Skip to content

Commit

Permalink
Update main.go
Browse files Browse the repository at this point in the history
  • Loading branch information
@5icorgi
5icorgi authored Nov 12, 2020
1 parent db7f83b commit ee21e35
Showing 1 changed file with 109 additions and 53 deletions.
162 changes: 109 additions & 53 deletions main.go
View file
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,9 @@ import (
"crypto/rsa"
"crypto/sha256"
"crypto/x509"
"debug/elf"
"debug/macho"
"debug/pe"
"encoding/base64"
"encoding/hex"
"encoding/json"
Expand Down Expand Up @@ -75,19 +78,13 @@ xMNjyLp1b84s2VVXTpSFA7i6KEUhl4NjqhZTslJht5Dfiy2Mmvfk2so=
var (
licenseName string
originLicense string
xrayPath string
xrayFilePath string
)

func main() {
validTime, _ := time.Parse("2006-01-02 15:04:05", "2021-01-01 00:00:00")
nowTime := time.Now()
if nowTime.After(validTime) {
panic("本工具已失效")
}

flag.StringVar(&licenseName, "g", "", "生成一个永久license，需要指定用户名")
flag.StringVar(&originLicense, "p", "", "解析官方证书，需要指定证书路径")
flag.StringVar(&xrayPath, "c", "", "patch xray，需要指定xray程序文件路径")
flag.StringVar(&xrayFilePath, "c", "", "patch xray，需要指定xray程序文件路径")

flag.Parse()

Expand All @@ -99,47 +96,10 @@ func main() {
genNew(licenseName)
}

if xrayPath != "" {
patchXray(xrayPath)
if xrayFilePath != "" {
patch(xrayFilePath)
}
}

func patchXray(filePath string) {
var (
originBytes []byte
newBytes []byte
)
origin, err := ioutil.ReadFile(filePath)
if err != nil {
panic(err)
}
//x86特征码: 0F 95 C0 83 F0 01 88 44 24 50 83 C4 30 C3
originX86Bytes := []byte{0x0F, 0x95, 0xC0, 0x83, 0xF0, 0x01, 0x88, 0x44, 0x24, 0x50, 0x83, 0xC4, 0x30, 0xC3}
newX86Bytes := []byte{0x0F, 0x94, 0xC0, 0x83, 0xF0, 0x01, 0x88, 0x44, 0x24, 0x50, 0x83, 0xC4, 0x30, 0xC3}
loc := bytes.LastIndex(origin, originX86Bytes)
//x64特征码: 0F 94 84 24 A8 00 00 00
if loc == -1 {
originX64Bytes := []byte{0x0F, 0x94, 0x84, 0x24, 0xA8, 0x00, 0x00, 0x00}
newX64Bytes := []byte{0x0F, 0x95, 0x84, 0x24, 0xA8, 0x00, 0x00, 0x00}
loc = bytes.LastIndex(origin, originX64Bytes)
if loc == -1 {
fmt.Println("Patch failed: maybe already patched.")
os.Exit(0)
}
originBytes = originX64Bytes
newBytes = newX64Bytes
} else {
originBytes = originX86Bytes
newBytes = newX86Bytes
}

fmt.Printf("Signature index: %#x\n", loc)

newFile := bytes.ReplaceAll(origin, originBytes, newBytes)
err = ioutil.WriteFile(filePath, newFile, os.ModePerm)
if err == nil {
fmt.Println("Patch success:", filePath)
}
}

func parseAlready(licenseFile string) {
Expand Down Expand Up @@ -173,9 +133,6 @@ func parseAlready(licenseFile string) {
fmt.Println("version ok: 2")
}

//fmt.Printf("pre 17: %x\n", base64DecodeData[:17])
//fmt.Printf("pre 17: %x\n", pre17Bytes)

//解密前有一个简单的变换处理
right := len(base64DecodeData) - 1
for l := 1; l < right; l++ {
Expand All @@ -188,7 +145,7 @@ func parseAlready(licenseFile string) {
//fmt.Println("trans bytes:", hex.EncodeToString(base64DecodeData))

// aes解密license
// 总长度 487，前面17个字节是单独加上的，所以总共解密出 480个字节的数据
// | 1B : version | 16B : aes iv | 480B : cipher |
aesDecData, err := Decrypt(base64DecodeData[17:], base64DecodeData[1:17])
if err != nil {
panic(err)
Expand Down Expand Up @@ -294,8 +251,6 @@ func genNew(name string) {
# user_name: Chinese
# distribution: COMMUNITY-ADVANCED
# 仅对修改后的xray有效
` + licenseText + `
`

Expand Down Expand Up @@ -363,3 +318,104 @@ func importPrivateKey(key string) *rsa.PrivateKey {
}
return privateKey
}

var (
origin386Bytes, _ = hex.DecodeString("0F95C083F0018844245083C430C3")
new386Bytes, _ = hex.DecodeString("0F94C083F0018844245083C430C3")
originAmd64Bytes, _ = hex.DecodeString("000F84BE020000")
newAmd64Bytes, _ = hex.DecodeString("000F85BE020000")
originArmBytes, _ = hex.DecodeString("000050E30000A0E30100A013010020E254")
newArmBytes, _ = hex.DecodeString("000050E30000A0E30100A0130100A0E354")
originAArch64Bytes, _ = hex.DecodeString("1F001FEBE0079F9A000040D2E0C3")
newAArch64Bytes, _ = hex.DecodeString("1F001FEBE0079F9A200080D2E0C3")
)

func patch(filePath string) {
var (
originBytes []byte
newBytes []byte
maxIndex uint64 = 0
)

if elfFile, err := elf.Open(filePath); err == nil {
switch elfFile.Machine {
case elf.EM_386:
fmt.Println("linux 386")
originBytes = origin386Bytes
newBytes = new386Bytes
case elf.EM_X86_64:
fmt.Println("linux amd64")
originBytes = originAmd64Bytes
newBytes = newAmd64Bytes
case elf.EM_ARM:
fmt.Println("linux arm")
originBytes = originArmBytes
newBytes = newArmBytes
case elf.EM_AARCH64:
fmt.Println("linux arm64")
originBytes = originAArch64Bytes
newBytes = newAArch64Bytes
default:
fmt.Println("Unsupported linux platform!!")
}
sections := elfFile.Sections
for _, i := range sections {
if i.Name == ".text" {
maxIndex = i.Addr + i.Size
fmt.Printf("[.text] offset: %#x, addr: %#x-%#x\n", i.Offset, i.Addr, maxIndex)
}
}
} else if peFile, err := pe.Open(filePath); err == nil {
switch peFile.Machine {
case pe.IMAGE_FILE_MACHINE_AMD64:
fmt.Println("windows amd64")
originBytes = originAmd64Bytes
newBytes = newAmd64Bytes
case pe.IMAGE_FILE_MACHINE_I386:
fmt.Println("windows i386")
originBytes = origin386Bytes
newBytes = new386Bytes
default:
fmt.Println("Unsupported windows platform!!")

}
} else if machoFile, err := macho.Open(filePath); err == nil {
switch machoFile.Cpu {
case macho.CpuAmd64:
fmt.Println("darwin amd64")
originBytes = originAmd64Bytes
newBytes = newAmd64Bytes
case macho.Cpu386:
fmt.Println("darwin 386")
originBytes = origin386Bytes
newBytes = new386Bytes
default:
fmt.Println("Unsupported darwin platform!!")
}
} else {
fmt.Println("Can NOT parse file")
return
}

origin, err := ioutil.ReadFile(filePath)
loc := bytes.LastIndex(origin, originBytes)

if loc > 0 {
fmt.Printf("Signature index: %#x\n", loc)
newFile := replace(origin, newBytes, loc)
err = ioutil.WriteFile(filePath, newFile, os.ModePerm)
if err == nil {
fmt.Println("Patch success:", filePath)
}
} else {
fmt.Println("Can't find signature")
}
}

func replace(origin, new []byte, index int) []byte {
n := make([]byte, len(origin))
copy(n[:index], origin[:index])
copy(n[index:index+len(new)], new)
copy(n[index+len(new):], origin[index+len(new):])
return n
}

0 comments on commit ee21e35

Please sign in to comment.