(04-03-2017, 12:50 PM)shoggoth Wrote: This is a super simple script I put together to extract the password from password-protected PhotoReflect.com galleries.

The technique used is somewhat known, basically, the morons who built the site decided it would be a fucking great idea to do password-validation client-side in javascript, and so, store the password in a base64 encoded blob of viewstate nonsense on the page.
This extracts said password using the deep magic of base64 decoding and terrible regular expressions, granting you access to the gallery.

This script is my first time actually using Python3 for anything - been a Python2 guy for my whole life, so code criticism and the likes is much wanted.
Since I decided to start actually publishing code, I figured I'd also make the jump to Python3 and embrace the future.

https://github.com/Shantaks/photoreflect-password-recovery

(04-09-2017, 05:27 PM)floridag12 Wrote: Also if anyone can help me find the password to this using that script id be happy!

https://donhayescreativephotography.photoreflect.com/store/thumbaccess.aspx?e=9953362
pw: 757447
and this
https://donhayescreativephotography.photoreflect.com/store/thumbaccess.aspx?e=9908571
pw: 343876