XshellCrack is a secondary development based on SharpXDecrypt, rewritten with go language, increased the registry query Settings, more convenient for xshell local password cracking

This tool is only for password search. Any other behavior is at your own risk

Usage:
  root SshCrack [flags]

Flags:
  -P, --Path string   eg -P C:\xxxx\xxx.xsh
  -h, --help          help for SshCrack

If the xshell path is not configured, the system automatically searches the xshell local cache file in the registry, as shown in the following figure

If you specify a path, the decryption will follow the path you specified, as shown in the figure below

Because there is no windows api call involved, the effect is still OK, and the use of go language construction to remove the symbol table, and use the upx shell for compression, so the volume is also very impressive

https://github.com/JDArmy/SharpXDecrypt