Questions tagged [decryption]
Process of decoding an encrypted message with an authorized access (knowledge of the protocol, the encryption algorithm and the key).
181
questions
-2
votes
0answers
45 views
How to find key and signature in APK file
I'm having trouble finding the key and sign to decrypt my program. I have tried everything like IDA but to no avail
Link apk file: https://drive.google.com/file/d/1YNNcsFXxJ11ciVUSzxwAUukU06DWUws0/...
0
votes
0answers
14 views
Need Help with decryption backup config.bin file "ZTE ZXHN H168N V3.5"
I am trying to decrypt my router config.bin file.( model mentioned above). When i use zcu utility to decompress my backup to Original format it's say payload 4 .. and the key might be your serial. I ...
0
votes
0answers
50 views
Decoding Game data
I am very new to this whole business so please bear with me.
Goal: Am trying to decode data from a post request from game to server starting with Q0.
Most of the game data is encoded in Base64, but ...
2
votes
1answer
117 views
Finding AES Key in binary using Ghidra and FindCrypt
I would like to learn more about RE.
I wrote a simple program on a STM32F107 which does nothing else than encrypting and decrypting a text once using AES128-ECB.
Here is the C code (I intentionally ...
2
votes
0answers
34 views
Trying to decrypt the output from a BLE scale
I'm trying to decrypt the readings from a BLE scale, which seems to be transmitting readings in the manufacturer data.
Here are a few readings using python bleak library to scan device advertisements:
...
-1
votes
1answer
61 views
0
votes
1answer
128 views
Extract text data from a encrypted .DAT file of a game
I want to read a text .DAT file, but it's "encrypted". The file is from the a smartphone game. There are several .dat files stored on the smartphone, I would like to decode them to know the ...
0
votes
0answers
36 views
is it possible to get code out of chipset through reverse engineering?
for example, encryption/decryption mechanism was inbuilt in a chip, to get the code that performs this mechanisms, is there some ways you can get this code through reverse engineering? what tools and ...
0
votes
0answers
48 views
Unpacking firmware of TP-LINK IPC firmware
I have some TP-LINK IPC firmware that must be reversed (as a task). But I can not unpack the .bin firmware and extract the file system.
Binwalk output:
576 0x240 xz compressed data
...
0
votes
0answers
55 views
Decoding a ZTE H188A config. file
I got this router from my ISP it's fairly good but most of the config options are grayed out. I wanted to decrypt the config file and change those options form there. after some research I found this ...
1
vote
0answers
106 views
Cocos2d xxtea game lua decrypt
How can I use the 16 byte xxtea byte as python
I found the password directly but I want to change the bytecode of the password with 16 bytes as in the picture
_BYTE *__fastcall sub_D4CA64(__int64 a1, ...
0
votes
1answer
18 views
Issue in opening a file type after unzipping
I downloaded a file from this link https://storage.cloud.google.com/gresearch/smallcnnzoo-dataset/cifar10.tar.xz, and I successfully downloaded the archive file.I unzipped it using 7-Zip. After ...
1
vote
0answers
47 views
How can I decode this Malicious php code?
I found this backdoor on a client's website.
https://github.com/baogiaphucthinh/Malicious-php/blob/main/1259da6sc.php (original file)
I have gotten rid of it and realise it's an obfuscated script but ...
0
votes
0answers
75 views
Decrypt AES-256-GCM TLS 1.2 encrypted packets, I have the key but I don't have the IV can I still decrypt?
Can I decrypt AES-256-GCM TLS 1.2 encrypted packets, I have the key but I don't have the IV can I still decrypt? I am getting these packets from wireshark. I know that the IV might be at the front of ...
2
votes
2answers
157 views
How can I decrypte the data in this SQLite Database file
I have this SQLite Database file
https://we.tl/t-RwKqYyS3D7
When I open it in notepad++, I got some decoded strings. I was trying to clean it and show only the strings without the symboles but then I ...
1
vote
0answers
46 views
RE on firmware images that seem to use weak encryption/obfuscation. Robot vacuum
I have been playing with some robot vacuums that utilize very basic navigation, and I am wanting to play around with my own provisioning along with adding a Rpi to augment features.
These vacuums are ...
1
vote
0answers
85 views
where can i find decryption key inside of the dll file?
I am testing a dll file , in a C# console app , and by the looks of it the dll file sends a web request with encrypted and then encoded values to a remote server.
after intercepting and analyzing the ...
2
votes
1answer
158 views
Help regarding XOR game decryption algorithm
I'm currently trying to reverse engineer the decryption algorithm for an old online game, using a chat message packet, as it contains text which is easily recognizable.
I used a packet sniffer to get ...
1
vote
0answers
51 views
How to retrieve the encryption key from a dll file?
I have a dll file that makes an http post request to a webserver , request looks something like this :
UmdUsFrEB3wGMuuAz1Znywuedx6+...
0
votes
0answers
116 views
How do I decode or decompile this class It seems codes are encrypted?
I've used JD-Gui, Luyten and other couple of Java Decompilers but it's not working what is the problem in here? Thanks! It's A Mod (Minecraft) and I'm porting into different versions.
Code:
public ...
0
votes
0answers
61 views
How to decrypt Dashlane vault file?
I have issue I use Dashlane password manager. Recently they pushed users to use web extension instead of desktop app. Issue is that they not included password export in web app. Only way to export ...
0
votes
1answer
104 views
Reverse engineer decryption of cookie
TL; DR
Is there any way you might suggest decrypting this cookie? It was saved under the name mail, so I suspect it encrypts an email address:
...
0
votes
0answers
37 views
Reverse engineering encrypted AllJoyn packets
I have a "smart" bulb here that is configured via its vendor application but I would very much prefer if I could use it with my openHAB instance.
Using Wireshark, I was able to figure out ...
4
votes
1answer
187 views
Find Decryption algorithm of an encryption algorithm
I recently work on an algorithm that encrypt some data with 8 byte length.
I worked hard and I successful to get this algorithm, but I need decryption of this algorithm.
How I can invert it?
I guess ...
-3
votes
2answers
320 views
0
votes
1answer
481 views
decryption of firmware file from modem/router Speedport Plus (Sercomm not ZTE)? [closed]
Although I have no hope really I will leave this here in case someone has the ability and time to help.
This is from a modem/router widely used in countries like Germany, Greece and others from ...
1
vote
0answers
206 views
ZTE AES-256-CBC Encrypted backup config file
i tried router pass view tool on (a closed source one) it's able to decrypt the older version of it V3.1. tested on two routers of it and it gave me this output
Encrypted Data Start Position: 227
...
1
vote
0answers
61 views
How does one start with reversing router config encryption?
There is not enough info on the web from what I have seen.
Most write ups/guides/blog-posts are like this:
They provide only the decrypt/encrypt script-tool with how to run it and nothing else
They ...
3
votes
1answer
174 views
Decoding algorithm with checksum
I'm a newbie, so I'm asking for your help.
I have to decode dumped data from an appliance because I wanted to try understand the data.
The data are in this format and some information are known:
7E 00 ...
0
votes
1answer
39 views
how can I disassemble a Nand binary file from an iPod nano?
Ive got a Nand image in bin format not encrypted armv4, cpu 80 MHz ARM 7TDMI processor it is a iPod nano 1st generation I want to see what calls the Nand makes because it is married to the motherboard....
0
votes
0answers
1k views
Need Help with decryption backup config.bin file "ZTE ZXHN H267N v1.1"
hi i'm trying to decrypt config.bin file from new router I got from my company, I tried a tool found on github "https://github.com/mkst/zte-config-utility" I got this ERROR:
python3 examples/...
2
votes
1answer
117 views
Decoding Hex Data
I'm trying to decode .PLW data acquired by a temperature logger (PicoLog PT-104).
If you convert the .PLW file to a .txt file through the official software you get something like this:
where each row ...
0
votes
2answers
739 views
Need help with ZTE router config.bin file decryption and encryption
bin file extracted from a ZXHN H168N V3.1. RouterPassView is able to decrypt the file successfully but the tool can't re-encrypt the file, it gave me some info about the method used to decrypt here ...
0
votes
1answer
85 views
Seemingly compressed file with some readable text
I've been trying to modify a data file within an app which has random lines of readable text but is mostly incomprehensible, it has no file extension.
I think its compressed because I was able to find ...
0
votes
0answers
61 views
Forcing embedded libcurl to disable SSL verification
I am trying to decrypt HTTPs communications in a binary that I know has been statically linked with cURL. How can I force curl to not verify SSL certificates for fiddler to intercept? I am using the ...
1
vote
2answers
576 views
Turning an unknown audio data stream into wav or similar format
I am trying to get the commentary (casters voice) from a dota2 game file. I've managed to parse the game file and select what I believe is the voice data. This is in a weird format (CSVCMsg_VoiceData) ...
2
votes
1answer
321 views
How to extract information from a binary file knowing the target info
I have some measured data comes from a various types of sensors. The sensors are connected to a data-logger in order to store measurement data. After measurement, the data transported and stored in a ...
1
vote
2answers
338 views
Decrypt application protocol packet
I have several applications that interact with the network, but the data is encrypted. I set breakpoints on send ws2_32.dll and found the correct buffer in which the encrypted data was located (then I ...
0
votes
0answers
60 views
Where are private keys for Google Play stored on an android device?
I am running an application in BlueStacks that was installed with Google Play and am trying to look at network packets which are encrypted using RSA over TLS. I can see the client key exchange packet ...
0
votes
0answers
108 views
Key Algorithm Reverse
I am trying to reverse a Seed/Key algorithm. i have some sample and knowledge about it, for example i know this algorithm work with only "xor" and "shift" operations.
some sample shown in below:
...
1
vote
1answer
143 views
Reversing an encoded key with a given cipher - figuring out the reverse algorithm
So I have an ancient application for a company that has since gone bust and I thought I'd look at how it works; it provides a key, and requires a key given to it. Both these keys are encoded in a ...
5
votes
1answer
729 views
Stuck on XOR decryption of firmware
TL;DR
I have an encrypted image and the cleartext version, and I'm almost certain it's an XOR cipher, but I can't figure out how to decrypt it. I have a few clues listed below.
Ciphertext excerpt (...
0
votes
1answer
234 views
Help with reversing decryption in assembly
I've used x64dbg to work out decryption in a particular program. I've found where it changes the encrypted material into readable text but can't work out the best way to use this information to ...
0
votes
1answer
233 views
How to decrypt a file who encryption and key is unknown? [closed]
Here is the file that I am trying to findout a way to decrypt.
settings.ini
This file is from the settings of the MetaTrader 5. The same is the name of the application.
Kindly suggest a better way so ...
0
votes
0answers
110 views
Reverse ASCII checksum algorithm
I am looking to reverse engineer what appears to be a 24-bit ASCII checksum. I tried the standard CRC 16 and 32-bit checksums and they don't work. Any pointers would be appreciated. Here is some ...
0
votes
1answer
481 views
How to decrypt the password using radare2 or gdb?
.--------------------------------------------------.
| [0x804851b] |
...
2
votes
1answer
185 views
Recognize a decryption algorithm
I'm trying to reverse a malware that builds its IAT at runtime. Due to my inexperience, I'm having trouble to understand this function that accepts into EAX a dword (maybe some sort of hash) and into ...
1
vote
0answers
561 views
Decrypting the Config file of a Huawei router "HG630 V2"
followed that post from Wordpress
https://hg658c.wordpress.com/2017/12/04/decrypting-configuration-files-from-other-huawei-home-gateway-routers/
Extracted the 4 Hex strings needed. But, looks ...
2
votes
1answer
86 views
Partially correctly decoded strings from pkware zip with known plaintext
I have a password-protected zip file, where the paths and filenames of each file are encrypted using PKWARE encryption.
The password is known and correct, and so is the encryption algorithm.
I also ...
6
votes
1answer
417 views
How does IPA decryption works?
All IPAs being downloaded from AppStore gets encrypted on servers as part of FairPlay DRM. But decryption is accomplished on local device. As far as I know there is some hardware module which contains ...
