标题: [其他] QQ自动登陆批处理版 [打印本页]
作者: 随风 时间: 2008-10-22 05:07 标题: QQ自动登陆批处理版
不懂vbs利用 SmallK 巡查 给的一个 QQ密码生成器.vbs
作了个生成 QQ自动登陆.bat 的批处理 (适合在不固定场合登陆QQ的朋友)
该帖实在不属于原创,还是放在这里讨论吧。
功能:
输入QQ号码及密码后,会在当前目录创建一个以QQ号码为名的bat文件
运行该文件即可自动登陆该QQ号。
该文件可自动寻找QQ.exe所在路径,先用注册表查找qq路径,若因中文路径等原因
导致路径不正确则再用for穷举查找。
会在当前目录创建一个 temp.vbs 临时文件,完成后会自动删除。
注:该方法不适用于QQ2009- @echo off&title QQ密码生成器
- if "%~1"=="" (
- set /p QQ= 请输入 QQ 号码:
- set lj=%~dp0&start /min "" "%~0" h&exit
- )
- cd.>temp.vbs&cd.>%QQ%.bat
- for /f "delims=" %%a in ('more +33 "%~0"') do >>temp.vbs echo %%a
- for /f "delims=" %%i in ('cscript.exe //nologo "temp.vbs"') do set "mm=%%i"
- echo MsgBox "生成完毕,您可以用 %QQ%.bat "^&QQUser^&"自动登录QQ: %QQ%">temp.vbs
- call :list %~0
- temp.vbs&del/q temp.vbs&start "" "%lj%"&exit
- :list
- for /f "usebackq skip=17 delims=" %%a in ("%~1") do (
- if not "%%a"=="QQQQ" (>>%QQ%.bat echo %%a) else (
- >>%QQ%.bat echo start "" "%%QQPath%%.\QQ.exe" /START QQUIN:%QQ% PWDHASH:%mm% /STAT:40)
- if "%%a"=="GOTO :EOF" goto :eof)
- goto :eof
- @echo off&set "QQpath="
- ::QQ自动寻找路径并登陆
- for /f "skip=4 tokens=1,2 delims=:" %%a in (
- 'reg query HKEY_LOCAL_MACHINE\SOFTWARE\Tencent\QQ /v Install'
- ) do set QQPathL=%%a&set "QQPathR=%%b"
- set "QQPath=%QQPathL:~-1%:%QQPathR%"
- if not exist "%QQPath%.\QQ.exe" call :loop
- QQQQ
- exit
- :loop
- for %%a in (c d e f g h i j k l m n o p q r s t u v w x y z) do (
- if exist %%a:\ (cd/d %%a:
- for /r . %%i in (qq.exe) do if exist "%%i" (
- for /f "delims=" %%a in ("%%i") do set QQPath=%%~dpa&goto :eof
- )))
- GOTO :EOF
- Private Const BITS_TO_A_BYTE = 8
- Private Const BYTES_TO_A_WORD = 4
- Private Const BITS_TO_A_WORD = 32
- Private m_lOnBits(30)
- Private m_l2Power(30)
- Private Function LShift(lValue, iShiftBits)
- If iShiftBits = 0 Then
- LShift = lValue
- Exit Function
- ElseIf iShiftBits = 31 Then
- If lValue And 1 Then
- LShift = &H80000000
- Else
- LShift = 0
- End If
- Exit Function
- ElseIf iShiftBits < 0 Or iShiftBits > 31 Then
- Err.Raise 6
- End If
- If (lValue And m_l2Power(31 - iShiftBits)) Then
- LShift = ((lValue And m_lOnBits(31 - (iShiftBits + 1))) * m_l2Power(iShiftBits)) Or &H80000000
- Else
- LShift = ((lValue And m_lOnBits(31 - iShiftBits)) * m_l2Power(iShiftBits))
- End If
- End Function
- Private Function RShift(lValue, iShiftBits)
- If iShiftBits = 0 Then
- RShift = lValue
- Exit Function
- ElseIf iShiftBits = 31 Then
- If lValue And &H80000000 Then
- RShift = 1
- Else
- RShift = 0
- End If
- Exit Function
- ElseIf iShiftBits < 0 Or iShiftBits > 31 Then
- Err.Raise 6
- End If
- RShift = (lValue And &H7FFFFFFE) \ m_l2Power(iShiftBits)
- If (lValue And &H80000000) Then
- RShift = (RShift Or (&H40000000 \ m_l2Power(iShiftBits - 1)))
- End If
- End Function
- Private Function RotateLeft(lValue, iShiftBits)
- RotateLeft = LShift(lValue, iShiftBits) Or RShift(lValue, (32 - iShiftBits))
- End Function
- Private Function AddUnsigned(lX, lY)
- Dim lX4
- Dim lY4
- Dim lX8
- Dim lY8
- Dim lResult
- lX8 = lX And &H80000000
- lY8 = lY And &H80000000
- lX4 = lX And &H40000000
- lY4 = lY And &H40000000
- lResult = (lX And &H3FFFFFFF) + (lY And &H3FFFFFFF)
- If lX4 And lY4 Then
- lResult = lResult Xor &H80000000 Xor lX8 Xor lY8
- ElseIf lX4 Or lY4 Then
- If lResult And &H40000000 Then
- lResult = lResult Xor &HC0000000 Xor lX8 Xor lY8
- Else
- lResult = lResult Xor &H40000000 Xor lX8 Xor lY8
- End If
- Else
- lResult = lResult Xor lX8 Xor lY8
- End If
- AddUnsigned = lResult
- End Function
- Private Function md5_F(x, y, z)
- md5_F = (x And y) Or ((Not x) And z)
- End Function
- Private Function md5_G(x, y, z)
- md5_G = (x And z) Or (y And (Not z))
- End Function
- Private Function md5_H(x, y, z)
- md5_H = (x Xor y Xor z)
- End Function
- Private Function md5_I(x, y, z)
- md5_I = (y Xor (x Or (Not z)))
- End Function
- Private Sub md5_FF(a, b, c, d, x, s, ac)
- a = AddUnsigned(a, AddUnsigned(AddUnsigned(md5_F(b, c, d), x), ac))
- a = RotateLeft(a, s)
- a = AddUnsigned(a, b)
- End Sub
- Private Sub md5_GG(a, b, c, d, x, s, ac)
- a = AddUnsigned(a, AddUnsigned(AddUnsigned(md5_G(b, c, d), x), ac))
- a = RotateLeft(a, s)
- a = AddUnsigned(a, b)
- End Sub
- Private Sub md5_HH(a, b, c, d, x, s, ac)
- a = AddUnsigned(a, AddUnsigned(AddUnsigned(md5_H(b, c, d), x), ac))
- a = RotateLeft(a, s)
- a = AddUnsigned(a, b)
- End Sub
- Private Sub md5_II(a, b, c, d, x, s, ac)
- a = AddUnsigned(a, AddUnsigned(AddUnsigned(md5_I(b, c, d), x), ac))
- a = RotateLeft(a, s)
- a = AddUnsigned(a, b)
- End Sub
- Private Function ConvertToWordArray(sMessage)
- Dim lMessageLength
- Dim lNumberOfWords
- Dim lWordArray()
- Dim lBytePosition
- Dim lByteCount
- Dim lWordCount
- Const MODULUS_BITS = 512
- Const CONGRUENT_BITS = 448
- lMessageLength = Len(sMessage)
- lNumberOfWords = (((lMessageLength + ((MODULUS_BITS - CONGRUENT_BITS) \ BITS_TO_A_BYTE)) \ (MODULUS_BITS \ BITS_TO_A_BYTE)) + 1) * (MODULUS_BITS \ BITS_TO_A_WORD)
- ReDim lWordArray(lNumberOfWords - 1)
- lBytePosition = 0
- lByteCount = 0
- Do Until lByteCount >= lMessageLength
- lWordCount = lByteCount \ BYTES_TO_A_WORD
- lBytePosition = (lByteCount Mod BYTES_TO_A_WORD) * BITS_TO_A_BYTE
- lWordArray(lWordCount) = lWordArray(lWordCount) Or LShift(Asc(Mid(sMessage, lByteCount + 1, 1)), lBytePosition)
- lByteCount = lByteCount + 1
- Loop
- lWordCount = lByteCount \ BYTES_TO_A_WORD
- lBytePosition = (lByteCount Mod BYTES_TO_A_WORD) * BITS_TO_A_BYTE
- lWordArray(lWordCount) = lWordArray(lWordCount) Or LShift(&H80, lBytePosition)
- lWordArray(lNumberOfWords - 2) = LShift(lMessageLength, 3)
- lWordArray(lNumberOfWords - 1) = RShift(lMessageLength, 29)
- ConvertToWordArray = lWordArray
- End Function
- Private Function WordToHex(lValue)
- Dim lByte
- Dim lCount
- For lCount = 0 To 3
- lByte = RShift(lValue, lCount * BITS_TO_A_BYTE) And m_lOnBits(BITS_TO_A_BYTE - 1)
- WordToHex = WordToHex & Right("0" & Hex(lByte), 2)
- Next
- End Function
- Public Function MD5(sMessage)
- m_lOnBits(0) = CLng(1)
- m_lOnBits(1) = CLng(3)
- m_lOnBits(2) = CLng(7)
- m_lOnBits(3) = CLng(15)
- m_lOnBits(4) = CLng(31)
- m_lOnBits(5) = CLng(63)
- m_lOnBits(6) = CLng(127)
- m_lOnBits(7) = CLng(255)
- m_lOnBits(8) = CLng(511)
- m_lOnBits(9) = CLng(1023)
- m_lOnBits(10) = CLng(2047)
- m_lOnBits(11) = CLng(4095)
- m_lOnBits(12) = CLng(8191)
- m_lOnBits(13) = CLng(16383)
- m_lOnBits(14) = CLng(32767)
- m_lOnBits(15) = CLng(65535)
- m_lOnBits(16) = CLng(131071)
- m_lOnBits(17) = CLng(262143)
- m_lOnBits(18) = CLng(524287)
- m_lOnBits(19) = CLng(1048575)
- m_lOnBits(20) = CLng(2097151)
- m_lOnBits(21) = CLng(4194303)
- m_lOnBits(22) = CLng(8388607)
- m_lOnBits(23) = CLng(16777215)
- m_lOnBits(24) = CLng(33554431)
- m_lOnBits(25) = CLng(67108863)
- m_lOnBits(26) = CLng(134217727)
- m_lOnBits(27) = CLng(268435455)
- m_lOnBits(28) = CLng(536870911)
- m_lOnBits(29) = CLng(1073741823)
- m_lOnBits(30) = CLng(2147483647)
- m_l2Power(0) = CLng(1)
- m_l2Power(1) = CLng(2)
- m_l2Power(2) = CLng(4)
- m_l2Power(3) = CLng(8)
- m_l2Power(4) = CLng(16)
- m_l2Power(5) = CLng(32)
- m_l2Power(6) = CLng(64)
- m_l2Power(7) = CLng(128)
- m_l2Power(8) = CLng(256)
- m_l2Power(9) = CLng(512)
- m_l2Power(10) = CLng(1024)
- m_l2Power(11) = CLng(2048)
- m_l2Power(12) = CLng(4096)
- m_l2Power(13) = CLng(8192)
- m_l2Power(14) = CLng(16384)
- m_l2Power(15) = CLng(32768)
- m_l2Power(16) = CLng(65536)
- m_l2Power(17) = CLng(131072)
- m_l2Power(18) = CLng(262144)
- m_l2Power(19) = CLng(524288)
- m_l2Power(20) = CLng(1048576)
- m_l2Power(21) = CLng(2097152)
- m_l2Power(22) = CLng(4194304)
- m_l2Power(23) = CLng(8388608)
- m_l2Power(24) = CLng(16777216)
- m_l2Power(25) = CLng(33554432)
- m_l2Power(26) = CLng(67108864)
- m_l2Power(27) = CLng(134217728)
- m_l2Power(28) = CLng(268435456)
- m_l2Power(29) = CLng(536870912)
- m_l2Power(30) = CLng(1073741824)
- Dim x
- Dim k
- Dim AA
- Dim BB
- Dim CC
- Dim DD
- Dim a
- Dim b
- Dim c
- Dim d
- Const S11 = 7
- Const S12 = 12
- Const S13 = 17
- Const S14 = 22
- Const S21 = 5
- Const S22 = 9
- Const S23 = 14
- Const S24 = 20
- Const S31 = 4
- Const S32 = 11
- Const S33 = 16
- Const S34 = 23
- Const S41 = 6
- Const S42 = 10
- Const S43 = 15
- Const S44 = 21
- x = ConvertToWordArray(sMessage)
- a = &H67452301
- b = &HEFCDAB89
- c = &H98BADCFE
- d = &H10325476
- For k = 0 To UBound(x) Step 16
- AA = a
- BB = b
- CC = c
- DD = d
- md5_FF a, b, c, d, x(k + 0), S11, &HD76AA478
- md5_FF d, a, b, c, x(k + 1), S12, &HE8C7B756
- md5_FF c, d, a, b, x(k + 2), S13, &H242070DB
- md5_FF b, c, d, a, x(k + 3), S14, &HC1BDCEEE
- md5_FF a, b, c, d, x(k + 4), S11, &HF57C0FAF
- md5_FF d, a, b, c, x(k + 5), S12, &H4787C62A
- md5_FF c, d, a, b, x(k + 6), S13, &HA8304613
- md5_FF b, c, d, a, x(k + 7), S14, &HFD469501
- md5_FF a, b, c, d, x(k + 8), S11, &H698098D8
- md5_FF d, a, b, c, x(k + 9), S12, &H8B44F7AF
- md5_FF c, d, a, b, x(k + 10), S13, &HFFFF5BB1
- md5_FF b, c, d, a, x(k + 11), S14, &H895CD7BE
- md5_FF a, b, c, d, x(k + 12), S11, &H6B901122
- md5_FF d, a, b, c, x(k + 13), S12, &HFD987193
- md5_FF c, d, a, b, x(k + 14), S13, &HA679438E
- md5_FF b, c, d, a, x(k + 15), S14, &H49B40821
- md5_GG a, b, c, d, x(k + 1), S21, &HF61E2562
- md5_GG d, a, b, c, x(k + 6), S22, &HC040B340
- md5_GG c, d, a, b, x(k + 11), S23, &H265E5A51
- md5_GG b, c, d, a, x(k + 0), S24, &HE9B6C7AA
- md5_GG a, b, c, d, x(k + 5), S21, &HD62F105D
- md5_GG d, a, b, c, x(k + 10), S22, &H2441453
- md5_GG c, d, a, b, x(k + 15), S23, &HD8A1E681
- md5_GG b, c, d, a, x(k + 4), S24, &HE7D3FBC8
- md5_GG a, b, c, d, x(k + 9), S21, &H21E1CDE6
- md5_GG d, a, b, c, x(k + 14), S22, &HC33707D6
- md5_GG c, d, a, b, x(k + 3), S23, &HF4D50D87
- md5_GG b, c, d, a, x(k + 8), S24, &H455A14ED
- md5_GG a, b, c, d, x(k + 13), S21, &HA9E3E905
- md5_GG d, a, b, c, x(k + 2), S22, &HFCEFA3F8
- md5_GG c, d, a, b, x(k + 7), S23, &H676F02D9
- md5_GG b, c, d, a, x(k + 12), S24, &H8D2A4C8A
- md5_HH a, b, c, d, x(k + 5), S31, &HFFFA3942
- md5_HH d, a, b, c, x(k + 8), S32, &H8771F681
- md5_HH c, d, a, b, x(k + 11), S33, &H6D9D6122
- md5_HH b, c, d, a, x(k + 14), S34, &HFDE5380C
- md5_HH a, b, c, d, x(k + 1), S31, &HA4BEEA44
- md5_HH d, a, b, c, x(k + 4), S32, &H4BDECFA9
- md5_HH c, d, a, b, x(k + 7), S33, &HF6BB4B60
- md5_HH b, c, d, a, x(k + 10), S34, &HBEBFBC70
- md5_HH a, b, c, d, x(k + 13), S31, &H289B7EC6
- md5_HH d, a, b, c, x(k + 0), S32, &HEAA127FA
- md5_HH c, d, a, b, x(k + 3), S33, &HD4EF3085
- md5_HH b, c, d, a, x(k + 6), S34, &H4881D05
- md5_HH a, b, c, d, x(k + 9), S31, &HD9D4D039
- md5_HH d, a, b, c, x(k + 12), S32, &HE6DB99E5
- md5_HH c, d, a, b, x(k + 15), S33, &H1FA27CF8
- md5_HH b, c, d, a, x(k + 2), S34, &HC4AC5665
- md5_II a, b, c, d, x(k + 0), S41, &HF4292244
- md5_II d, a, b, c, x(k + 7), S42, &H432AFF97
- md5_II c, d, a, b, x(k + 14), S43, &HAB9423A7
- md5_II b, c, d, a, x(k + 5), S44, &HFC93A039
- md5_II a, b, c, d, x(k + 12), S41, &H655B59C3
- md5_II d, a, b, c, x(k + 3), S42, &H8F0CCC92
- md5_II c, d, a, b, x(k + 10), S43, &HFFEFF47D
- md5_II b, c, d, a, x(k + 1), S44, &H85845DD1
- md5_II a, b, c, d, x(k + 8), S41, &H6FA87E4F
- md5_II d, a, b, c, x(k + 15), S42, &HFE2CE6E0
- md5_II c, d, a, b, x(k + 6), S43, &HA3014314
- md5_II b, c, d, a, x(k + 13), S44, &H4E0811A1
- md5_II a, b, c, d, x(k + 4), S41, &HF7537E82
- md5_II d, a, b, c, x(k + 11), S42, &HBD3AF235
- md5_II c, d, a, b, x(k + 2), S43, &H2AD7D2BB
- md5_II b, c, d, a, x(k + 9), S44, &HEB86D391
- a = AddUnsigned(a, AA)
- b = AddUnsigned(b, BB)
- c = AddUnsigned(c, CC)
- d = AddUnsigned(d, DD)
- Next
- MD5 = LCase(WordToHex(a) & WordToHex(b) & WordToHex(c) & WordToHex(d))
- 'MD5=LCase(WordToHex(b) & WordToHex(c)) '这儿是取16位的密码,如果是32位的话,把a和d加上就行了
- End Function
- 'base64 编码前要将十六进制字符转换为Byte
- Function PSSHASH(QQPass)
- Set xml_dom = CreateObject("MSXML2.DOMDocument")
- xml_dom.loadXML "<?xml Version=""1.0""?>"
- Set phex = xml_dom.createElement("Hex")
- phex.dataType = "bin.Hex"
- phex.Text = md5(QQPass)
- Set pbase = xml_dom.createElement("base")
- pbase.dataType = "bin.base64"
- pbase.nodeTypedvalue = phex.nodeTypedvalue
- PSSHASH = pbase.text
- End Function
- '以上部分就是QQ自动登录VBS版省略的部分
- Dim QQPass
- QQPass = InputBox("请输入密码","QQ密码生成器")
- QQPass = PSSHASH(QQPass)
- Wscript.Echo QQPass
- 'inputbox "加密后的密文是:"&vbcrlf&QQPass&vbcrlf&vbcrlf&"为方便复制,使用了这个输入框,直接复制下面的就可以了!","QQ密码转换器",QQPass
- 'bat 调用方法
- 'start "" "D:\QQ2007\QQ.exe" /START QQUIN:28218 PWDHASH:QORHszuPeESA== /STAT:40
复制代码
作者: more 时间: 2008-10-22 16:37
获取QQ的pwdhash值的另一个的方法:
登陆QQ后,通过QQ的面板启动QQ游戏,然后执行此命令,即可获得pwdhash值.- wmic process where "name='qqgame.exe'" get commandline
复制代码
作者: dengwanzhou 时间: 2008-10-22 19:51 标题: 严重支持!!
谢谢楼主!!!:)
作者: beck1321 时间: 2008-10-23 10:21
很好 很不错哦 ~~~
作者: lzl88123 时间: 2008-11-5 08:47
不过不支持QQ2009,是吗?谢谢
作者: steven007 时间: 2009-1-12 11:48
怎么生成的BAT文件是空白的呢
运行就会显示不是有效的WIN32应用程序
作者: xixghi 时间: 2009-8-1 13:41 标题: cccccccccccccccccccccccccc
cccccccccccccccccccccccccccccccccccccccccccccccccccccccc
作者: canyuexiaolang 时间: 2009-8-6 09:01
很惊讶!怎么这么长的代码总共才运行不过10秒钟
不过一取消怎么也是成功呢
[ 本帖最后由 canyuexiaolang 于 2009-8-6 09:05 编辑 ]
作者: Seter 时间: 2009-8-12 10:52
楼主居然把MD5放到VBS里了...无语了..
不过我没看懂啊...这个VBS是BAT释放的还是原来就有的啊..没看见输出语句么
作者: Seter 时间: 2009-8-12 10:53
等等...也就是说BAT中的VBS语句不会被执行,而只作为导出用?
作者: Batcher 时间: 2009-8-12 11:28 标题: 回复 9楼 的帖子
是用more命令生成的VBS,再仔细看看吧。
作者: zjhuzi 时间: 2009-8-13 08:17 标题: 回复 2楼 的帖子
- Microsoft Windows XP [版本 5.1.2600]
- (C) 版权所有 1985-2001 Microsoft Corp.
-
- C:\Documents and Settings\Administrator>wmic p
- et commandline
- CommandLine
- "D:\Program Files\QQGAME\QQGame.exe"
-
-
- C:\Documents and Settings\Administrator>
复制代码
并没有HASH值啊
作者: zjhuzi 时间: 2009-8-13 08:19 标题: 回2楼
经本人测试 可以的
[ 本帖最后由 zjhuzi 于 2009-8-13 09:14 编辑 ]
作者: zjhuzi 时间: 2009-8-13 09:18 标题: 强烈拍砖
楼主的代码生成执行后的批处理是0KB
[attach]1745[/attach]
[attach]1746[/attach]
[ 本帖最后由 zjhuzi 于 2009-8-13 09:21 编辑 ]
作者: aizzw 时间: 2009-8-18 15:27
我测试的 也是0kb
欢迎光临 批处理之家 (http://www.bathome.net/) |
Powered by Discuz! 7.2 |