1
import base64
2
import json
3
from Crypto.Cipher import AES
4

5
AES_KEY = b"CSB-Enginer-PKey"  # 16-byte AES-128 key
6

7

8
def decrypt_csb_file(filepath: str) -> str:
9
    """解密 CSB_Client 的加密 .dat 配置文件"""
10
    # 1. 读取 Base64 编码内容
11
    with open(filepath, "rb") as f:
12
        b64_data = f.read()
13

14
    # 2. Base64 解码
15
    raw = base64.b64decode(b64_data)
16

17
    # 3. AES-128-CBC 解密（Key 与 IV 相同）
18
    cipher = AES.new(AES_KEY, AES.MODE_CBC, iv=AES_KEY)
19
    decrypted = cipher.decrypt(raw)
20

21
    # 4. 去除 PKCS7 填充
22
    pad_len = decrypted[-1]
23
    if 1 <= pad_len <= 16:
24
        decrypted = decrypted[:-pad_len]
25

26
    # 5. 转为 UTF-8 文本，跳过开头的对齐填充字节
27
    text = decrypted.decode("utf-8", errors="replace")
28
    # 找到第一个 '{' 作为 JSON 起点
29
    json_start = text.find("{")
30
    if json_start >= 0:
31
        text = text[json_start:]
32

33
    return text

1
def decrypt_wlan_config(data_dir: str = r"c:\Program Files (x86)\CSB_Client\data"):
2
    filepath = f"{data_dir}\\apWlanData.dat"
3
    text = decrypt_csb_file(filepath)
4

5
    # JSON 结构：
6
    # {
7
    #   "student": {"password": "xxx", "ssid": "ChangyanSTU{教室号}"},
8
    #   "teacher": {"password": "xxx", "ssid": "ChangyanTCH{教室号}"},
9
    #   "mopen":   {"password": "xxx", "ssid": "xxx"}
10
    # }
11
    data = json.loads(text)
12

13
    for role, info in data.items():
14
        ssid = info.get("ssid", "N/A")
15
        pwd = info.get("password", "N/A")
16
        print(f"  [{role}] SSID: {ssid}, 密码: {pwd}")
17

18
    return data
19

20

21
if __name__ == "__main__":
22
    print("=== WiFi 运行配置 ===")
23
    decrypt_wlan_config()

1
=== WiFi 运行配置 ===
2
  [student] SSID: ChangyanSTUC602, 密码: zhktzhkt
3
  [teacher] SSID: ChangyanTCHC602, 密码: iFlytek1234

1
def decrypt_ap_auth(config_dir: str = r"c:\Program Files (x86)\CSB_Client\config"):
2
    filepath = f"{config_dir}\\ApAuthConfig.dat"
3
    text = decrypt_csb_file(filepath)
4
    print(text)
5
    return text
6

7

8
if __name__ == "__main__":
9
    print("=== AP 登录凭据 ===")
10
    decrypt_ap_auth()

1
--- 锐捷 (CommSky) ---
2
  admin / iflytek
3
  admin / adminiwjB82rX
4
  iflytekAP / iwjB82rX
5

6
--- H3C ---
7
  admin / iflytek
8
  admin / h3capadmin
9
  iflytekAP / iwjB82rX
10

11
--- 华为 (HW) ---
12
  admin / adminiwjB82rX
13
  admin / [email protected]
14
  iflytekAP / iwjB82rX
15

16
--- 飞鱼星 (Volans) ---
17
  admin / adminiwjB82rX
18
  iflytekAP / iwjB82rX
19

20
--- H3C W6 ---
21
  admin / adminiwjB82rX

1
http://192.168.40.1/api/login?username=admin&password=iflytek

1
[后端服务器]
2
    |
3
    | HTTPS (cygjapi.changyan.com / jkintranet.changyan.com)
4
    v
5
[CSB_ApService.exe]
6
    |
7
    | AES-128-CBC 加密 → Base64 编码 → 写入 .dat 文件
8
    v
9
[ApAuthConfig.dat / apWlanData.dat / apAuthConfigEx.dat]
10
    |
11
    | Telnet (H3C Comware 命令行) 或 HTTP API
12
    v
13
[AP 设备 192.168.40.1]