From 5edb4f88582c537e4d13256d169dd42fe0ecef20 Mon Sep 17 00:00:00 2001 From: Token2 Date: Thu, 15 Jul 2021 10:23:34 +0200 Subject: [PATCH] Add files via upload --- extract_otp_secret_keys-linux.py | 115 +++++++++++++++++++++++++++++++ 1 file changed, 115 insertions(+) create mode 100644 extract_otp_secret_keys-linux.py diff --git a/extract_otp_secret_keys-linux.py b/extract_otp_secret_keys-linux.py new file mode 100644 index 0000000..28ec715 --- /dev/null +++ b/extract_otp_secret_keys-linux.py @@ -0,0 +1,115 @@ +# Based on the original script from : Scito (https://scito.ch) +# Changes in this script: +# 1. Changed the QR code generation method to SimpleCodeGenerator from Nir Sofer +# 2. Changed export format to have HTML and Molto-2 compatible import file +# This program is free software: you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation, either version 3 of the License, or +# (at your option) any later version. +# +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with this program. If not, see . + +import argparse +import base64 +import fileinput +import sys +from urllib.parse import parse_qs, urlencode, urlparse, quote +from os import path, mkdir, system, remove +from re import sub, compile as rcompile +import generated_python.google_auth_pb2 +arg_parser = argparse.ArgumentParser() +arg_parser.add_argument('--verbose', '-v', help='verbose output', action='store_true') +arg_parser.add_argument('--saveqr', '-s', help='save QR code(s) as images to the "qr" subfolder', action='store_true') +arg_parser.add_argument('--printqr', '-p', help='print QR code(s) as text to the terminal', action='store_true') +arg_parser.add_argument('--infile', help='file or - for stdin (default: -) with "otpauth-migration://..." URLs separated by newlines, lines starting with # are ignored') +arg_parser.add_argument('--moltofile', help='save exctracted data in file compatible with Molto-2 format. If file does not exist a new file will be created.') +arg_parser.add_argument('--htmlfile', help='save exctracted data in html file with QR codes for enrolling TOTP profiles to other apps or single profile tokens') +arg_parser.add_argument('--fromimg', help='read otpauth-migration strings from a screenshot') +args = arg_parser.parse_args() + +verbose = args.verbose + +# https://stackoverflow.com/questions/40226049/find-enums-listed-in-python-descriptor-for-protobuf +def get_enum_name_by_number(parent, field_name): + field_value = getattr(parent, field_name) + return parent.DESCRIPTOR.fields_by_name[field_name].enum_type.values_by_number.get(field_value).name + +def convert_secret_from_bytes_to_base32_str(bytes): + return str(base64.b32encode(otp.secret), 'utf-8').replace('=', '') + +#decode from image to text file +if args.fromimg: + system("zbarimg --raw "+args.fromimg+" > input_qr.txt ") + args.infile = "input_qr.txt" + +i = j = 0 +print('Starting the process') +for line in (line.strip() for line in fileinput.input(args.infile)): + if verbose: print(line) + if line.startswith('#') or line == '': continue + if not line.startswith('otpauth-migration://'): print('\nWARN: line is not a otpauth-migration:// URL\ninput file: {}\nline "{}"\nProbably a wrong file was given'.format(args.infile, line)) + parsed_url = urlparse(line) + params = parse_qs(parsed_url.query) + if not 'data' in params: + print('\nERROR: no data query parameter in input URL\ninput file: {}\nline "{}"\nProbably a wrong file was given'.format(args.infile, line)) + sys.exit(1) + data_encoded = params['data'][0] + data = base64.b64decode(data_encoded) + payload = generated_python.google_auth_pb2.MigrationPayload() + payload.ParseFromString(data) + i += 1 + if verbose: print('\n{}. Payload Line'.format(i), payload, sep='\n') + line_count = -1 + #Count lines in Molto2-export.txt + if args.moltofile: + if path.exists(args.moltofile): + + file = open(args.moltofile, "r") + + for line in file: + if line != "\n": + line_count += 1 + file.close() + + # pylint: disable=no-member + for otp in payload.otp_parameters: + j += 1 + + if verbose: print('\n{}. Secret Key'.format(j)) + else: print() + print('Name: {}'.format(otp.name)) + secret = convert_secret_from_bytes_to_base32_str(otp.secret) + #print('Secret: {}'.format(secret)) + if otp.issuer: print('Issuer: {}'.format(otp.issuer)) + print('Type: {}'.format(get_enum_name_by_number(otp, 'type'))) + url_params = { 'secret': secret } + if otp.type == 1: url_params['counter'] = otp.counter + if otp.issuer: url_params['issuer'] = otp.issuer + otp_url = 'otpauth://{}/{}?'.format('totp' if otp.type == 2 else 'hotp', quote(otp.name)) + urlencode(url_params) + if args.moltofile: + with open(args.moltofile, 'a') as f: + #Create text file with seed info + f.write(str(line_count+j)+'\t'+secret+'\tsha1\t6\t30\tyes\tyes\t'+otp.issuer+'\n') + if args.htmlfile: + with open(args.htmlfile, 'a') as f2: + #Create html file with seed info in QR format + keyURI="otpauth://totp/"+otp.name+"?secret="+secret#+"?issuer="+otp.issuer + #Generate QR code image + system ("qrencode "+ keyURI + " -o img/"+str(line_count+j)+".png") + encoded = base64.b64encode(open("img/"+str(line_count+j)+".png", "rb").read()) + encoded2=encoded.decode('utf-8') + remove("img/"+str(line_count+j)+".png") + f2.write('TOTP Profile '+str(line_count+j)+':'+otp.name+"
"+secret+"


") +#empty input_qr.txt +f = open('input_qr.txt', 'r+') +f.truncate(0) # need '0' when using r+ +print(' ') +print('Files have been generated:') +print (args.htmlfile) +print (args.moltofile)