devio / mod0keecrack Goto Github PK

Hi Thorsten,

I need to recover a kdbx database with keyfile and therefore would like to use your nice program. Unfortunately it doesn't seem to work in my case.

I created two test databases (Keepass 2.24, Windows 10, x64): tests.zip
One with a corresponding keyfile, one without.
Both use as master keyword: test

mod0keecrack was created using VS 2015 community edition on the same computer.

If I run the following command:

echo test | mod0keecrack.exe keecrack-test-nofile.kdbx

I get the following output:

[*] using  db: keecrack-test-nofile.kdbx
[*] using key: keecrack-test-nofile.key
[*] kdbx header:
[-]    file magic:          9aa2d903
[-]    file identifier:     b54bfb67
[-]    file minor version:  0001
[-]    file major version:  0003
[*] kdbx headerentries:
[-]    END:                 0D0A0D0A
[-]    COMMENT:
[-]    CIPHERID:            31C1F2E6BF714350BE5805216AFC5AFF
[-]    COMPRESSIONFLAGS:    00000001
[-]    MASTERSEED:          9A133102F9D2994B0F31295B756E68B993B3AF933D324960555DC59EBAC4E8B7
[-]    TRANSFORMSEED:       B9A62883EB9211F5C5034A6EBF4CBD5326C7A069134E33F951B4EB67E16FC55A
[-]    TRANSFORMROUNDS:     0000000000001770
[-]    ENCRYPTIONIV:        03CAAFEB3D65C04212D3E59A3ED54679
[-]    PROTECTEDSTREAMKEY:  5CB0FDCCF8848A6AAF2809B0C4942F0E47DFFB5DA70F2CEED98BC9BDF1ED465B
[-]    STREAMSTARTBYTES:    01B2E965B5D6A0294F5B1142D38E0E84DB28B2C101FD1CDB2F5ED87ECAA4786D
[-]    INNERRANDOMSTREAMID: 00000002
[*] kdbx payload:
[-]    payload offset:      de
[-]    payload len:         660
[*] Not using keyfile
[*] kdbx crack:
[+] trying: test

So there is no indication that the correct password has been found. The same for the one with the keyfile.

Any ideas?

Cheers,

Kai

Failed to compile using GCC on Kali Linux:

$ gcc -o keecrack helper.c mod0keecrack.c crypto-ms.c &> error.txt

In file included from mod0keecrack.c:45:0: mod0keecrack.h:41:19: error: conflicting types for ‘off_t’ typedef uintmax_t off_t; ^~~~~ In file included from mod0keecrack.c:40:0: /usr/include/stdio.h:90:17: note: previous declaration of ‘off_t’ was here typedef __off_t off_t; ^~~~~ mod0keecrack.c: In function ‘kdbx_headerentries_free’: mod0keecrack.c:58:7: warning: implicit declaration of function ‘free’ [-Wimplicit-function-declaration] free(e[i].data); ^~~~ mod0keecrack.c:58:7: warning: incompatible implicit declaration of built-in function ‘free’ mod0keecrack.c:58:7: note: include ‘<stdlib.h>’ or provide a declaration of ‘free’ mod0keecrack.c: In function ‘kdbx_headerentries_read’: mod0keecrack.c:98:35: warning: implicit declaration of function ‘malloc’ [-Wimplicit-function-declaration] entries[id].data = (uint8_t *)malloc(entries[id].len); ^~~~~~ mod0keecrack.c:98:35: warning: incompatible implicit declaration of built-in function ‘malloc’ mod0keecrack.c:98:35: note: include ‘<stdlib.h>’ or provide a declaration of ‘malloc’ mod0keecrack.c: In function ‘kdbx_payload_read’: mod0keecrack.c:182:32: warning: incompatible implicit declaration of built-in function ‘malloc’ p->encrypted = (uint8_t *)malloc(p->len); ^~~~~~ mod0keecrack.c:182:32: note: include ‘<stdlib.h>’ or provide a declaration of ‘malloc’ mod0keecrack.c: In function ‘kdbx_payload_crack’: mod0keecrack.c:226:27: warning: incompatible implicit declaration of built-in function ‘malloc’ key_hash = (uint8_t *)malloc(32); ^~~~~~ mod0keecrack.c:226:27: note: include ‘<stdlib.h>’ or provide a declaration of ‘malloc’ mod0keecrack.c: In function ‘kdbx_decrypt_payload’: mod0keecrack.c:309:36: warning: incompatible implicit declaration of built-in function ‘malloc’ masterkey_input = (uint8_t *)malloc(masterkey_input_len); ^~~~~~ mod0keecrack.c:309:36: note: include ‘<stdlib.h>’ or provide a declaration of ‘malloc’ mod0keecrack.c: In function ‘main’: mod0keecrack.c:353:28: warning: incompatible implicit declaration of built-in function ‘malloc’ kdbx_filename = (char *) malloc(filename_len + 5); ^~~~~~ mod0keecrack.c:353:28: note: include ‘<stdlib.h>’ or provide a declaration of ‘malloc’ mod0keecrack.c:357:5: warning: implicit declaration of function ‘exit’ [-Wimplicit-function-declaration]