· 9 years ago · Jan 29, 2017, 09:24 PM
1POST / HTTP/1.1
2Host: 127.0.0.1
3User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:51.0) Gecko/20100101 Firefox/51.0
4Accept: */*
5Accept-Language: en-US,en;q=0.5
6Accept-Encoding: gzip, deflate, br
7Referer: mySiteCom
8Content-Type: application/x-www-form-urlencoded; charset=UTF-8
9X-Requested-With: XMLHttpRequest
10Content-Length: 14
11DNT: 1
12Connection: keep-alive
13
14DH_proto8&83&8
15
16POST / HTTP/1.1
17Host: mySiteCom
18User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:51.0) Gecko/20100101 Firefox/51.0
19Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
20Accept-Language: en-US,en;q=0.5
21Accept-Encoding: gzip, deflate, br
22Referer: mySiteCom
23DNT: 1
24Connection: keep-alive
25Upgrade-Insecure-Requests: 1
26Content-Type: text/plain
27Content-Length: 6167
28
29AuthLogin=000000000000000001100111000000000000000000110111000000000000000001100100000000000000000000111011000000000000000001100010000000000000000000110111000000000000000000110110000000000000000000110101000000000000000001100000000000000000000001100111000000000000000001101001000000000000000001100100000000000000000000110111000000000000000000111101000000000000000001100110000000000000000001100001000000000000000000110100000000000000000000110110000000000000000001100011000000000000000000111010000000000000000001100011000000000000000001100010000000000000000001100111000000000000000000110010000000000000000000110111000000000000000001101101000000000000000001100010000000000000000001100000000000000000000001100000000000000000000001100011000000000000000001101110000000000000000001100011000000000000000000110010000000000000000000110110000000000000000001101011000000000000000001100101000000000000000001100001000000000000000001100110000000000000000000110011000000000000000001101100000000000000000001100111000000000000000000110101000000000000000000111100000000000000000001101010000000000000000001100101000000000000000000110000000000000000000000111110000000000000000000111001000000000000000000110011000000000000000000110101000000000000000000110011000000000000000000110111000000000000000000110101000000000000000001101110000000000000000001100100000000000000000001100001000000000000000000111111000000000000000000111101000000000000000000111111000000000000000000111010000000000000000001100110000000000000000001100001000000000000000000110011000000001001001001110010000000000000000001100010000000000000000000110001000000000000000000110110000000000000000001100101000000000000000001100100000000000000000000110111000000000000000001100100000000000000000000110010000000000000000000110100000000000000000001100010000000000000000000110011000000000000000001100101000000000000000001100011000000000000000001100010000000000000000001100100000000000000000000110100000000000000000000110001000000000000000000110110000000000000000000110100000000000000000001100100000000000000000001100011000000000000000001100100000000000000000001100001000000000000000001100100000000000000000000110011000000000000000000110111000000000000000000110100000000000000000001100101000000000000000000110000000000000000000000111000000000000000000001100011000000000000000000110000000000000000000001100001000000000000000001100010000000000000000000110111000000000000000000110101000000000000000000110001000000000000000000111000000000000000000001100001000000000000000001100001000000000000000000110000000000000000000000110111000000000000000001100110000000000000000000111001000000000000000001100100000000000000000000110011000000000000000000110110000000000000000000111000000000000000000000110011000000000000000001100110000000000000000000110011000000000000000000110100000000000000000001100011000000000000000000110010000000000000000001100010000000000000000000110011000000000000000001100011000000000000000000110110000000000000000000110111000000000000000001100001000000000000000000110001000000000000000000110101000000000000000000111000000000000100100100010111
30AuthPass=000000000000000001100111000000000000000000110000000000000000000000110101000000000000000001100001000000000000000000111111000000000000000001100111000000000000000001100100000000000000000000111010000000000000000000110100000000000000000001100010000000000000000000111010000000000000000000110110000000000000000000110011000000000000000000111011000000000000000001100110000000000000000000110010000000000000000001100101000000000000000000110011000000000000000000111101000000000000000000111111000000000000000000111111000000000000000000110101000000000000000001101111000000000000000000111100000000000000000001100111000000000000000000110100000000000000000000110111000000000000000000110100000000000000000000110111000000000000000001100010000000000000000000111101000000000000000001100010000000000000000000110000000000000000000000110101000000000000000001100001000000000000000001100101000000000000000000111101000000000000000001101100000000000000000000111000000000000000000000111100000000000000000000110010000000000000000000110000000000000000000001100101000000000000000001100010000000000000000000110000000000000000000000111101000000000000000001101010000000000000000000111010000000000000000000110011000000000000000001101000000000000000000000110000000000000000000000111110000000000000000001100011000000000000000000111011000000000000000001100001000000000000000001100100000000000000000000110001000000000000000000111101000000000000000000110011000000000000000000111110000000000000000000110111000000000000000000111001000000000000000000110111000000001001001000100100000000000000000001100101000000000000000001100101000000000000000000110010000000000000000000110110000000000000000001100010000000000000000000110000000000000000000001100100000000000000000001100100000000000000000000110100000000000000000001100001000000000000000001100110000000000000000000110111000000000000000001100101000000000000000000110111000000000000000000110100000000000000000000111001000000000000000001100001000000000000000001100001000000000000000000110001000000000000000001100001000000000000000000111000000000000000000001100101000000000000000001100101000000000000000000110011000000000000000001100011000000000000000000110001000000000000000000110000000000000000000001100001000000000000000001100101000000000000000000111001000000000000000000111001000000000000000000110010000000000000000000110011000000000000000001100110000000000000000000110110000000000000000000110001000000000000000000111000000000000000000000111001000000000000000000111000000000000000000000110000000000000000000000110111000000000000000000110111000000000000000000110010000000000000000001100101000000000000000000110100000000000000000000110111000000000000000000110011000000000000000001100110000000000000000000111000000000000000000000111000000000000000000000110001000000000000000000111001000000000000000001100001000000000000000000110101000000000000000001100100000000000000000000110100000000000000000000111001000000000000000000110100000000000000000000110000000000000000000001100101000000000000000000110000000000000000000001100100000000000000000001100010000000000100100100010110
31
32POST / HTTP/1.1
33Host: mySiteCom
34Connection: keep-alive
35Content-Length: 14
36Accept: */*
37Origin: mySiteCom
38X-Requested-With: XMLHttpRequest
39User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.14 Safari/537.36
40Content-Type: application/x-www-form-urlencoded; charset=UTF-8
41DNT: 1
42Referer: mySiteCom
43Accept-Encoding: gzip, deflate, br
44Accept-Language: en-US,en;q=0.8
45
46DH_proto4&55&4
47
48POST / HTTP/1.1
49Host: mySiteCom
50Connection: keep-alive
51Content-Length: 6165
52Cache-Control: max-age=0
53Origin: mySiteCom
54Upgrade-Insecure-Requests: 1
55User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.14 Safari/537.36
56Content-Type: text/plain
57Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
58DNT: 1
59Referer: mySiteCom
60Accept-Encoding: gzip, deflate, br
61Accept-Language: en-US,en;q=0.8
62
63function encryptAuthData()
64{
65 // gen
66 var g_beg = 2;
67 var g_end = 15;
68
69 var g_val = Math.random()*(g_end - g_beg + 1);
70 var gen = Math.floor(g_val) + g_beg;
71
72 // simple mod
73 var sm_beg = 2;
74 var sm_end = 100;
75
76 var sm_val = Math.random()*(sm_end - sm_beg + 1);
77 var simple_mod = Math.floor(sm_val) + sm_beg;
78
79 // private_number
80 var p_beg = 1;
81 var p_end = 6;
82
83 var p_val = Math.random() / 32767 *(p_end - p_beg + 1);
84 var private_number = Math.floor(p_val) + p_beg;
85
86 var res_degree = Math.pow(gen, private_number);
87 var res_module = res_degree % simple_mod;
88
89 // send gen, mod to server
90 var msg = "DH_proto" + gen + "&" + simple_mod + "&" + res_module;
91 $.ajax({
92 async: false,
93 type: 'POST',
94 url: 'https://127.0.0.1/',
95 data: msg,
96 success: function(data) {
97
98 // generate secret key
99 var degree = Math.pow(data, private_number);
100 var secret_key = String(degree % simple_mod);
101 //alert(secret_key);
102
103 var amoundRounds = 16;
104
105 var leftBlock = [];
106 var rightBlock = [];
107 var arrayRounderKeys = [];
108 var encryptLogin;
109 var encryptPass;
110
111 // get auth data
112 var get_login = String($("input[name='AuthLogin']").val());
113 var get_pass = String($("input[name='AuthPass']").val());
114
115 // hashing auth data (SHA512)
116 secret_key = hex_sha512(secret_key);
117 get_login = hex_sha512(get_login);
118 get_pass = hex_sha512(get_pass);
119
120 if(get_login.length != 128 || get_pass.length != 128 || secret_key.length != 128)
121 {
122 alert("Error SHA512, length != 128 symbols or secret key != 128");
123 }
124
125 // in Binary auth
126 secret_key = inBinary(secret_key);
127 get_login = inBinary(get_login);
128 get_pass = inBinary(get_pass);
129
130 //
131 subblock(get_login.split(''), leftBlock, rightBlock);
132
133 //
134 arrayRounderKeys = arrayKeys(secret_key.split(''), amoundRounds);
135
136 //
137 encryptLogin = encryptFeistelNetwork(leftBlock, rightBlock, arrayRounderKeys, amoundRounds);
138
139 //
140 leftBlock = [];
141 rightBlock = [];
142
143 //
144 subblock(get_pass.split(''), leftBlock, rightBlock);
145
146 //
147 encryptPass = encryptFeistelNetwork(leftBlock, rightBlock, arrayRounderKeys, amoundRounds);
148
149 // start preloader
150 go_preloader();
151
152 // data overwrite
153 $('#user_name').val(encryptLogin);
154 $('#user_pass').val(encryptPass);
155
156 },
157 error: function(xhr, str){
158 alert('Возникла ошибка: ' + xhr.responseCode);
159 }
160 });
161}