XshellCrack

XshellCrack is a secondary development based on SharpXDecrypt, rewritten with go language, increased the registry query Settings, more convenient for xshell local password cracking

declaration

This tool is only for password search. Any other behavior is at your own risk

introduce

Use

Usage:
  root SshCrack [flags]

Flags:
  -P, --Path string        eg -P C:\xxxx\xxx.xsh
  -I, --USID string        eg -I S-1xxxxxx
  -d, --directory string   eg -d C:\xxxx\
  -h, --help               help for SshCrack
  -u, --username string    eg -u test

If the xshell path is not configured, the system automatically searches the xshell local cache file in the registry, as shown in the following figure

If you specify a path, the decryption will follow the path you specified, as shown in the figure below

Kill free effect

Because there is no windows api call involved, the effect is still OK, and the use of go language construction to remove the symbol table, and use the upx shell for compression, so the volume is also very impressive

It can also decrypt it offline

reference

https://github.com/JDArmy/SharpXDecrypt
https://github.com/Q16G/XshellCrack