[SOLVED] How do I use this Python script

hal8000b · 03-12-2013, 08:07 AM

I am using gFTP with bookmarks. I have several FTP sites, but there is one password in gFTP that I need to decrypt, I found the following site:

http://www.g-loaded.eu/2009/05/07/de...-using-python/

I copied the python code and saved it as gftp.py and made it executable with chmod 755:

Code:

def gftp_descrable_password(password):
    """gftp password descrambler
 
    This code has been released in the Public Domain by the original author.
 
    """
    if not password.startswith('$'):
        return password
    newpassword = []
    pwdparts = map(ord, password)
    for i in range(1, len(pwdparts), 2):
        if ((pwdparts[i] & 0xc3) != 0x41 or
            (pwdparts[i+1] & 0xc3) != 0x41):
            return password
        newpassword.append(chr(((pwdparts[i] & 0x3c) << 2) +
                               ((pwdparts[i+1] & 0x3c) >> 2)))
    return "".join(newpassword)

However I do not know how to use the script. If I go to ~/.gFTP bookmarks and copy and paste the password I get a python error:

./gftp.py $hgugujhvjhvvhgv
./gftp.py: line 1: syntax error near unexpected token `('
./gftp.py: line 1: `def gftp_descrable_password(password):'

If I start script with python at a terminal e.g.

python gftp.py $njknjkbjhvjhvbjhv

There is no error but no password is displayed.
The password texts are random characters not a saved password.
Thanks in advance for help on this.

acid_kewpie · 03-13-2013, 03:21 AM

I don't know if there is any special relevance to gFTP here, but for a python script itself, you'd need to escape, or quote, the $ sign. Bash will interpret that string as the name of a variable in the current environment, not a literal string that happens to start with a dollar sign. go....

./script \$blah

or

./script '$blah'

also you'll not be able to run it directly without having a #!/usr/bin/python at the start as in your first example it's having to just run it as a shell script as it doesn't know it's python without that shebang at the start.[COLOR="Silver"]
python without that shebang at the start.

pgpython · 03-13-2013, 04:19 AM

In terms of making the script do something. all you have is a function which is never called. The usual way for a script to do something when it is run is:

Code:

if __name__ == "__main__":
   #Do some stuff when the script is run

This ensures that if your script is imported that the stuff will not get run. you can access command line arguments through the list sys.argv (remeber to import the sys module first!).

acid_kewpie · 03-13-2013, 04:37 AM

Quote:

Originally Posted by pgpython

In terms of making the script do something. all you have is a function which is never called. The usual way for a script to do something when it is run is:

Code:

if __name__ == "__main__":
   #Do some stuff when the script is run

This ensures that if your script is imported that the stuff will not get run. you can access command line arguments through the list sys.argv (remeber to import the sys module first!).

oh dear, i didn't even see that. Embarrassing!

hal8000b · 03-13-2013, 05:55 PM

Thanks for the quick replies. Although I didn't manage to get my python script working
I then tried wireshark and captured the ftp stream whilst using gFTP. The resulting
capture contained my password in plain ascii text. Marking as solved.