From 1aeeced038511aba1bf398afcfa7e639f3b25c42 Mon Sep 17 00:00:00 2001
From: Dylan Evans <62859381+fin3ss3g0d@users.noreply.github.com>
Date: Thu, 4 Jul 2024 13:37:23 -0400
Subject: [PATCH] Create tools/shiro1-to-hashcat.py

---
 tools/shiro1-to-hashcat.py | 56 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 56 insertions(+)
 create mode 100644 tools/shiro1-to-hashcat.py

diff --git a/tools/shiro1-to-hashcat.py b/tools/shiro1-to-hashcat.py
new file mode 100644
index 000000000..9619530ef
--- /dev/null
+++ b/tools/shiro1-to-hashcat.py
@@ -0,0 +1,56 @@
+import os
+import re
+import glob
+import argparse
+
+def extract_hashes_from_pcl(file_path):
+    shiro_pattern = re.compile(br'\$shiro1\$SHA-512\$(\d+)\$[A-Za-z0-9+/=]+\$[A-Za-z0-9+/=]+')
+    
+    try:
+        with open(file_path, 'rb') as f:
+            data = f.read()
+
+        matches = shiro_pattern.finditer(data)
+        extracted_hashes = []
+
+        for match in matches:
+            full_match = match.group(0).decode()
+            print(f'[+] Found Shiro 1 hash: {full_match}')
+            extracted_hashes.append(full_match)
+            
+        if not extracted_hashes:
+            print(f"No Shiro 1 hashes found in {file_path}")
+            return None
+
+        return extracted_hashes
+
+    except Exception as e:
+        print(f"Failed to parse {file_path}: {e}")
+        return None
+
+def main():
+    parser = argparse.ArgumentParser(description="Extract Apache Shiro 1 hashes from .pcl files for use with Hashcat.")
+    parser.add_argument("input_dir", help="Directory path containing the .pcl files")
+    parser.add_argument("output_file", help="Output file to save the hashes")
+
+    args = parser.parse_args()
+
+    pcl_files = glob.glob(os.path.join(args.input_dir, '*.pcl'))
+    all_hashes = []
+
+    for pcl_file in pcl_files:
+        print(f"Processing {pcl_file}")
+        hashes = extract_hashes_from_pcl(pcl_file)
+        if hashes:
+            all_hashes.extend(hashes)
+
+    if all_hashes:
+        with open(args.output_file, 'w') as f:
+            for hashcat_hash in all_hashes:
+                f.write(f"{hashcat_hash}\n")
+        print(f"Extracted hashes have been saved to {args.output_file}!\nTotal hashes: {len(all_hashes)}\nRun hashcat with mode 12150!")
+    else:
+        print("No hashes were extracted.")
+
+if __name__ == '__main__':
+    main()