中国网络渗透测试联盟

标题: web.Config加密解密最简单实用方法 [打印本页]
作者: admin    时间: 2013-8-5 15:33
标题: web.Config加密解密最简单实用方法
web.config的文件多数的时候不希望别人看到，下面提供一个加密，解密的语句，简洁方便实用，先看到效果，至于加密的原理其他的网页上做了很多说明，这里只演示效果。3 N; g) }, X' J) G9 q2 R+ }# _
　　加密前的connectionStrings节点: [" V. K5 b! G' N7 j
　　代码' R- I- }: _- t, y0 k
　　<connectionStrings>( [3 Z  g# v- [( S0 J) v
　　<add name="SQLConnString1" connectionString="server=WJW-PC\SQL2008;user id=sa;password=12345;Initial Catalog=dbFASH;min pool size=4;max pool size=400;" />
" f6 q7 b; _) n　　<add name="eziyaConnectionString1" connectionString="Data Source=HOME-COMPUTER;Initial Catalog=dbFASH;Integrated Security=True;MultipleActiveResultSets=Falseacket Size=4096;Application Name=&quot;Microsoft SQL Server Management Studio&quot;"
, j% U8 w: u* U* e　　providerName="System.Data.SqlClient" />
2 L. {8 Y, y$ z' d0 W/ s　　<add name="eziyaConnectionString2" connectionString="Data Source=192.168.1.200;Initial Catalog=dbFASHersist Security Info=True;User ID=taoka;MultipleActiveResultSets=Falseacket Size=4096;Application Name=&quot;Microsoft SQL Server Management Studio&quot;"
2 v) ]! D& G- q+ v, N　　providerName="System.Data.SqlClient" />; w& o" c8 H' b% ]% S8 t2 \8 g8 X' |
　　<add name="eziyaConnectionString3" connectionString="Data Source=192.168.61.160;Initial Catalog=dbFASHersist Security Info=True;User ID=sa;MultipleActiveResultSets=Falseacket Size=4096;Application Name=&quot;Microsoft SQL Server Management Studio&quot;"9 E0 q+ ]: @1 @6 A% n" g( m  ]8 h
　　providerName="System.Data.SqlClient" />
5 @" Z% R" F" N( g# C　　</connectionStrings>
; p1 E4 N+ A; \0 G　　加密后的connectionStrings的节点. e0 j5 \. y1 v0 q9 f% S
　　代码. v0 q# @& N! c$ E6 b8 r
　　<connectionStrings configProtectionProvider="RsaProtectedConfigurationProvider">$ D5 O- a  ~0 u" W
　　<EncryptedData Type="http://www.w3.org/2001/04/xmlenc#Element"
* \3 @: i1 e; {9 S; y　　xmlns="http://www.w3.org/2001/04/xmlenc#"&gt;& \: m* u6 M$ N' g) e/ _' N8 H
　　<EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc" />" N1 H- X/ M- P5 Z
　　<KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"&gt;
* d0 s8 l1 l! m: j　　<EncryptedKey xmlns="http://www.w3.org/2001/04/xmlenc#"&gt;5 A3 \4 f) \2 D: I3 q1 M
　　<EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5" />- ]3 o6 y7 Q7 p' G3 r
　　<KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"&gt;8 i/ {; N8 \) l% }
　　<KeyName>Rsa Key</KeyName>
2 ?3 C* S0 V" m1 U1 K　　</KeyInfo>0 E7 n$ D% g- d9 z- A
　　<CipherData>8 N" R5 {0 K# I. Q9 n& j9 t6 q
　　<CipherValue>FOkydQFNniZvq71ua4XapuVCUrJFOARkXeqqwyKFoP+NGXGewehxYW0zTzIn/j+YCvH/r6ABoE/AfWMMEDyr81R1mhi4ckXbiJ2BvW612/W7f7Wkqj+FDwse+lgAISHZ5HfspaY1LBvKYAu1VEm6Iu6NlT35TPnjxFf+p5Apf0E=</CipherValue>
3 a: k1 \# w1 d/ w% K' |5 L　　</CipherData>
, u, t) ?! M$ R9 G9 X0 f( K　　</EncryptedKey>
. y# K1 ?( j/ q  v3 j　　</KeyInfo>. L) r% u6 |# t* c: M$ u
　　<CipherData>3 ]4 ^( i6 K+ Y* u1 L, \
　　<CipherValue>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</CipherValue>
. }  ?# Y. p, O' E+ C! M1 N　　</CipherData>+ O2 F( i2 I; q+ c/ g4 t6 Z
　　</EncryptedData>" g$ M! N9 r/ ~# I
　　</connectionStrings>
) M# \6 X+ ]1 s( @* r1 B* N　　完全看不到连接的信息！% z" C7 B9 _* C* J& i% f7 _# ?
　　下面是两个.bat批处理文件% ]7 N9 T0 J$ H3 E  Z
　　加密：  K/ `) k' S# ~
　　@echo off
3 G4 U7 I3 m# p! ?　　C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe -pef "connectionStrings" "E:\code\proj\Web"
; v: ?. o" C* Q! @5 u5 A　　解密：# W# e" J+ v: f0 j+ i
　　@echo off( c4 @! [2 J) n; Q4 `" k2 \, x
　　C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe -pdf "connectionStrings" "E:\code\proj\Web"
/ T  g6 ?1 V, @7 ?# X$ p3 B　　PAUSE
. ^  T6 X* g5 S# C; s* g& A　　直接将语句拷贝到.BAT文件中，E:\code\proj\Web为相应的web.config所在的路径，只能在一台电脑上操作，否则不可逆
作者: Anthony~    时间: 2013-8-5 19:31
好方法。我正好刚遇到这个问题



欢迎光临 中国网络渗透测试联盟 (https://www.cobjon.com/) Powered by Discuz! X3.2