mirror of https://github.com/hashcat/hashcat.git
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
124 lines
2.4 KiB
124 lines
2.4 KiB
#!/usr/bin/env perl
|
|
|
|
##
|
|
## Author......: See docs/credits.txt
|
|
## License.....: MIT
|
|
##
|
|
|
|
use strict;
|
|
use warnings;
|
|
|
|
use Digest::SHA qw (sha256 sha384 sha512);
|
|
use Digest::HMAC qw (hmac);
|
|
use MIME::Base64 qw (encode_base64url decode_base64url);
|
|
use JSON qw (encode_json decode_json);
|
|
|
|
sub module_constraints { [[0, 64], [-1, -1], [-1, -1], [-1, -1], [-1, -1]] }
|
|
|
|
sub module_generate_hash
|
|
{
|
|
my $word = shift;
|
|
my $salt = shift || get_random_jwt_salt ();
|
|
|
|
my ($header_base64) = split (/\./, $salt);
|
|
|
|
my $header_jwt = decode_base64url ($header_base64);
|
|
|
|
my $header = decode_json ($header_jwt);
|
|
|
|
my $alg = $header->{"alg"};
|
|
|
|
my $digest;
|
|
|
|
if ($alg eq "HS256")
|
|
{
|
|
$digest = hmac ($salt, $word, \&sha256, 64);
|
|
}
|
|
elsif ($alg eq "HS384")
|
|
{
|
|
$digest = hmac ($salt, $word, \&sha384, 128);
|
|
}
|
|
elsif ($alg eq "HS512")
|
|
{
|
|
$digest = hmac ($salt, $word, \&sha512, 128);
|
|
}
|
|
else
|
|
{
|
|
die "not supported hash\n";
|
|
}
|
|
|
|
my $hash = sprintf ("%s.%s", $salt, encode_base64url ($digest, ""));
|
|
|
|
return $hash;
|
|
}
|
|
|
|
sub module_verify_hash
|
|
{
|
|
my $line = shift;
|
|
|
|
my ($hash, $word) = split (':', $line);
|
|
|
|
return unless defined $hash;
|
|
return unless defined $word;
|
|
|
|
my @data = split (/\./, $hash);
|
|
|
|
return unless scalar @data == 3;
|
|
|
|
my ($header, $payload, $signature) = @data;
|
|
|
|
my $salt = $header . "." . $payload;
|
|
|
|
my $word_packed = pack_if_HEX_notation ($word);
|
|
|
|
my $new_hash = module_generate_hash ($word_packed, $salt);
|
|
|
|
return ($new_hash, $word);
|
|
}
|
|
|
|
sub get_random_jwt_salt
|
|
{
|
|
my @hashes =
|
|
(
|
|
"HS256",
|
|
#"HS384", #this is support in hashcat, but commented out here to prevent mixed hash output files in single mode
|
|
#"HS512", #this is support in hashcat, but commented out here to prevent mixed hash output files in single mode
|
|
#"RS256", #not supported by hashcat
|
|
#"RS384",
|
|
#"RS512",
|
|
#"PS256",
|
|
#"PS384",
|
|
#"PS512",
|
|
#"ES256",
|
|
#"ES384",
|
|
#"ES512",
|
|
);
|
|
|
|
my $rnd = random_number (0, scalar @hashes - 1);
|
|
|
|
my $hash = $hashes[$rnd];
|
|
|
|
my $header =
|
|
{
|
|
"alg" => $hash
|
|
};
|
|
|
|
my $random_key = random_number (1, 100000000);
|
|
my $random_val = random_number (1, 100000000);
|
|
|
|
my $payload =
|
|
{
|
|
$random_key => $random_val
|
|
};
|
|
|
|
my $header_json = encode_json ($header);
|
|
my $payload_json = encode_json ($payload);
|
|
|
|
my $header_base64 = encode_base64url ($header_json, "");
|
|
my $payload_base64 = encode_base64url ($payload_json, "");
|
|
|
|
return $header_base64 . "." . $payload_base64;
|
|
}
|
|
|
|
1;
|