Board logo

标题: [其他] QQ自动登陆批处理版 [打印本页]

作者: 随风    时间: 2008-10-22 05:07     标题: QQ自动登陆批处理版

不懂vbs利用 SmallK 巡查 给的一个 QQ密码生成器.vbs
作了个生成 QQ自动登陆.bat 的批处理  (适合在不固定场合登陆QQ的朋友)
该帖实在不属于原创,还是放在这里讨论吧。
功能:
   输入QQ号码及密码后,会在当前目录创建一个以QQ号码为名的bat文件
   运行该文件即可自动登陆该QQ号。
   该文件可自动寻找QQ.exe所在路径,先用注册表查找qq路径,若因中文路径等原因
   导致路径不正确则再用for穷举查找。
   会在当前目录创建一个 temp.vbs 临时文件,完成后会自动删除。
注:该方法不适用于QQ2009
  1. @echo off&title QQ密码生成器
  2. if "%~1"=="" (
  3.    set /p QQ= 请输入 QQ 号码:
  4.    set lj=%~dp0&start /min "" "%~0" h&exit
  5. )
  6. cd.>temp.vbs&cd.>%QQ%.bat
  7. for /f "delims=" %%a in ('more +33 "%~0"') do >>temp.vbs echo %%a
  8. for /f "delims=" %%i in ('cscript.exe //nologo "temp.vbs"') do set "mm=%%i"
  9. echo MsgBox "生成完毕,您可以用 %QQ%.bat "^&QQUser^&"自动登录QQ: %QQ%">temp.vbs
  10. call :list %~0
  11. temp.vbs&del/q temp.vbs&start "" "%lj%"&exit
  12. :list
  13. for /f "usebackq skip=17 delims=" %%a in ("%~1") do (
  14. if not "%%a"=="QQQQ" (>>%QQ%.bat echo %%a) else (
  15. >>%QQ%.bat echo start "" "%%QQPath%%.\QQ.exe" /START QQUIN:%QQ% PWDHASH:%mm% /STAT:40)
  16. if "%%a"=="GOTO :EOF" goto :eof)
  17. goto :eof
  18. @echo off&set "QQpath="
  19. ::QQ自动寻找路径并登陆
  20. for /f "skip=4 tokens=1,2 delims=:" %%a in (
  21. 'reg query HKEY_LOCAL_MACHINE\SOFTWARE\Tencent\QQ /v Install'
  22. ) do set QQPathL=%%a&set "QQPathR=%%b"
  23. set "QQPath=%QQPathL:~-1%:%QQPathR%"
  24. if not exist "%QQPath%.\QQ.exe" call :loop
  25. QQQQ
  26. exit
  27. :loop
  28. for %%a in (c d e f g h i j k l m n o p q r s t u v w x y z) do (
  29.   if exist %%a:\ (cd/d %%a:
  30.      for /r . %%i in (qq.exe) do if exist "%%i" (
  31.        for /f "delims=" %%a in ("%%i") do set QQPath=%%~dpa&goto :eof
  32. )))
  33. GOTO :EOF
  34. Private Const BITS_TO_A_BYTE = 8
  35. Private Const BYTES_TO_A_WORD = 4
  36. Private Const BITS_TO_A_WORD = 32
  37. Private m_lOnBits(30)
  38. Private m_l2Power(30)
  39. Private Function LShift(lValue, iShiftBits)
  40.     If iShiftBits = 0 Then
  41.         LShift = lValue
  42.         Exit Function
  43.     ElseIf iShiftBits = 31 Then
  44.         If lValue And 1 Then
  45.             LShift = &H80000000
  46.         Else
  47.             LShift = 0
  48.         End If
  49.         Exit Function
  50.     ElseIf iShiftBits < 0 Or iShiftBits > 31 Then
  51.         Err.Raise 6
  52.     End If
  53.     If (lValue And m_l2Power(31 - iShiftBits)) Then
  54.         LShift = ((lValue And m_lOnBits(31 - (iShiftBits + 1))) * m_l2Power(iShiftBits)) Or &H80000000
  55.     Else
  56.         LShift = ((lValue And m_lOnBits(31 - iShiftBits)) * m_l2Power(iShiftBits))
  57.     End If
  58. End Function
  59. Private Function RShift(lValue, iShiftBits)
  60.     If iShiftBits = 0 Then
  61.         RShift = lValue
  62.         Exit Function
  63.     ElseIf iShiftBits = 31 Then
  64.         If lValue And &H80000000 Then
  65.             RShift = 1
  66.         Else
  67.             RShift = 0
  68.         End If
  69.         Exit Function
  70.     ElseIf iShiftBits < 0 Or iShiftBits > 31 Then
  71.         Err.Raise 6
  72.     End If
  73.     RShift = (lValue And &H7FFFFFFE) \ m_l2Power(iShiftBits)
  74.     If (lValue And &H80000000) Then
  75.         RShift = (RShift Or (&H40000000 \ m_l2Power(iShiftBits - 1)))
  76.     End If
  77. End Function
  78. Private Function RotateLeft(lValue, iShiftBits)
  79.     RotateLeft = LShift(lValue, iShiftBits) Or RShift(lValue, (32 - iShiftBits))
  80. End Function
  81. Private Function AddUnsigned(lX, lY)
  82.     Dim lX4
  83.     Dim lY4
  84.     Dim lX8
  85.     Dim lY8
  86.     Dim lResult
  87.     lX8 = lX And &H80000000
  88.     lY8 = lY And &H80000000
  89.     lX4 = lX And &H40000000
  90.     lY4 = lY And &H40000000
  91.     lResult = (lX And &H3FFFFFFF) + (lY And &H3FFFFFFF)
  92.     If lX4 And lY4 Then
  93.         lResult = lResult Xor &H80000000 Xor lX8 Xor lY8
  94.     ElseIf lX4 Or lY4 Then
  95.         If lResult And &H40000000 Then
  96.             lResult = lResult Xor &HC0000000 Xor lX8 Xor lY8
  97.         Else
  98.             lResult = lResult Xor &H40000000 Xor lX8 Xor lY8
  99.         End If
  100.     Else
  101.         lResult = lResult Xor lX8 Xor lY8
  102.     End If
  103.     AddUnsigned = lResult
  104. End Function
  105. Private Function md5_F(x, y, z)
  106.     md5_F = (x And y) Or ((Not x) And z)
  107. End Function
  108. Private Function md5_G(x, y, z)
  109.     md5_G = (x And z) Or (y And (Not z))
  110. End Function
  111. Private Function md5_H(x, y, z)
  112.     md5_H = (x Xor y Xor z)
  113. End Function
  114. Private Function md5_I(x, y, z)
  115.     md5_I = (y Xor (x Or (Not z)))
  116. End Function
  117. Private Sub md5_FF(a, b, c, d, x, s, ac)
  118.     a = AddUnsigned(a, AddUnsigned(AddUnsigned(md5_F(b, c, d), x), ac))
  119.     a = RotateLeft(a, s)
  120.     a = AddUnsigned(a, b)
  121. End Sub
  122. Private Sub md5_GG(a, b, c, d, x, s, ac)
  123.     a = AddUnsigned(a, AddUnsigned(AddUnsigned(md5_G(b, c, d), x), ac))
  124.     a = RotateLeft(a, s)
  125.     a = AddUnsigned(a, b)
  126. End Sub
  127. Private Sub md5_HH(a, b, c, d, x, s, ac)
  128.     a = AddUnsigned(a, AddUnsigned(AddUnsigned(md5_H(b, c, d), x), ac))
  129.     a = RotateLeft(a, s)
  130.     a = AddUnsigned(a, b)
  131. End Sub
  132. Private Sub md5_II(a, b, c, d, x, s, ac)
  133.     a = AddUnsigned(a, AddUnsigned(AddUnsigned(md5_I(b, c, d), x), ac))
  134.     a = RotateLeft(a, s)
  135.     a = AddUnsigned(a, b)
  136. End Sub
  137. Private Function ConvertToWordArray(sMessage)
  138.     Dim lMessageLength
  139.     Dim lNumberOfWords
  140.     Dim lWordArray()
  141.     Dim lBytePosition
  142.     Dim lByteCount
  143.     Dim lWordCount
  144.     Const MODULUS_BITS = 512
  145.     Const CONGRUENT_BITS = 448
  146.     lMessageLength = Len(sMessage)
  147.     lNumberOfWords = (((lMessageLength + ((MODULUS_BITS - CONGRUENT_BITS) \ BITS_TO_A_BYTE)) \ (MODULUS_BITS \ BITS_TO_A_BYTE)) + 1) * (MODULUS_BITS \ BITS_TO_A_WORD)
  148.     ReDim lWordArray(lNumberOfWords - 1)
  149.     lBytePosition = 0
  150.     lByteCount = 0
  151.     Do Until lByteCount >= lMessageLength
  152.         lWordCount = lByteCount \ BYTES_TO_A_WORD
  153.         lBytePosition = (lByteCount Mod BYTES_TO_A_WORD) * BITS_TO_A_BYTE
  154.         lWordArray(lWordCount) = lWordArray(lWordCount) Or LShift(Asc(Mid(sMessage, lByteCount + 1, 1)), lBytePosition)
  155.         lByteCount = lByteCount + 1
  156.     Loop
  157.     lWordCount = lByteCount \ BYTES_TO_A_WORD
  158.     lBytePosition = (lByteCount Mod BYTES_TO_A_WORD) * BITS_TO_A_BYTE
  159.     lWordArray(lWordCount) = lWordArray(lWordCount) Or LShift(&H80, lBytePosition)
  160.     lWordArray(lNumberOfWords - 2) = LShift(lMessageLength, 3)
  161.     lWordArray(lNumberOfWords - 1) = RShift(lMessageLength, 29)
  162.     ConvertToWordArray = lWordArray
  163. End Function
  164. Private Function WordToHex(lValue)
  165.     Dim lByte
  166.     Dim lCount
  167.     For lCount = 0 To 3
  168.         lByte = RShift(lValue, lCount * BITS_TO_A_BYTE) And m_lOnBits(BITS_TO_A_BYTE - 1)
  169.         WordToHex = WordToHex & Right("0" & Hex(lByte), 2)
  170.     Next
  171. End Function
  172. Public Function MD5(sMessage)
  173.     m_lOnBits(0) = CLng(1)
  174.     m_lOnBits(1) = CLng(3)
  175.     m_lOnBits(2) = CLng(7)
  176.     m_lOnBits(3) = CLng(15)
  177.     m_lOnBits(4) = CLng(31)
  178.     m_lOnBits(5) = CLng(63)
  179.     m_lOnBits(6) = CLng(127)
  180.     m_lOnBits(7) = CLng(255)
  181.     m_lOnBits(8) = CLng(511)
  182.     m_lOnBits(9) = CLng(1023)
  183.     m_lOnBits(10) = CLng(2047)
  184.     m_lOnBits(11) = CLng(4095)
  185.     m_lOnBits(12) = CLng(8191)
  186.     m_lOnBits(13) = CLng(16383)
  187.     m_lOnBits(14) = CLng(32767)
  188.     m_lOnBits(15) = CLng(65535)
  189.     m_lOnBits(16) = CLng(131071)
  190.     m_lOnBits(17) = CLng(262143)
  191.     m_lOnBits(18) = CLng(524287)
  192.     m_lOnBits(19) = CLng(1048575)
  193.     m_lOnBits(20) = CLng(2097151)
  194.     m_lOnBits(21) = CLng(4194303)
  195.     m_lOnBits(22) = CLng(8388607)
  196.     m_lOnBits(23) = CLng(16777215)
  197.     m_lOnBits(24) = CLng(33554431)
  198.     m_lOnBits(25) = CLng(67108863)
  199.     m_lOnBits(26) = CLng(134217727)
  200.     m_lOnBits(27) = CLng(268435455)
  201.     m_lOnBits(28) = CLng(536870911)
  202.     m_lOnBits(29) = CLng(1073741823)
  203.     m_lOnBits(30) = CLng(2147483647)
  204.     m_l2Power(0) = CLng(1)
  205.     m_l2Power(1) = CLng(2)
  206.     m_l2Power(2) = CLng(4)
  207.     m_l2Power(3) = CLng(8)
  208.     m_l2Power(4) = CLng(16)
  209.     m_l2Power(5) = CLng(32)
  210.     m_l2Power(6) = CLng(64)
  211.     m_l2Power(7) = CLng(128)
  212.     m_l2Power(8) = CLng(256)
  213.     m_l2Power(9) = CLng(512)
  214.     m_l2Power(10) = CLng(1024)
  215.     m_l2Power(11) = CLng(2048)
  216.     m_l2Power(12) = CLng(4096)
  217.     m_l2Power(13) = CLng(8192)
  218.     m_l2Power(14) = CLng(16384)
  219.     m_l2Power(15) = CLng(32768)
  220.     m_l2Power(16) = CLng(65536)
  221.     m_l2Power(17) = CLng(131072)
  222.     m_l2Power(18) = CLng(262144)
  223.     m_l2Power(19) = CLng(524288)
  224.     m_l2Power(20) = CLng(1048576)
  225.     m_l2Power(21) = CLng(2097152)
  226.     m_l2Power(22) = CLng(4194304)
  227.     m_l2Power(23) = CLng(8388608)
  228.     m_l2Power(24) = CLng(16777216)
  229.     m_l2Power(25) = CLng(33554432)
  230.     m_l2Power(26) = CLng(67108864)
  231.     m_l2Power(27) = CLng(134217728)
  232.     m_l2Power(28) = CLng(268435456)
  233.     m_l2Power(29) = CLng(536870912)
  234.     m_l2Power(30) = CLng(1073741824)
  235.     Dim x
  236.     Dim k
  237.     Dim AA
  238.     Dim BB
  239.     Dim CC
  240.     Dim DD
  241.     Dim a
  242.     Dim b
  243.     Dim c
  244.     Dim d
  245.     Const S11 = 7
  246.     Const S12 = 12
  247.     Const S13 = 17
  248.     Const S14 = 22
  249.     Const S21 = 5
  250.     Const S22 = 9
  251.     Const S23 = 14
  252.     Const S24 = 20
  253.     Const S31 = 4
  254.     Const S32 = 11
  255.     Const S33 = 16
  256.     Const S34 = 23
  257.     Const S41 = 6
  258.     Const S42 = 10
  259.     Const S43 = 15
  260.     Const S44 = 21
  261.     x = ConvertToWordArray(sMessage)
  262.     a = &H67452301
  263.     b = &HEFCDAB89
  264.     c = &H98BADCFE
  265.     d = &H10325476
  266.     For k = 0 To UBound(x) Step 16
  267.         AA = a
  268.         BB = b
  269.         CC = c
  270.         DD = d
  271.         md5_FF a, b, c, d, x(k + 0), S11, &HD76AA478
  272.         md5_FF d, a, b, c, x(k + 1), S12, &HE8C7B756
  273.         md5_FF c, d, a, b, x(k + 2), S13, &H242070DB
  274.         md5_FF b, c, d, a, x(k + 3), S14, &HC1BDCEEE
  275.         md5_FF a, b, c, d, x(k + 4), S11, &HF57C0FAF
  276.         md5_FF d, a, b, c, x(k + 5), S12, &H4787C62A
  277.         md5_FF c, d, a, b, x(k + 6), S13, &HA8304613
  278.         md5_FF b, c, d, a, x(k + 7), S14, &HFD469501
  279.         md5_FF a, b, c, d, x(k + 8), S11, &H698098D8
  280.         md5_FF d, a, b, c, x(k + 9), S12, &H8B44F7AF
  281.         md5_FF c, d, a, b, x(k + 10), S13, &HFFFF5BB1
  282.         md5_FF b, c, d, a, x(k + 11), S14, &H895CD7BE
  283.         md5_FF a, b, c, d, x(k + 12), S11, &H6B901122
  284.         md5_FF d, a, b, c, x(k + 13), S12, &HFD987193
  285.         md5_FF c, d, a, b, x(k + 14), S13, &HA679438E
  286.         md5_FF b, c, d, a, x(k + 15), S14, &H49B40821
  287.         md5_GG a, b, c, d, x(k + 1), S21, &HF61E2562
  288.         md5_GG d, a, b, c, x(k + 6), S22, &HC040B340
  289.         md5_GG c, d, a, b, x(k + 11), S23, &H265E5A51
  290.         md5_GG b, c, d, a, x(k + 0), S24, &HE9B6C7AA
  291.         md5_GG a, b, c, d, x(k + 5), S21, &HD62F105D
  292.         md5_GG d, a, b, c, x(k + 10), S22, &H2441453
  293.         md5_GG c, d, a, b, x(k + 15), S23, &HD8A1E681
  294.         md5_GG b, c, d, a, x(k + 4), S24, &HE7D3FBC8
  295.         md5_GG a, b, c, d, x(k + 9), S21, &H21E1CDE6
  296.         md5_GG d, a, b, c, x(k + 14), S22, &HC33707D6
  297.         md5_GG c, d, a, b, x(k + 3), S23, &HF4D50D87
  298.         md5_GG b, c, d, a, x(k + 8), S24, &H455A14ED
  299.         md5_GG a, b, c, d, x(k + 13), S21, &HA9E3E905
  300.         md5_GG d, a, b, c, x(k + 2), S22, &HFCEFA3F8
  301.         md5_GG c, d, a, b, x(k + 7), S23, &H676F02D9
  302.         md5_GG b, c, d, a, x(k + 12), S24, &H8D2A4C8A
  303.         md5_HH a, b, c, d, x(k + 5), S31, &HFFFA3942
  304.         md5_HH d, a, b, c, x(k + 8), S32, &H8771F681
  305.         md5_HH c, d, a, b, x(k + 11), S33, &H6D9D6122
  306.         md5_HH b, c, d, a, x(k + 14), S34, &HFDE5380C
  307.         md5_HH a, b, c, d, x(k + 1), S31, &HA4BEEA44
  308.         md5_HH d, a, b, c, x(k + 4), S32, &H4BDECFA9
  309.         md5_HH c, d, a, b, x(k + 7), S33, &HF6BB4B60
  310.         md5_HH b, c, d, a, x(k + 10), S34, &HBEBFBC70
  311.         md5_HH a, b, c, d, x(k + 13), S31, &H289B7EC6
  312.         md5_HH d, a, b, c, x(k + 0), S32, &HEAA127FA
  313.         md5_HH c, d, a, b, x(k + 3), S33, &HD4EF3085
  314.         md5_HH b, c, d, a, x(k + 6), S34, &H4881D05
  315.         md5_HH a, b, c, d, x(k + 9), S31, &HD9D4D039
  316.         md5_HH d, a, b, c, x(k + 12), S32, &HE6DB99E5
  317.         md5_HH c, d, a, b, x(k + 15), S33, &H1FA27CF8
  318.         md5_HH b, c, d, a, x(k + 2), S34, &HC4AC5665
  319.         md5_II a, b, c, d, x(k + 0), S41, &HF4292244
  320.         md5_II d, a, b, c, x(k + 7), S42, &H432AFF97
  321.         md5_II c, d, a, b, x(k + 14), S43, &HAB9423A7
  322.         md5_II b, c, d, a, x(k + 5), S44, &HFC93A039
  323.         md5_II a, b, c, d, x(k + 12), S41, &H655B59C3
  324.         md5_II d, a, b, c, x(k + 3), S42, &H8F0CCC92
  325.         md5_II c, d, a, b, x(k + 10), S43, &HFFEFF47D
  326.         md5_II b, c, d, a, x(k + 1), S44, &H85845DD1
  327.         md5_II a, b, c, d, x(k + 8), S41, &H6FA87E4F
  328.         md5_II d, a, b, c, x(k + 15), S42, &HFE2CE6E0
  329.         md5_II c, d, a, b, x(k + 6), S43, &HA3014314
  330.         md5_II b, c, d, a, x(k + 13), S44, &H4E0811A1
  331.         md5_II a, b, c, d, x(k + 4), S41, &HF7537E82
  332.         md5_II d, a, b, c, x(k + 11), S42, &HBD3AF235
  333.         md5_II c, d, a, b, x(k + 2), S43, &H2AD7D2BB
  334.         md5_II b, c, d, a, x(k + 9), S44, &HEB86D391
  335.         a = AddUnsigned(a, AA)
  336.         b = AddUnsigned(b, BB)
  337.         c = AddUnsigned(c, CC)
  338.         d = AddUnsigned(d, DD)
  339.     Next
  340.     MD5 = LCase(WordToHex(a) & WordToHex(b) & WordToHex(c) & WordToHex(d))
  341.     'MD5=LCase(WordToHex(b) & WordToHex(c)) '这儿是取16位的密码,如果是32位的话,把a和d加上就行了
  342. End Function
  343. 'base64 编码前要将十六进制字符转换为Byte
  344. Function PSSHASH(QQPass)
  345.     Set xml_dom = CreateObject("MSXML2.DOMDocument")
  346.     xml_dom.loadXML "<?xml Version=""1.0""?>"
  347.     Set phex = xml_dom.createElement("Hex")
  348.     phex.dataType = "bin.Hex"
  349.     phex.Text = md5(QQPass)
  350.     Set pbase = xml_dom.createElement("base")
  351.     pbase.dataType = "bin.base64"
  352.     pbase.nodeTypedvalue = phex.nodeTypedvalue
  353.     PSSHASH = pbase.text
  354. End Function
  355. '以上部分就是QQ自动登录VBS版省略的部分
  356. Dim QQPass
  357. QQPass = InputBox("请输入密码","QQ密码生成器")
  358. QQPass = PSSHASH(QQPass)
  359. Wscript.Echo QQPass
  360. 'inputbox "加密后的密文是:"&vbcrlf&QQPass&vbcrlf&vbcrlf&"为方便复制,使用了这个输入框,直接复制下面的就可以了!","QQ密码转换器",QQPass
  361. 'bat 调用方法
  362. 'start "" "D:\QQ2007\QQ.exe" /START QQUIN:28218 PWDHASH:QORHszuPeESA== /STAT:40
复制代码

作者: more    时间: 2008-10-22 16:37

获取QQ的pwdhash值的另一个的方法:
登陆QQ后,通过QQ的面板启动QQ游戏,然后执行此命令,即可获得pwdhash值.
  1. wmic process where "name='qqgame.exe'" get commandline
复制代码

作者: dengwanzhou    时间: 2008-10-22 19:51     标题: 严重支持!!

谢谢楼主!!!:)
作者: beck1321    时间: 2008-10-23 10:21

很好 很不错哦 ~~~
作者: lzl88123    时间: 2008-11-5 08:47

不过不支持QQ2009,是吗?谢谢
作者: steven007    时间: 2009-1-12 11:48

怎么生成的BAT文件是空白的呢
运行就会显示不是有效的WIN32应用程序
作者: xixghi    时间: 2009-8-1 13:41     标题: cccccccccccccccccccccccccc

cccccccccccccccccccccccccccccccccccccccccccccccccccccccc
作者: canyuexiaolang    时间: 2009-8-6 09:01

很惊讶!怎么这么长的代码总共才运行不过10秒钟
不过一取消怎么也是成功呢

[ 本帖最后由 canyuexiaolang 于 2009-8-6 09:05 编辑 ]
作者: Seter    时间: 2009-8-12 10:52

楼主居然把MD5放到VBS里了...无语了..
不过我没看懂啊...这个VBS是BAT释放的还是原来就有的啊..没看见输出语句么
作者: Seter    时间: 2009-8-12 10:53

等等...也就是说BAT中的VBS语句不会被执行,而只作为导出用?
作者: Batcher    时间: 2009-8-12 11:28     标题: 回复 9楼 的帖子

是用more命令生成的VBS,再仔细看看吧。
作者: zjhuzi    时间: 2009-8-13 08:17     标题: 回复 2楼 的帖子

  1. Microsoft Windows XP [版本 5.1.2600]
  2. (C) 版权所有 1985-2001 Microsoft Corp.
  3. C:\Documents and Settings\Administrator>wmic p
  4. et commandline
  5. CommandLine
  6. "D:\Program Files\QQGAME\QQGame.exe"
  7. C:\Documents and Settings\Administrator>
复制代码

并没有HASH值啊
作者: zjhuzi    时间: 2009-8-13 08:19     标题: 回2楼

经本人测试 可以的

[ 本帖最后由 zjhuzi 于 2009-8-13 09:14 编辑 ]
作者: zjhuzi    时间: 2009-8-13 09:18     标题: 强烈拍砖

楼主的代码生成执行后的批处理是0KB

[attach]1745[/attach]
[attach]1746[/attach]

[ 本帖最后由 zjhuzi 于 2009-8-13 09:21 编辑 ]
作者: aizzw    时间: 2009-8-18 15:27

我测试的    也是0kb




欢迎光临 批处理之家 (http://www.bathome.net/) Powered by Discuz! 7.2