6 Star 36 Fork 17

liuweilhy / 透明加密在线解密工具

加入 Gitee
与超过 1200万 开发者一起发现、参与优秀开源项目,私有仓库也完全免费 :)
免费加入
克隆/下载
贡献代码
同步代码
取消
提示: 由于 Git 不支持空文件夾,创建文件夹后会生成空的 .keep 文件
Loading...
README
LGPL-3.0

透明加密的原理

  在各大制造业企业中,技术文件的保密工作非常受重视。
  传统的文件加密解密方案是通过出入密码的方式实现的,但对于每天都有大量文件要处理的企业来说,反复输入密码是非常不方便的,也不能防范员工将解密后的文件泄露出去。
  而采用消息钩子机制的透明加密方式很好地解决了这个问题。文件在磁盘上以密文方式存储,打开时首先被加密软件客户端注入的钩子(hook)截获,解密成明文后再提交给相应程序;保存时同样被钩子截获,加密后再保存到磁盘上。整个加密和解密的过程,对用户是透明的,用户几乎感受不到加密解密程序的存在。而且能很好地保护加密文件,外泄的密文不能被外界轻易解密。

透明加密的破解方法

  知道了原理,破解这种加密方式就不难了。
  对于使用内核钩子的加密方式,以“GS-DES大天图文档安全管理系统”(客户端为DES5.0版本)为例,破解方法如下:首先让应用程序打开文件,再摘除加密程序注入的内核钩子(基本都是SSDT hook),再保存文件即可得到明文。摘除内核钩子后有个遗留问题,就是应用程序打不开加密文件了,这需要重新运行加密程序客户端,或者干脆重启系统。
  对于进程内挂钩的加密方式,以“敏捷安全卫士AgileDG”(客户端为DG8.0版本)为例,破解方法如下:首先让应用程序打开文件,再摘除被保护的应用程序进程中对应的API钩子,再保存文件即可得到明文。这种方式破解起来有个方便之处,就是重新运行应用程序即可打开加密文件,而不需要重启加密程序客户端。
  另外,很多加密客户端防截屏会采用全局消息钩子的方式(比如屏蔽键盘上的Screen键),同样摘除钩子可解决。其它加密方式、屏蔽U盘、屏蔽特定程序执行等等,万变不离其宗。举一反三,灵活运用,各种透明加密不在话下。
  这里推荐两款ARK工具——“XueTr”(现在改名“PCHunter”)、“PowerTool”,反挂钩的利器!具体用法不讲了,怕被和谐。

关于本工具

工具的用户界面
  经笔者试验发现,透明加密程序会对指定程序的特定输出格式不加密。如,AutoCAD的输出txt文本文件,是以明文输出的。这样,本工具以仿冒AutoCAD的方式,骗取明文输出解密后的文件。
  点击这里下载本工具
  本工具对外开源,Git地址为:https://gitee.com/liuweilhy/Decrypt.git
  注意:此工具是本人在2014年用Visual Studio 2013开发的C#程序。如果在VS2017下重新编译需要重定解决方案,否则会报错。

免责声明

  本人不对他人以本文提供的方法做出的任何事付法律责任!请诸位遵纪守法,谨慎使用!非法破解后果很严重!

GNU LESSER GENERAL PUBLIC LICENSE Version 3, 29 June 2007 Copyright (C) 2007 Free Software Foundation, Inc. [http://fsf.org/] Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. This version of the GNU Lesser General Public License incorporates the terms and conditions of version 3 of the GNU General Public License, supplemented by the additional permissions listed below. 0. Additional Definitions. As used herein, "this License" refers to version 3 of the GNU Lesser General Public License, and the "GNU GPL" refers to version 3 of the GNU General Public License. "The Library" refers to a covered work governed by this License, other than an Application or a Combined Work as defined below. An "Application" is any work that makes use of an interface provided by the Library, but which is not otherwise based on the Library. Defining a subclass of a class defined by the Library is deemed a mode of using an interface provided by the Library. A "Combined Work" is a work produced by combining or linking an Application with the Library. The particular version of the Library with which the Combined Work was made is also called the "Linked Version". The "Minimal Corresponding Source" for a Combined Work means the Corresponding Source for the Combined Work, excluding any source code for portions of the Combined Work that, considered in isolation, are based on the Application, and not on the Linked Version. The "Corresponding Application Code" for a Combined Work means the object code and/or source code for the Application, including any data and utility programs needed for reproducing the Combined Work from the Application, but excluding the System Libraries of the Combined Work. 1. Exception to Section 3 of the GNU GPL. You may convey a covered work under sections 3 and 4 of this License without being bound by section 3 of the GNU GPL. 2. Conveying Modified Versions. If you modify a copy of the Library, and, in your modifications, a facility refers to a function or data to be supplied by an Application that uses the facility (other than as an argument passed when the facility is invoked), then you may convey a copy of the modified version: a) under this License, provided that you make a good faith effort to ensure that, in the event an Application does not supply the function or data, the facility still operates, and performs whatever part of its purpose remains meaningful, or b) under the GNU GPL, with none of the additional permissions of this License applicable to that copy. 3. Object Code Incorporating Material from Library Header Files. The object code form of an Application may incorporate material from a header file that is part of the Library. You may convey such object code under terms of your choice, provided that, if the incorporated material is not limited to numerical parameters, data structure layouts and accessors, or small macros, inline functions and templates (ten or fewer lines in length), you do both of the following: a) Give prominent notice with each copy of the object code that the Library is used in it and that the Library and its use are covered by this License. b) Accompany the object code with a copy of the GNU GPL and this license document. 4. Combined Works. You may convey a Combined Work under terms of your choice that, taken together, effectively do not restrict modification of the portions of the Library contained in the Combined Work and reverse engineering for debugging such modifications, if you also do each of the following: a) Give prominent notice with each copy of the Combined Work that the Library is used in it and that the Library and its use are covered by this License. b) Accompany the Combined Work with a copy of the GNU GPL and this license document. c) For a Combined Work that displays copyright notices during execution, include the copyright notice for the Library among these notices, as well as a reference directing the user to the copies of the GNU GPL and this license document. d) Do one of the following: 0) Convey the Minimal Corresponding Source under the terms of this License, and the Corresponding Application Code in a form suitable for, and under terms that permit, the user to recombine or relink the Application with a modified version of the Linked Version to produce a modified Combined Work, in the manner specified by section 6 of the GNU GPL for conveying Corresponding Source. 1) Use a suitable shared library mechanism for linking with the Library. A suitable mechanism is one that (a) uses at run time a copy of the Library already present on the user's computer system, and (b) will operate properly with a modified version of the Library that is interface-compatible with the Linked Version. e) Provide Installation Information, but only if you would otherwise be required to provide such information under section 6 of the GNU GPL, and only to the extent that such information is necessary to install and execute a modified version of the Combined Work produced by recombining or relinking the Application with a modified version of the Linked Version. (If you use option 4d0, the Installation Information must accompany the Minimal Corresponding Source and Corresponding Application Code. If you use option 4d1, you must provide the Installation Information in the manner specified by section 6 of the GNU GPL for conveying Corresponding Source.) 5. Combined Libraries. You may place library facilities that are a work based on the Library side by side in a single library together with other library facilities that are not Applications and are not covered by this License, and convey such a combined library under terms of your choice, if you do both of the following: a) Accompany the combined library with a copy of the same work based on the Library, uncombined with any other library facilities, conveyed under the terms of this License. b) Give prominent notice with the combined library that part of it is a work based on the Library, and explaining where to find the accompanying uncombined form of the same work. 6. Revised Versions of the GNU Lesser General Public License. The Free Software Foundation may publish revised and/or new versions of the GNU Lesser General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns. Each version is given a distinguishing version number. If the Library as you received it specifies that a certain numbered version of the GNU Lesser General Public License "or any later version" applies to it, you have the option of following the terms and conditions either of that published version or of any later version published by the Free Software Foundation. If the Library as you received it does not specify a version number of the GNU Lesser General Public License, you may choose any version of the GNU Lesser General Public License ever published by the Free Software Foundation. If the Library as you received it specifies that a proxy can decide whether future versions of the GNU Lesser General Public License shall apply, that proxy's public statement of acceptance of any version is permanent authorization for you to choose that version for the Library.

简介

本工具用于破解透明加密,仅适用于有解密权限的系统进行在线解密。 此工具是本人在2014年用Visual Studio 2013开发的C#程序。如果在VS2017下重新编译需要重定解决方案,否则会报错。 展开 收起
C#
LGPL-3.0
取消

贡献者

全部

近期动态

加载更多
不能加载更多了
C#
1
https://gitee.com/liuweilhy/Decrypt.git
git@gitee.com:liuweilhy/Decrypt.git
liuweilhy
Decrypt
透明加密在线解密工具
master

搜索帮助