Questions tagged [decryption]

Process of decoding an encrypted message with an authorized access (knowledge of the protocol, the encryption algorithm and the key).

Filter by
Sorted by
Tagged with
-2
votes
1answer
91 views

CyberChef Challenge #21

The challenge data/input is: ...
2
votes
1answer
100 views

decryption of firmware file from modem/router Speedport Plus (Sercomm not ZTE)?

Although I have no hope really I will leave this here in case someone has the ability and time to help. This is from a modem/router widely used in countries like Germany, Greece and others from ...
1
vote
0answers
22 views

ZTE AES-256-CBC Encrypted backup config file

i tried router pass view tool on (a closed source one) it's able to decrypt the older version of it V3.1. tested on two routers of it and it gave me this output Encrypted Data Start Position: 227 ...
1
vote
0answers
45 views

How does one start with reversing router config encryption?

There is not enough info on the web from what I have seen. Most write ups/guides/blog-posts are like this: They provide only the decrypt/encrypt script-tool with how to run it and nothing else They ...
2
votes
1answer
70 views

Decoding algorithm with checksum

I'm a newbie, so I'm asking for your help. I have to decode dumped data from an appliance because I wanted to try understand the data. The data are in this format and some information are known: 7E 00 ...
0
votes
1answer
27 views

how can I disassemble a Nand binary file from an iPod nano?

Ive got a Nand image in bin format not encrypted armv4, cpu 80 MHz ARM 7TDMI processor it is a iPod nano 1st generation I want to see what calls the Nand makes because it is married to the motherboard....
0
votes
0answers
94 views

Need Help with decryption backup config.bin file “ZTE ZXHN H267N v1.1”

hi i'm trying to decrypt config.bin file from new router I got from my company, I tried a tool found on github "https://github.com/mkst/zte-config-utility" I got this ERROR: python3 examples/...
1
vote
1answer
64 views

Decoding Hex Data

I'm trying to decode .PLW data acquired by a temperature logger (PicoLog PT-104). If you convert the .PLW file to a .txt file through the official software you get something like this: where each row ...
1
vote
1answer
66 views

Need help with ZTE router config.bin file decryption and encryption

bin file extracted from a ZXHN H168N V3.1. RouterPassView is able to decrypt the file successfully but the tool can't re-encrypt the file, it gave me some info about the method used to decrypt here ...
0
votes
1answer
75 views

Seemingly compressed file with some readable text

I've been trying to modify a data file within an app which has random lines of readable text but is mostly incomprehensible, it has no file extension. I think its compressed because I was able to find ...
0
votes
0answers
18 views

Generating stats_data field for Badoo browser app login

Badoo (a Tinder-like service) desktop browser app sends the following message to the server with a sign-in request: "server_login_by_password":{ "user":"xxx", &...
0
votes
0answers
32 views

Forcing embedded libcurl to disable SSL verification

I am trying to decrypt HTTPs communications in a binary that I know has been statically linked with cURL. How can I force curl to not verify SSL certificates for fiddler to intercept? I am using the ...
0
votes
2answers
331 views

Turning an unknown audio data stream into wav or similar format

I am trying to get the commentary (casters voice) from a dota2 game file. I've managed to parse the game file and select what I believe is the voice data. This is in a weird format (CSVCMsg_VoiceData) ...
0
votes
0answers
42 views

Reverse engineering a “Crypto++/CryptoPP” Windows Service using Ghidra

I'm new the reversing scene (and this site!). I recently got interested in seeing how Windows Services tick, and discovered a weird encryption scheme. The binary isn't obfuscated at all (at least, it ...
1
vote
1answer
220 views

How to extract information from a binary file knowing the target info

I have some measured data comes from a various types of sensors. The sensors are connected to a data-logger in order to store measurement data. After measurement, the data transported and stored in a ...
1
vote
2answers
147 views

Decrypt application protocol packet

I have several applications that interact with the network, but the data is encrypted. I set breakpoints on send ws2_32.dll and found the correct buffer in which the encrypted data was located (then I ...
0
votes
0answers
31 views

Where are private keys for Google Play stored on an android device?

I am running an application in BlueStacks that was installed with Google Play and am trying to look at network packets which are encrypted using RSA over TLS. I can see the client key exchange packet ...
0
votes
0answers
43 views

How to find .lu encryption method in Android app using Frida?

I was able to extract resource.car from a Corona android application. And then unpacked it using corona-archiver. But I can't read file contents, I've tried luadec and failed with error: bad ...
0
votes
0answers
271 views

Frida finding out a decryption/decode algorithm

It's been a few days I'm working on an application to find out about an encryption it is using on a few strings received from API, but no success so far. These are the strings: ...
0
votes
0answers
85 views

Key Algorithm Reverse

I am trying to reverse a Seed/Key algorithm. i have some sample and knowledge about it, for example i know this algorithm work with only "xor" and "shift" operations. some sample shown in below: ...
1
vote
1answer
120 views

Reversing an encoded key with a given cipher - figuring out the reverse algorithm

So I have an ancient application for a company that has since gone bust and I thought I'd look at how it works; it provides a key, and requires a key given to it. Both these keys are encoded in a ...
5
votes
1answer
518 views

Stuck on XOR decryption of firmware

TL;DR I have an encrypted image and the cleartext version, and I'm almost certain it's an XOR cipher, but I can't figure out how to decrypt it. I have a few clues listed below. Ciphertext excerpt (...
0
votes
1answer
169 views

Help with reversing decryption in assembly

I've used x64dbg to work out decryption in a particular program. I've found where it changes the encrypted material into readable text but can't work out the best way to use this information to ...
0
votes
1answer
144 views

How to decrypt a file who encryption and key is unknown? [closed]

Here is the file that I am trying to findout a way to decrypt. settings.ini This file is from the settings of the MetaTrader 5. The same is the name of the application. Kindly suggest a better way so ...
0
votes
0answers
102 views

Reverse ASCII checksum algorithm

I am looking to reverse engineer what appears to be a 24-bit ASCII checksum. I tried the standard CRC 16 and 32-bit checksums and they don't work. Any pointers would be appreciated. Here is some ...
0
votes
1answer
379 views

How to decrypt the password using radare2 or gdb?

.--------------------------------------------------. | [0x804851b] | ...
2
votes
1answer
179 views

Recognize a decryption algorithm

I'm trying to reverse a malware that builds its IAT at runtime. Due to my inexperience, I'm having trouble to understand this function that accepts into EAX a dword (maybe some sort of hash) and into ...
1
vote
0answers
376 views

Decrypting the Config file of a Huawei router “HG630 V2”

followed that post from Wordpress https://hg658c.wordpress.com/2017/12/04/decrypting-configuration-files-from-other-huawei-home-gateway-routers/ Extracted the 4 Hex strings needed. But, looks ...
2
votes
1answer
59 views

Partially correctly decoded strings from pkware zip with known plaintext

I have a password-protected zip file, where the paths and filenames of each file are encrypted using PKWARE encryption. The password is known and correct, and so is the encryption algorithm. I also ...
6
votes
1answer
331 views

How does IPA decryption works?

All IPAs being downloaded from AppStore gets encrypted on servers as part of FairPlay DRM. But decryption is accomplished on local device. As far as I know there is some hardware module which contains ...
0
votes
1answer
930 views

decrypt config.bin file from Huawei B5328 router i have source files

Hello i need somehelp in decrypting the file config.bin generated by the page backup_setting.html from huawei B5328 router , i have access to all files in the router even the www files hosted on the ...
0
votes
1answer
753 views

Decrypting Lua Files from game

I'm truing to decrypt LUA scrpits from cocos2dx game (for wiki). Links to files of game: libhellolua.so (cocos2dx external library) example encrypted LUA-scripts (*.abc files) I was reading a ...
1
vote
1answer
505 views

how can i Encrypt a decrypted zte zxhn h108n V2.5 config file?

i have decrypted the config file using a program i found online ( maybe made by python to exe ) so to decrypt using it you type is command into CMD decode_zte_config.exe config.bin config.bin.xml ...
0
votes
0answers
211 views

find a video file in memory dump of a process

I have a player that plays encrypted video files and works like this: I open an encrypted video file with it it decrypts the video file and writes it to its memory and plays the file from the memory ...
-1
votes
1answer
365 views

Determining the hash algorithm used [closed]

I have some test data: Test 1 Text: pass1234 Salt: 33b9d87b83c097ce3ea6e6f84a298f839aafc6d7aa23d909a43ac94bdee35ddf Hash: 61477724c136fb285918114792685a4d Test 2 Text: test1234 Salt: ...
1
vote
1answer
80 views

Reverse Engineering Temperatures (RS485 Bus)

I have the following hex byte data. Can someone help me reverse engineer the temperatures calculation? ID || 81 00 8c 00 82 00 aa 00 83 00 04 01 84 00 ff 00 85 00 21 04 The first byte is the id!...
0
votes
1answer
345 views

Intercept zip decryption key or files from an application

If an application is reading from a password protected zip file, is there a way to intercept the key being sent to decrypt the zip file. Or, is there a way to dump the files being read themselves?
2
votes
1answer
214 views

picoCTF be-quick-or-be-dead-1 dcrypt simulation with python

This is be-quick-or-be-dead-1 in picoCTF challenge (Download) in this file we can see decrypt_flag() function, this function return this flag: ./be-quick-or-be-dead-1 Calculating key... Done ...
1
vote
1answer
317 views

Sniffing TCP packets using Wireshark

I am trying to reverse engineer a decoder. The decoder contains a web server that makes sending/receiving information through the Internet possible. To do so I need to sniff the packets that the ...
0
votes
1answer
2k views

Ghidra pseudocode to Java/C

I have this piece of code generated from Ghidra void __cdecl FUNCTION(uint *key,uint *text) { undefined uVar1; ushort uVar2; uint *puVar3; uint *puVar4; uint *puVar5; int iVar6; uint ...
0
votes
1answer
230 views

Difficulty decrypting LCG string

I'm trying to analyze some malware. To get the hang of it I am following the decoding process on this website: Here is a description of the string encoding/decoding process: String encoding ...
0
votes
1answer
113 views

Is it possible to recover the key to a decrypted file?

Is it possible to recover the key to a decrypted file if you have the initialization vector and it uses RijndaelManaged? If so how? The file I want to recover the key from is a xml that looks like ...
-2
votes
1answer
78 views

Can any one de-obfuscator this php code [closed]

my developer has changed all his contact info and i am unable to contact him and i want to move my site to another server but because of this obfuscator code in my php script i am unable to move my ...
1
vote
0answers
149 views

Decrypt ibt.sfi linux firmware(Intel Wireless 8265 Linux Bluetooth)

Why I want to decrypt: Intel 8265 Bluetooth is likely a RAMUSB device, which needs system to update firmware. I try to transplant this linux firmware to macOS. Problems I met: The macOS BT firmware ...
4
votes
2answers
451 views

Reverse engineering file format - ImageLink

I have some technical documentation which is supplied in the form of a generic Windows viewer and a database. The database contains different "books", which are represented by a bunch files: book.bbi ...
1
vote
0answers
57 views

1990s non windows software keys [closed]

Hi I am a Service Engineer on some very old ASML stppers that run a system called PAS (Philips automated steppers), these steppers are obsoleted by the manufacturer and no longer supported by anyone. ...
1
vote
1answer
402 views

How to identify which iOS kernelcache is installed?

I've an iPhone7 running iOS11.3 (15E216). The ipsw for this build version contains two separate kernelcache files named kernelcache.release.iphone9 and kernelcache.release.iphone10. Neither file is an ...
0
votes
2answers
679 views

RSA Decryption? [closed]

I am playing a game in my university where you have different puzzles based on cryptography and now in a puzzle named 'rsa', we have 2 files: 'key', 'secret'. The task for this is to decrypt the ...
1
vote
0answers
465 views

Reverse crypto algorythm, based on AES

Hello! I'm working on reversing one library (shared object) written for ARM architecture. It's obfuscated or packed with something pretty strong what makes debugging much harder and almost impossible ...
1
vote
0answers
262 views

Reverse engineering key fob checksum

I am trying to reverse engineer the key fob of my Ford Fiesta 2014 but I am stuck at finding the used checksum algorithm. I've successfully demodulates the key fob signal (using on-off keying + ...