h"!pdZddlmZmZddlmZddlZddlZeje Z ddl m Z ddl mZddlmZmZmZddlmcmZdd gZd Zd Zed Zd ZdZGddej:ej<ej>Z Gdd ej:ej<ej>Z!y)apasslib.handlers.mssql - MS-SQL Password Hash Notes ===== MS-SQL has used a number of hash algs over the years, most of which were exposed through the undocumented 'pwdencrypt' and 'pwdcompare' sql functions. Known formats ------------- 6.5 snefru hash, ascii encoded password no examples found 7.0 snefru hash, unicode (what encoding?) saw ref that these blobs were 16 bytes in size no examples found 2000 byte string using displayed as 0x hex, using 0x0100 prefix. contains hashes of password and upper-case password. 2007 same as 2000, but without the upper-case hash. refs ---------- https://blogs.msdn.com/b/lcris/archive/2007/04/30/sql-server-2005-about-login-password-hashes.aspx?Redirected=true http://us.generation-nt.com/securing-passwords-hash-help-35429432.html http://forum.md5decrypter.co.uk/topic230-mysql-and-mssql-get-password-hashes.aspx http://www.theregister.co.uk/2002/07/08/cracking_ms_sql_server_passwords/ )hexlify unhexlify)sha1N)warn)consteq) bascii_to_strunicodeu mssql2000 mssql2005ct|tsJt|tsJt|j d|zj S)Nz utf-16-le) isinstancer bytesrencodedigest)secretsalts X/var/www/html/Resume-Scraper/venv/lib/python3.12/site-packages/passlib/handlers/mssql.py _raw_mssqlr9s> fg && dE ""  k*T1 2 9 9 ;;s0x01000x0100ct|tr%t||k(r|jtryyt|t r%t||k(r|jt ryytjj|d)z#common identify for mssql 2000/2005ThashF) rr len startswithUIDENTrBIDENTuhexcExpectedStringError)rcsizebsizes r _ident_mssqlr#Bso$ t9 $//&"9  D% t9 $//&"9 ff((v66rct|trAt||k(r|jtr t |ddj dSt|trDt|tsJt||k(rD|jtr/ t |ddStjj|dtjj|#t$rY*wxYw#t$rY9wxYw)zAcommon parser for mssql 2000/2005; returns 4 byte salt + checksumNutf-8r)rr rrrrr TypeErrorrrrrr InvalidHashError)rr!r"handlers r _parse_mssqlr*Ps$ t9 $//&"9  ab!9:: D% $&& t9 $//&"9  ab** ff((v66 && ! !' **    s#C% C4% C10C14 D?Dc`eZdZdZdZdZdZdxZZe dZ e dZ dZ dZ e d Zy ) r a*This class implements the password hash used by MS-SQL 2000, and follows the :ref:`password-hash-api`. It supports a fixed-length salt. The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords: :type salt: bytes :param salt: Optional salt string. If not specified, one will be autogenerated (this is recommended). If specified, it must be 4 bytes in length. :type relaxed: bool :param relaxed: By default, providing an invalid value for one of the other keywords will result in a :exc:`ValueError`. If ``relaxed=True``, and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning` will be issued instead. Correctable errors include ``salt`` strings that are too long. r(ct|ddS)N^.r#clsrs ridentifyzmssql2000.identifyD"b))rc>t|dd|}||dd|ddS)Nr0r1r.rchecksumr*r4rdatas r from_stringzmssql2000.from_string+D"b#.Ra4844rc~|j|jz}dtt|j zSNrrr9rrupperselfraws r to_stringzmssql2000.to_strings1ii$--'- (:(:(<===rct|tr|jd}|j}t ||t |j |zSNr&)rrdecoderrrB)rDrrs r_calc_checksumzmssql2000._calc_checksumsB fe $]]7+Fyy&$'*V\\^T*JJJrcPtj||j|}|j}|tjj |t |tr|jd}t|j|j}t||ddS)Nr&) rvalidate_secretr=r9rMissingDigestErrorrrrIrrBrr)r4rrrDchkresults rverifyzmssql2000.verifys 6"t$mm ;&&++C0 0 fe $]]7+FFLLNDII6vs23x((rN)__name__ __module__ __qualname____doc__name setting_kwds checksum_size min_salt_size max_salt_size classmethodr5r=rFrJrQrrr r fsi. DLM$%%MM**55> K  ) )rcPeZdZdZdZdZdZdxZZe dZ e dZ dZ dZ y ) r a*This class implements the password hash used by MS-SQL 2005, and follows the :ref:`password-hash-api`. It supports a fixed-length salt. The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords: :type salt: bytes :param salt: Optional salt string. If not specified, one will be autogenerated (this is recommended). If specified, it must be 4 bytes in length. :type relaxed: bool :param relaxed: By default, providing an invalid value for one of the other keywords will result in a :exc:`ValueError`. If ``relaxed=True``, and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning` will be issued instead. Correctable errors include ``salt`` strings that are too long. r,rLr.ct|ddS)N6r2r3s rr5zmssql2005.identifyr6rc>t|dd|}||dd|ddS)Nr_r`r.r8r:r;s rr=zmssql2005.from_stringr>rc~|j|jz}dtt|j zSr@rArCs rrFzmssql2005.to_strings1ii$--'- 5;;===rcpt|tr|jd}t||jSrH)rrrIrr)rDrs rrJzmssql2005._calc_checksums+ fe $]]7+F&$)),,rN)rRrSrTrUrVrWrXrYrZr[r5r=rFrJr\rrr r sT. DLM$%%MM**55> -r)"rUbinasciirrhashlibrrelogging getLoggerrRlogwarningsr passlib.utilsrpasslib.utils.compatrr r passlib.utils.handlersutilshandlersr__all__rrrr#r* HasRawSaltHasRawChecksumGenericHandlerr r r\rrrts J( 'g''1"::## <  8 +,H) r00"2C2CH)Z9- r00"2C2C9-r