微信dat解码
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 | package com.zaier.util; import cn.hutool.core.io.FileUtil; import java.io.File; import java.io.FileInputStream; import java.io.FileOutputStream; import java.io.InputStream; import java.io.OutputStream; import java.util.Arrays; import java.util.HashMap; import java.util.Map; import java.util.concurrent.atomic.AtomicInteger; import java.util.concurrent.atomic.AtomicReference; /** * 微信端 dat文件解密 */ public class WxChatImgRevert { public static void main(String[] args) { String path = "C:\\Users\\Administrator\\Documents\\WeChat Files\\wxid_if2rkuq212ftxx\\FileStorage\\Image\\2022-11\\e2f6afe0fe7cc0e0b3a5e87a0c440fbe.dat" ; String targetPath = "C:\\Users\\Administrator\\Documents\\cache" ; convertFile(path, targetPath); } // ###################################################################################### /** * * @param filepath 微信dat文件 * @param targetPath 解密文件目录 * @return */ public static String convertFile(String filepath, String targetPath) { if (targetPath == null ){ targetPath = FileUtil.getUserHomeDir() + File.separator + "wxCache" ; // 默认用户目录下wxCache } File dirPath = new File(targetPath); if (!dirPath.exists()){ dirPath.mkdirs(); } final File file = new File(filepath); if (!file.exists()){ return null ; } Object[] xor = getXor(file); final String coverFilePath = targetPath + File.separator + file.getName().split( "\\." )[ 0 ] + (xor[ 0 ] != null ? "." + xor[ 0 ] : "" ); try (InputStream reader = new FileInputStream(file); OutputStream writer = new FileOutputStream(coverFilePath)) { byte [] bytes = new byte [ 1024 * 10 ]; int b; while ((b = reader.read(bytes)) != - 1 ) { for ( int i = 0 ; i < bytes.length; i++) { bytes[i] = ( byte ) ( int ) (bytes[i] ^ ( int ) xor[ 1 ]); if (i == (b - 1 )) { break ; } } writer.write(bytes, 0 , b); writer.flush(); } } catch (Exception e) { e.printStackTrace(); } System.out.println(filepath); System.out.println( "change:" +coverFilePath); return coverFilePath; } /** * @param path 图片目录地址 * @param targetPath 转换后目录 */ public static void convert(String path, String targetPath) { File[] file = new File(path).listFiles(); if (file == null ) { return ; } int size = file.length; System.out.println( "总共" + size + "个文件" ); AtomicReference<Integer> integer = new AtomicReference<>( 0 ); AtomicInteger x = new AtomicInteger(); for (File file1 : file) { if (file1.isFile()) { Object[] xori = getXor(file1); if (xori != null && xori[ 1 ] != null ){ x.set(( int )xori[ 1 ]); } break ; } } Arrays.stream(file).parallel().forEach(file1 -> { if (file1.isDirectory()) { String[] newTargetPath = file1.getPath().split( "/|\\\\" ); File targetFile = new File(targetPath+File.separator+newTargetPath[newTargetPath.length - 1 ]); if (!targetFile.exists()) { targetFile.mkdirs(); } convert(file1.getPath(),targetPath+File.separator+newTargetPath[newTargetPath.length - 1 ]); return ; } Object[] xor = getXor(file1); if (x.get() == 0 && xor[ 1 ] != null && ( int ) xor[ 1 ] != 0 ) { x.set(( int ) xor[ 1 ]); } xor[ 1 ] = xor[ 1 ] == null ? x.get() : xor[ 1 ]; try (InputStream reader = new FileInputStream(file1); OutputStream writer = new FileOutputStream(targetPath + File.separator + file1.getName().split( "\\." )[ 0 ] + (xor[ 0 ] != null ? "." + xor[ 0 ] : "" ))) { byte [] bytes = new byte [ 1024 * 10 ]; int b; while ((b = reader.read(bytes)) != - 1 ) { //这里的in.read(bytes);就是把输入流中的东西,写入到内存中(bytes)。 for ( int i = 0 ; i < bytes.length; i++) { bytes[i] = ( byte ) ( int ) (bytes[i] ^ ( int ) xor[ 1 ]); if (i == (b - 1 )) { break ; } } writer.write(bytes, 0 , b); writer.flush(); } integer.set(integer.get() + 1 ); System.out.println(file1.getName() + "(大小:" + (( double ) file1.length() / 1000 ) + "kb,异或值:" + xor[ 1 ] + ")," + "进度:" + integer.get() + "/" + size); } catch (Exception e) { e.printStackTrace(); } }); System.out.println( "解析完毕!" ); } /** * 判断图片异或值 * * @param file * @return */ private static Object[] getXor(File file) { Object[] xor = null ; if (file != null ) { byte [] bytes = new byte [ 4 ]; try (InputStream reader = new FileInputStream(file)) { reader.read(bytes, 0 , bytes.length); } catch (Exception e) { e.printStackTrace(); } xor = getXor(bytes); } return xor; } /** * @param bytes * @return */ private static Object[] getXor( byte [] bytes) { Object[] xorType = new Object[ 2 ]; int [] xors = new int [ 3 ]; for (Map.Entry<String, String> type : FILE_TYPE_MAP.entrySet()) { String[] hex = { String.valueOf(type.getKey().charAt( 0 )) + type.getKey().charAt( 1 ), String.valueOf(type.getKey().charAt( 2 )) + type.getKey().charAt( 3 ), String.valueOf(type.getKey().charAt( 4 )) + type.getKey().charAt( 5 ) }; xors[ 0 ] = bytes[ 0 ] & 0xFF ^ Integer.parseInt(hex[ 0 ], 16 ); xors[ 1 ] = bytes[ 1 ] & 0xFF ^ Integer.parseInt(hex[ 1 ], 16 ); xors[ 2 ] = bytes[ 2 ] & 0xFF ^ Integer.parseInt(hex[ 2 ], 16 ); if (xors[ 0 ] == xors[ 1 ] && xors[ 1 ] == xors[ 2 ]) { xorType[ 0 ] = type.getValue(); xorType[ 1 ] = xors[ 0 ]; break ; } } return xorType; } private final static Map<String, String> FILE_TYPE_MAP = new HashMap<String, String>(); static { getAllFileType(); } private static void getAllFileType() { FILE_TYPE_MAP.put( "ffd8ffe000104a464946" , "jpg" ); //JPEG (jpg) FILE_TYPE_MAP.put( "89504e470d0a1a0a0000" , "png" ); //PNG (png) FILE_TYPE_MAP.put( "47494638396126026f01" , "gif" ); //GIF (gif) FILE_TYPE_MAP.put( "49492a00227105008037" , "tif" ); //TIFF (tif) FILE_TYPE_MAP.put( "424d228c010000000000" , "bmp" ); //16色位图(bmp) FILE_TYPE_MAP.put( "424d8240090000000000" , "bmp" ); //24位位图(bmp) FILE_TYPE_MAP.put( "424d8e1b030000000000" , "bmp" ); //256色位图(bmp) FILE_TYPE_MAP.put( "41433130313500000000" , "dwg" ); //CAD (dwg) FILE_TYPE_MAP.put( "3c21444f435459504520" , "html" ); //HTML (html) FILE_TYPE_MAP.put( "3c21646f637479706520" , "htm" ); //HTM (htm) FILE_TYPE_MAP.put( "48544d4c207b0d0a0942" , "css" ); //css FILE_TYPE_MAP.put( "696b2e71623d696b2e71" , "js" ); //js FILE_TYPE_MAP.put( "7b5c727466315c616e73" , "rtf" ); //Rich Text Format (rtf) FILE_TYPE_MAP.put( "38425053000100000000" , "psd" ); //Photoshop (psd) FILE_TYPE_MAP.put( "46726f6d3a203d3f6762" , "eml" ); //Email [Outlook Express 6] (eml) FILE_TYPE_MAP.put( "d0cf11e0a1b11ae10000" , "doc" ); //MS Excel 注意:word、msi 和 excel的文件头一样 FILE_TYPE_MAP.put( "d0cf11e0a1b11ae10000" , "vsd" ); //Visio 绘图 FILE_TYPE_MAP.put( "5374616E64617264204A" , "mdb" ); //MS Access (mdb) FILE_TYPE_MAP.put( "252150532D41646F6265" , "ps" ); FILE_TYPE_MAP.put( "255044462d312e360d25" , "pdf" ); //Adobe Acrobat (pdf) FILE_TYPE_MAP.put( "2e524d46000000120001" , "rmvb" ); //rmvb/rm相同 FILE_TYPE_MAP.put( "464c5601050000000900" , "flv" ); //flv与f4v相同 FILE_TYPE_MAP.put( "00000020667479706973" , "mp4" ); FILE_TYPE_MAP.put( "49443303000000000f76" , "mp3" ); FILE_TYPE_MAP.put( "000001ba210001000180" , "mpg" ); // FILE_TYPE_MAP.put( "3026b2758e66cf11a6d9" , "wmv" ); //wmv与asf相同 FILE_TYPE_MAP.put( "524946464694c9015741" , "wav" ); //Wave (wav) FILE_TYPE_MAP.put( "52494646d07d60074156" , "avi" ); FILE_TYPE_MAP.put( "4d546864000000060001" , "mid" ); //MIDI (mid) FILE_TYPE_MAP.put( "504b0304140000000800" , "zip" ); FILE_TYPE_MAP.put( "526172211a0700cf9073" , "rar" ); FILE_TYPE_MAP.put( "235468697320636f6e66" , "ini" ); FILE_TYPE_MAP.put( "504b03040a0000000000" , "jar" ); FILE_TYPE_MAP.put( "4d5a9000030000000400" , "exe" ); //可执行文件 FILE_TYPE_MAP.put( "3c25402070616765206c" , "jsp" ); //jsp文件 FILE_TYPE_MAP.put( "4d616e69666573742d56" , "mf" ); //MF文件 FILE_TYPE_MAP.put( "3c3f786d6c2076657273" , "xml" ); //xml文件 FILE_TYPE_MAP.put( "efbbbf2f2a0d0a53514c" , "sql" ); //xml文件 FILE_TYPE_MAP.put( "7061636b616765207765" , "java" ); //java文件 FILE_TYPE_MAP.put( "406563686f206f66660d" , "bat" ); //bat文件 FILE_TYPE_MAP.put( "1f8b0800000000000000" , "gz" ); //gz文件 FILE_TYPE_MAP.put( "6c6f67346a2e726f6f74" , "properties" ); //bat文件 FILE_TYPE_MAP.put( "cafebabe0000002e0041" , "class" ); //bat文件 FILE_TYPE_MAP.put( "49545346030000006000" , "chm" ); //bat文件 FILE_TYPE_MAP.put( "04000000010000001300" , "mxp" ); //bat文件 FILE_TYPE_MAP.put( "504b0304140006000800" , "docx" ); //docx文件 FILE_TYPE_MAP.put( "d0cf11e0a1b11ae10000" , "wps" ); //WPS文字wps、表格et、演示dps都是一样的 FILE_TYPE_MAP.put( "6431303a637265617465" , "torrent" ); FILE_TYPE_MAP.put( "494d4b48010100000200" , "264" ); FILE_TYPE_MAP.put( "6D6F6F76" , "mov" ); //Quicktime (mov) FILE_TYPE_MAP.put( "FF575043" , "wpd" ); //WordPerfect (wpd) FILE_TYPE_MAP.put( "CFAD12FEC5FD746F" , "dbx" ); //Outlook Express (dbx) FILE_TYPE_MAP.put( "2142444E" , "pst" ); //Outlook (pst) FILE_TYPE_MAP.put( "AC9EBD8F" , "qdf" ); //Quicken (qdf) FILE_TYPE_MAP.put( "E3828596" , "pwl" ); //Windows Password (pwl) FILE_TYPE_MAP.put( "2E7261FD" , "ram" ); //Real Audio (ram) } } |
【推荐】编程新体验,更懂你的AI,立即体验豆包MarsCode编程助手
【推荐】凌霞软件回馈社区,博客园 & 1Panel & Halo 联合会员上线
【推荐】抖音旗下AI助手豆包,你的智能百科全书,全免费不限次数
【推荐】博客园社区专享云产品让利特惠,阿里云新客6.5折上折
【推荐】轻量又高性能的 SSH 工具 IShell:AI 加持,快人一步
· 一个费力不讨好的项目,让我损失了近一半的绩效!
· 实操Deepseek接入个人知识库
· CSnakes vs Python.NET:高效嵌入与灵活互通的跨语言方案对比
· 【.NET】调用本地 Deepseek 模型
· Plotly.NET 一个为 .NET 打造的强大开源交互式图表库