https://github.com/0xdeb7ef/spass-manager

A program to decrypt .spass files, and maybe encrypt to .spass in the future.
https://github.com/0xdeb7ef/spass-manager

password password-management password-manager samsung-pass spass

Last synced: 28 days ago
JSON representation

A program to decrypt .spass files, and maybe encrypt to .spass in the future.

• Host: GitHub
• URL: https://github.com/0xdeb7ef/spass-manager
• Owner: 0xdeb7ef
• License: mit
• Created: 2024-08-26T01:26:04.000Z (5 months ago)
• Default Branch: master
• Last Pushed: 2024-09-07T15:28:09.000Z (4 months ago)
• Last Synced: 2024-09-07T16:50:50.313Z (4 months ago)
• Topics: password, password-management, password-manager, samsung-pass, spass
• Language: Go
• Homepage:
• Size: 8.79 KB
• Stars: 1
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# SPass Manager

A program to decrypt .spass files, and maybe encrypt to .spass in the future.

## Installation

`go install github.com/0xdeb7ef/spass-manager/cmd/spass@latest`

## Building from Source

1. `git clone https://github.com/0xdeb7ef/spass-manager.git`

2. `cd spass-manager`

3. `go build ./cmd/spass`

Congratulations, you are now the owner of a brand new `spass` binary!

## Usage

You can simply call `spass` and it will print the usage.

```console

$ spass decrypt -file super_secret_password_file.spass -password 'SuperSecretPassword' -format chrome > passwords.csv

```

The above example decrypts and writes your exported passwords into passwords.csv that Chrome can happily read.

## Why?

I was looking for a way to move my passwords to and from Samsung Pass, but could not find anything online. Everywhere I looked, it said that Samsung uses a custom format.

What we end up with is a hastily written program that can only decrypt .spass files for now.

## How?

Simple, really. Just had a look at what the app does internally. Turns out, it was just AES, it's always AES.

## What?

A .spass file is just a custom .csv file with semicolons as delimiters, encrypted with AES.

The first line appears to indicate the file format version.

The second line lists which types of data you have exported (passwords, cards, addresses, notes), as booleans.

The third line should say `next_table` and this specific keyword is used to delimit the different data types (passwords, cards, addresses, notes).

The lines following `next_table` is the actual data. The data itself is also base64 encoded, `spass` makes no effort to actually sanitize this output (PRs are welcome, obviously).