__ __ __ __ _____ _ _ _____ _ _ _ | \/ | \ \ / / | __ \ (_) | | / ____| | | | | | \ / |_ __\ V / | |__) | __ ___ ____ _| |_ ___ | (___ | |__ ___| | | | |\/| | '__|> < | ___/ '__| \ \ / / _` | __/ _ \ \___ \| '_ \ / _ \ | | | | | | |_ / . \ | | | | | |\ V / (_| | || __/ ____) | | | | __/ | | |_| |_|_(_)_/ \_\ |_| |_| |_| \_/ \__,_|\__\___| |_____/|_| |_|\___V 2.1 if you need WebShell for Seo everyday contact me on Telegram Telegram Address : @jackleetFor_More_Tools:
a
f�Wc"! � @ s� d Z ddlmZmZ ddlmZ ddlZddlZe�e �Z
ddl m Z ddl
mZ ddlmZmZmZ ddlm mZ dd gZd
d � Zd Zed
�Zdd� Zdd� Z G dd� dej ej ej �Z G dd � d ej ej ej �Z!dS )a� passlib.handlers.mssql - MS-SQL Password Hash
Notes
=====
MS-SQL has used a number of hash algs over the years,
most of which were exposed through the undocumented
'pwdencrypt' and 'pwdcompare' sql functions.
Known formats
-------------
6.5
snefru hash, ascii encoded password
no examples found
7.0
snefru hash, unicode (what encoding?)
saw ref that these blobs were 16 bytes in size
no examples found
2000
byte string using displayed as 0x hex, using 0x0100 prefix.
contains hashes of password and upper-case password.
2007
same as 2000, but without the upper-case hash.
refs
----------
https://blogs.msdn.com/b/lcris/archive/2007/04/30/sql-server-2005-about-login-password-hashes.aspx?Redirected=true
http://us.generation-nt.com/securing-passwords-hash-help-35429432.html
http://forum.md5decrypter.co.uk/topic230-mysql-and-mssql-get-password-hashes.aspx
http://www.theregister.co.uk/2002/07/08/cracking_ms_sql_server_passwords/
� )�hexlify� unhexlify)�sha1N)�warn)�consteq)�
bascii_to_str�unicode�u� mssql2000� mssql2005c C s2 t | t�sJ �t |t�s J �t| �d�| ��� S )Nz utf-16-le)�
isinstancer �bytesr �encode�digest)�secret�salt� r �:/usr/lib/python3.9/site-packages/passlib/handlers/mssql.py�
_raw_mssql9 s r s 0x0100�0x0100c C s^ t | t�r&t| �|krZ| �t�rZdS n4t | t�rLt| �|krZ| �t�rZdS ntj� | d��dS )z#common identify for mssql 2000/2005T�hashF)
r r �len�
startswith�UIDENTr
�BIDENT�uh�exc�ExpectedStringError)r �csize�bsizer r r � _ident_mssqlB s
r c C s� t | t�rNt| �|kr�| �t�r�zt| dd� �d��W S tyJ Y q�0 ndt | t�r�t | t�sfJ �t| �|kr�| �t �r�zt| dd� �W S ty� Y q�0 nt
j � | d��t
j �
|��dS )zAcommon parser for mssql 2000/2005; returns 4 byte salt + checksum� N�utf-8r )r r r r r r r � TypeErrorr
r r r r ZInvalidHashError)r r r Zhandlerr r r � _parse_mssqlP s
r$ c @ sX e Zd ZdZd ZdZdZd ZZe dd� �Z
e dd� �Z d d
� Z d d � Z
e d
d� �ZdS )r
a* This class implements the password hash used by MS-SQL 2000, and follows the :ref:`password-hash-api`.
It supports a fixed-length salt.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: bytes
:param salt:
Optional salt string.
If not specified, one will be autogenerated (this is recommended).
If specified, it must be 4 bytes in length.
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include
``salt`` strings that are too long.
�r �( � c C s t |dd�S )N�^ �. �r ��clsr r r r �identify� s zmssql2000.identifyc C s* t |dd| �}| |d d� |dd � d�S )Nr( r) r' �r �checksum�r$ �r, r �datar r r � from_string� s zmssql2000.from_stringc C s | j | j }dtt|��� � S �Nr �r r/ r r �upper��self�rawr r r � to_string� s zmssql2000.to_stringc C s2 t |t�r|�d�}| j}t||�t|�� |� S �Nr" )r r
�decoder r r6 )r8 r r r r r �_calc_checksum� s
zmssql2000._calc_checksumc C sd t �|� | �|�}|j}|d u r.t j�| ��t|t�rB|�d�}t |�
� |j �}t ||dd � �S )Nr" � )
r Zvalidate_secretr3 r/ r ZMissingDigestErrorr r
r< r r6 r r )r, r r r8 Zchk�resultr r r �verify� s
zmssql2000.verifyN)�__name__�
__module__� __qualname__�__doc__�name� setting_kwds�
checksum_size�
min_salt_size�
max_salt_size� classmethodr- r3 r: r= r@ r r r r r
f s
c @ sL e Zd ZdZd ZdZdZd ZZe dd� �Z
e dd� �Z d d
� Z d d � Z
d
S )r a* This class implements the password hash used by MS-SQL 2005, and follows the :ref:`password-hash-api`.
It supports a fixed-length salt.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: bytes
:param salt:
Optional salt string.
If not specified, one will be autogenerated (this is recommended).
If specified, it must be 4 bytes in length.
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include
``salt`` strings that are too long.
r% r> r' c C s t |dd�S )N�6 � r* r+ r r r r- � s zmssql2005.identifyc C s* t |dd| �}| |d d� |dd � d�S )NrK rL r' r. r0 r1 r r r r3 � s zmssql2005.from_stringc C s | j | j }dtt|���� S r4 r5 r7 r r r r: � s zmssql2005.to_stringc C s t |t�r|�d�}t|| j�S r; )r r
r< r r )r8 r r r r r= � s
zmssql2005._calc_checksumN)rA rB rC rD rE rF rG rH rI rJ r- r3 r: r= r r r r r � s
)"rD Zbinasciir r Zhashlibr �reZloggingZ getLoggerrA �log�warningsr Z
passlib.utilsr Zpasslib.utils.compatr r r Zpasslib.utils.handlersZutils�handlersr �__all__r r r r r$ Z
HasRawSaltZHasRawChecksumZGenericHandlerr
r r r r r �<module> s$ % �M