p120ph37 · January 2, 2014 01:34 · p120ph37 · Jan 2, 2014 · bleistift2 · May 22, 2014
diff --git a/VIPAccess.exp b/VIPAccess.exp
 #!/usr/bin/expect -f
 #
 # VIPAccess.exp
 #
 # Command-line emulation of Symantec's VIP Access software token.
 # Usage:
 #  ./VIPAccess.exp [v]
 # If the "v" argument (or any argument) is specified, verbose output
 # will be produced on stderr.  The OTP value will be output on stdout.
 #
 set timeout 10
 log_user 0
 set aes_key D0D0D0E0D0D0DFDFDF2C34323937D7AE
 set keychain /Users/$env(USER)/Library/Keychains/VIPAccess.keychain
 proc vlog { s } { if $::argc { puts stderr $s } }

 vlog "Finding machine serial number (used by VIPAccess to secure the keychain.):"
 spawn /bin/sh -c "ioreg -rac IOPlatformExpertDevice | xpath 'plist/array/dict/key\[.=\"IOPlatformSerialNumber\"\]/following-sibling::*\[position()=1\]/text()' 2>/dev/null"
 expect eof
 set serial $expect_out(buffer)
 vlog "    $serial"

 vlog "Reading encrypted Credential ID and OTP secret key from $keychain:"
 spawn security unlock-keychain $keychain
 expect "password to unlock $keychain: "
 send "${serial}SymantecVIPAccess$env(USER)\n"
 expect eof
 spawn security find-generic-password -gl CredentialStore $keychain
 expect -re \"acct\"<blob>=\"\(\[a-zA-Z0-9/+\]+=\)\"
 set id_crypt $expect_out(1,string)
 vlog "    $id_crypt"
 expect -re password:\ \"\(\[a-zA-Z0-9/+\]+=\)\"
 set key_crypt $expect_out(1,string)
 vlog "    $key_crypt"

 vlog "Decrypting Credential ID and OTP key:"
 spawn /bin/sh -c "openssl enc -aes-128-cbc -d -K $aes_key -iv 0 -a <<< '$id_crypt'"
 expect -re \(.*\)Symantec
 set id_plain $expect_out(1,string)
 vlog "    $id_plain"
 spawn /bin/sh -c "openssl enc -aes-128-cbc -d -K $aes_key -iv 0 -a <<< '$key_crypt' | xxd -p"
 expect -re \[0-9a-f\]+
 set key_plain $expect_out(0,string)
 vlog "    $key_plain"

 vlog "Generating current OTP using secret key."
 spawn oathtool --totp $key_plain
 expect -re \\d+
 set otp $expect_out(0,string)
 puts $otp
	#!/usr/bin/expect -f
	#
	# VIPAccess.exp
	#
	# Command-line emulation of Symantec's VIP Access software token.
	# Usage:
	# ./VIPAccess.exp [v]
	# If the "v" argument (or any argument) is specified, verbose output
	# will be produced on stderr. The OTP value will be output on stdout.
	#
	set timeout 10
	log_user 0
	set aes_key D0D0D0E0D0D0DFDFDF2C34323937D7AE
	set keychain /Users/$env(USER)/Library/Keychains/VIPAccess.keychain
	proc vlog { s } { if $::argc { puts stderr $s } }

	vlog "Finding machine serial number (used by VIPAccess to secure the keychain.):"
	spawn /bin/sh -c "ioreg -rac IOPlatformExpertDevice \| xpath 'plist/array/dict/key\[.=\"IOPlatformSerialNumber\"\]/following-sibling::*\[position()=1\]/text()' 2>/dev/null"
	expect eof
	set serial $expect_out(buffer)
	vlog " $serial"

	vlog "Reading encrypted Credential ID and OTP secret key from $keychain:"
	spawn security unlock-keychain $keychain
	expect "password to unlock $keychain: "
	send "${serial}SymantecVIPAccess$env(USER)\n"
	expect eof
	spawn security find-generic-password -gl CredentialStore $keychain
	expect -re \"acct\"<blob>=\"\(\[a-zA-Z0-9/+\]+=\)\"
	set id_crypt $expect_out(1,string)
	vlog " $id_crypt"
	expect -re password:\ \"\(\[a-zA-Z0-9/+\]+=\)\"
	set key_crypt $expect_out(1,string)
	vlog " $key_crypt"

	vlog "Decrypting Credential ID and OTP key:"
	spawn /bin/sh -c "openssl enc -aes-128-cbc -d -K $aes_key -iv 0 -a <<< '$id_crypt'"
	expect -re \(.*\)Symantec
	set id_plain $expect_out(1,string)
	vlog " $id_plain"
	spawn /bin/sh -c "openssl enc -aes-128-cbc -d -K $aes_key -iv 0 -a <<< '$key_crypt' \| xxd -p"
	expect -re \[0-9a-f\]+
	set key_plain $expect_out(0,string)
	vlog " $key_plain"

	vlog "Generating current OTP using secret key."
	spawn oathtool --totp $key_plain
	expect -re \\d+
	set otp $expect_out(0,string)
	puts $otp