A simple Go script to brute force or parse a password-protected PKCS#12 (PFX/P12) file.

Evi1cg

Last update: Oct 14, 2022

Related tags

Security p12tool

Overview

P12tool

学习golang写的一个用来解析和爆破p12证书的小工具，代码写的有点戳，能用就行。

Usage


██████╗  ██╗██████╗ ████████╗ ██████╗  ██████╗ ██╗
██╔══██╗███║╚════██╗╚══██╔══╝██╔═══██╗██╔═══██╗██║
██████╔╝╚██║ █████╔╝   ██║   ██║   ██║██║   ██║██║
██╔═══╝  ██║██╔═══╝    ██║   ██║   ██║██║   ██║██║
██║      ██║███████╗   ██║   ╚██████╔╝╚██████╔╝███████╗
╚═╝      ╚═╝╚══════╝   ╚═╝    ╚═════╝  ╚═════╝ ╚══════╝

Version: dev (n/a) - 12/31/20 - Evi1cg

NAME:
   p12tool - A tool to parse p12 cert file or bruteforce attacks against cert password

USAGE:
   main [global options] command [command options] [arguments...]

AUTHOR:
   Evi1cg

COMMANDS:
   parse    Parse p12 file and print cert info
   crack    Crack p12 file password.
   help, h  Shows a list of commands or help for one command

GLOBAL OPTIONS:
   --cert value, -c value  The cert file you choice.
   --debug, -d             Debug mode. (default: false)
   --help, -h              show help (default: false)

crack

go run cmd/main.go crack -c file.pfx -f passwords.txt

可选: -t 指定线程，-d 开启debug模式，-o 将破解成功的密码输出至指定文件。

parse

go run cmd/main.go parse -c file.pfx -p password

对证书进行解析，输出证书信息，顺便输出是否可对程序进行签名，免去手动验证的烦恼。 ~~

2020年推得最后一个小工具，祝大家新年快乐！！

参考

Password generator written in Go

go-generate-password Password generator written in Go. Use as a library or as a CLI. Usage CLI go-generate-password can be used on the cli, just insta

48 Dec 19, 2022

Validate the Strength of a Password in Go

go-password-validator Simple password validator using raw entropy values. Hit the project with a star if you find it useful ⭐ Supported by Qvault This

373 Jan 6, 2023

A probably paranoid Golang utility library for securely hashing and encrypting passwords based on the Dropbox method. This implementation uses Blake2b, Scrypt and XSalsa20-Poly1305 (via NaCl SecretBox) to create secure password hashes that are also encrypted using a master passphrase.

goSecretBoxPassword This is a Golang library for securing passwords it is based on the Dropbox method for password storage. The both passphrases are f

54 Jan 3, 2023

:key: Idiotproof golang password validation library inspired by Python's passlib

passlib for go Python's passlib is quite an amazing library. I'm not sure there's a password library in existence with more thought put into it, or wi

279 Dec 30, 2022

A convenience library for generating, comparing and inspecting password hashes using the scrypt KDF in Go 🔑

simple-scrypt simple-scrypt provides a convenience wrapper around Go's existing scrypt package that makes it easier to securely derive strong keys ("h

183 Dec 22, 2022

EarlyBird is a sensitive data detection tool capable of scanning source code repositories for clear text password violations, PII, outdated cryptography methods, key files and more.

EarlyBird is a sensitive data detection tool capable of scanning source code repositories for clear text password violations, PII, outdated cryptograp