New sqlcipher_pass module

README.md

@@ -33,6 +33,7 @@ Currently it supports the following modules:
 * snmp_login     : Brute-force SNMPv1/2 and SNMPv3
 * unzip_pass     : Brute-force the password of encrypted ZIP files
 * keystore_pass  : Brute-force the password of Java keystore files
+* sqlcipher_pass : Brute-force the password of SQLCipher-encrypted databases
 * umbraco_crack  : Crack Umbraco HMAC-SHA1 password hashes
 ```
 

patator.py

@@ -63,6 +63,7 @@ Currently it supports the following modules:
 
   + unzip_pass     : Brute-force the password of encrypted ZIP files
   + keystore_pass  : Brute-force the password of Java keystore files
+  + sqlcipher_pass : Brute-force the password of SQLCipher-encrypted databases
   + umbraco_crack  : Crack Umbraco HMAC-SHA1 password hashes
 
   + tcp_fuzz       : Fuzz TCP services
@@ -160,6 +161,8 @@ unzip            | ZIP passwords  | http://www.info-zip.org/
 --------------------------------------------------------------------------------------------------
 Java             | keystore files | http://www.oracle.com/technetwork/java/javase/     |       6 |
 --------------------------------------------------------------------------------------------------
+pysqlcipher      | SQLCipher      | https://github.com/leapcode/pysqlcipher/           |  2.6.10 |
+--------------------------------------------------------------------------------------------------
 python           |                | http://www.python.org/                             |     2.7 |
 --------------------------------------------------------------------------------------------------
 
@@ -4590,6 +4593,43 @@ class Keystore_pass:
 
 # }}}
 
+# SQLCipher {{{
+try:
+  from pysqlcipher import dbapi2 as sqlcipher
+except ImportError:
+  notfound.append('pysqlcipher')
+
+class SQLCipher_pass:
+  '''Brute-force the password of SQLCipher-encrypted databases'''
+
+  usage_hints = [
+    """%prog database=path/to/db.sqlite password=FILE0 0=passwords.txt -x ignore:fgrep='file is encrypted'""",
+    ]
+
+  available_options = (
+    ('database', 'database files to test'),
+    ('password', 'passwords to test'),
+    )
+  available_actions = ()
+
+  Response = Response_Base
+
+  def execute(self, database, password):
+    with sqlcipher.connect(database) as db:
+      c = db.cursor()
+      c.execute('PRAGMA key=%r' % password)
+
+    try:
+      c.execute('PRAGMA integrity_check')
+      code, mesg = '0', 'OK'
+
+    except sqlcipher.DatabaseError as e:
+      code, mesg = '1', str(e)
+
+    return self.Response(code, mesg)
+
+# }}}
+
 # Umbraco {{{
 import hmac
 class Umbraco_crack:
@@ -4716,6 +4756,7 @@ modules = [
 
   ('unzip_pass', (Controller, Unzip_pass)),
   ('keystore_pass', (Controller, Keystore_pass)),
+  ('sqlcipher_pass', (Controller, SQLCipher_pass)),
   ('umbraco_crack', (Controller, Umbraco_crack)),
 
   ('tcp_fuzz', (Controller, TCP_fuzz)),
@@ -4740,6 +4781,7 @@ dependencies = {
   'ike-scan': [('ike_enum',), 'http://www.nta-monitor.com/tools-resources/security-tools/ike-scan', '1.9'],
   'unzip': [('unzip_pass',), 'http://www.info-zip.org/', '6.0'],
   'java': [('keystore_pass',), 'http://www.oracle.com/technetwork/java/javase/', '6'],
+  'pysqlcipher': [('sqlcipher_pass',), 'https://github.com/leapcode/pysqlcipher/', '2.6.10'],
   'ftp-tls': [('ftp_login',), 'TLS support unavailable before python 2.7'],
   }
 # }}}