Trying to grab a secure password from SecureID.exe

[JosiahBruns]

Basically I have been writing a program to log into routers on a very large network and execute a command that will return the rip route info for a duplicate ip.

The problem I am having is the routers use a password that changes every minute. we have a program called SecureId.exe which uses a token and my pin and generates an 8 digit password which is good for one minute.

ShellExecute("C:\Program Files (x86)\RSA SecurID Token for Windows\SecurID.exe")
    sleep(4000) ;replace with loop looking for active window.
    ControlSend("000107726678 - RSA SecurID Token","","pinText",$RSA_Pin & @CR)
    sleep(2000)

here is the data from the window info

>>>> Window <<<<

Title: 000107726678 - RSA SecurID Token

Class: QWidget

Position: 1209, 141

Size: 249, 174

Style: 0x16CF0000

ExStyle: 0x0000010C

Handle: 0x0000000000550C0E

>>>> Control <<<<

Class: QWidget

Instance: 4

ClassnameNN: QWidget4

Name:

Advanced (Class): [CLASS:QWidget; INSTANCE:4]

ID:

Text: passcodeText

Position: 56, 52

Size: 143, 31

ControlClick Coords: 37, 18

Style: 0x56000000

ExStyle: 0x00000004

Handle: 0x0000000000150E42

>>>> Mouse <<<<

Position: 1306, 234

Cursor ID: 0

Color: 0xFDFDE0

>>>> StatusBar <<<<

>>>> ToolsBar <<<<

>>>> Visible Text <<<<

Passcode:

28 seconds remaining

Copy button

Current code is 7037 6743

Close button

Minimize button

Options menu

Re enter pin button

000107726678

>>>> Hidden Text <<<<

Here is some things i have tried that haven't worked. with the resultant data commented below the attempt.

$RSA_Text = WinGetText("[TITLE:000107726678 - RSA SecurID Token]", "")

;~ @error = 0

;~ $RSA_Text Passcode:

;~ 60 seconds

;~ Copy butto

;~ Current code

;~ Close butto

;~ Minimize butto

;~ Options menu

;~ Re enter

;~ 000107726678

$RSA_Text = WinGetText("[class:QWidget]", "")

;~ @error = 0

;~ $RSA_Text

$RSA_Text = WinGetText("[class:QWidget4]", "")

;~ @error = 0

;~ $RSA_Text 0

$RSA_Text = WinGetText("[class:QWidget; instance:4]", "")

;~ @error = 0

;~ $RSA_Text

$RSA_Text = WinGetText("000107726678 - RSA SecurID Token", "")

;~ @error = 0

;~ $RSA_Text Passcode:

;~ 24 seconds

;~ Copy butto

;~ Current code

;~ Close butto

;~ Minimize butto

;~ Options menu

;~ Re enter

;~ 000107726678

$RSA_Text = WinGetText("RSA SecurID Token", "")

;~ @error = 0

;~ $RSA_Text

Any help would be appreciated.

[guinness]

I would read the forum rules first, plus I don't think Security Dynamics would be happy with this question either.

Edited August 4, 2011 by guinness

[PsaltyDS]

@guinness: It's a locally run app, not a big deal.

@JosiahBruns: You need to distinguish between identifying the window and the control. Based on what you showed, you might try:

$sText = ControlGetText("[CLASS:QWidget; TITLE:RSA SecurID Token]", "", "[CLASS:QWidget; INSTANCE:4]")

See the help file for the correct usage of the parameters.

The QWidget class means it was compiled from Qt, so it might not respond to standard Windows API messages. That might lead you to set focus to the control and copy instead:

$hWin = WinGetHandle("[CLASS:QWidget; TITLE:RSA SecurID Token]", "")
WinActivate($hWin)

$hCtrl = ControlGetHandle($hWin, "", "[CLASS:QWidget; INSTANCE:4]")
ControlFocus($hWin, "", $hCtrl)

Send("^a")
Send("^c")
$sText = ClipGet()

Edit: Oops - @LastHopeLost called it - changed from ControlSend() to Send() without fixing the parameters.

Edited August 5, 2011 by PsaltyDS

[LastHopeLost]

@guinness: It is not a keylogger, it passes a generated security code that changes every sixty seconds. I use the same application at work and have thought of doing something similar. He isn't breaking any forum rules, and I don't think Security Dynamics will mind. They haven't existed in over 12 years...

@JosiahBruns: It seems that PsaltyDS is on the right track for that, but you only need to put the keystrokes in the Send() function. I think they copy/pasted from the ControlFocus by mistake. Anyway, you will probably have to macro keystrokes to get it to work right rather than try to interact with the window controls. Please post your solution when you find one so I don't have to reinvent the wheel...

$hWin = WinGetHandle("[CLASS:QWidget; TITLE:RSA SecurID Token]", "")
WinActivate($hWin)

$hCtrl = ControlGetHandle($hWin, "", "[CLASS:QWidget; INSTANCE:4]")
ControlFocus($hWin, "", $hCtrl)

Send("^a")
Send("^c")
$sText = ClipGet()

[PsaltyDS]

Doh!