconf.rb
+- bin/cisco_decrypt
+homepage: http://github.com/elcuervo/cisco_decrypt
+licenses: []
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 1.8.22
+signing_key: 
+specification_version: 3
+summary: Decrypt cisco passwords
+test_files: []