Questions tagged [decryption]
Process of decoding an encrypted message with an authorized access (knowledge of the protocol, the encryption algorithm and the key).
175
questions
0
votes
0answers
30 views
Unpacking firmware of TP-LINK IPC firmware
I have some TP-LINK IPC firmware that must be reversed (as a task). But I can not unpack the .bin firmware and extract the file system.
Binwalk output:
576 0x240 xz compressed data
...
0
votes
0answers
18 views
Decoding a ZTE H188A config. file
I got this router from my ISP it's fairly good but most of the config options are grayed out. I wanted to decrypt the config file and change those options form there. after some research I found this ...
1
vote
0answers
44 views
Cocos2d xxtea game lua decrypt
How can I use the 16 byte xxtea byte as python
I found the password directly but I want to change the bytecode of the password with 16 bytes as in the picture
_BYTE *__fastcall sub_D4CA64(__int64 a1, ...
0
votes
1answer
17 views
Issue in opening a file type after unzipping
I downloaded a file from this link https://storage.cloud.google.com/gresearch/smallcnnzoo-dataset/cifar10.tar.xz, and I successfully downloaded the archive file.I unzipped it using 7-Zip. After ...
1
vote
0answers
33 views
How can I decode this Malicious php code?
I found this backdoor on a client's website.
https://github.com/baogiaphucthinh/Malicious-php/blob/main/1259da6sc.php (original file)
I have gotten rid of it and realise it's an obfuscated script but ...
0
votes
0answers
48 views
Decrypt AES-256-GCM TLS 1.2 encrypted packets, I have the key but I don't have the IV can I still decrypt?
Can I decrypt AES-256-GCM TLS 1.2 encrypted packets, I have the key but I don't have the IV can I still decrypt? I am getting these packets from wireshark. I know that the IV might be at the front of ...
2
votes
2answers
102 views
How can I decrypte the data in this SQLite Database file
I have this SQLite Database file
https://we.tl/t-RwKqYyS3D7
When I open it in notepad++, I got some decoded strings. I was trying to clean it and show only the strings without the symboles but then I ...
1
vote
0answers
40 views
RE on firmware images that seem to use weak encryption/obfuscation. Robot vacuum
I have been playing with some robot vacuums that utilize very basic navigation, and I am wanting to play around with my own provisioning along with adding a Rpi to augment features.
These vacuums are ...
1
vote
0answers
55 views
where can i find decryption key inside of the dll file?
I am testing a dll file , in a C# console app , and by the looks of it the dll file sends a web request with encrypted and then encoded values to a remote server.
after intercepting and analyzing the ...
2
votes
1answer
147 views
Help regarding XOR game decryption algorithm
I'm currently trying to reverse engineer the decryption algorithm for an old online game, using a chat message packet, as it contains text which is easily recognizable.
I used a packet sniffer to get ...
1
vote
0answers
48 views
How to retrieve the encryption key from a dll file?
I have a dll file that makes an http post request to a webserver , request looks something like this :
UmdUsFrEB3wGMuuAz1Znywuedx6+...
0
votes
0answers
111 views
How do I decode or decompile this class It seems codes are encrypted?
I've used JD-Gui, Luyten and other couple of Java Decompilers but it's not working what is the problem in here? Thanks! It's A Mod (Minecraft) and I'm porting into different versions.
Code:
public ...
0
votes
0answers
52 views
How to decrypt Dashlane vault file?
I have issue I use Dashlane password manager. Recently they pushed users to use web extension instead of desktop app. Issue is that they not included password export in web app. Only way to export ...
0
votes
1answer
95 views
Reverse engineer decryption of cookie
TL; DR
Is there any way you might suggest decrypting this cookie? It was saved under the name mail, so I suspect it encrypts an email address:
...
0
votes
0answers
34 views
Reverse engineering encrypted AllJoyn packets
I have a "smart" bulb here that is configured via its vendor application but I would very much prefer if I could use it with my openHAB instance.
Using Wireshark, I was able to figure out ...
4
votes
1answer
185 views
Find Decryption algorithm of an encryption algorithm
I recently work on an algorithm that encrypt some data with 8 byte length.
I worked hard and I successful to get this algorithm, but I need decryption of this algorithm.
How I can invert it?
I guess ...
-3
votes
2answers
228 views
0
votes
1answer
381 views
decryption of firmware file from modem/router Speedport Plus (Sercomm not ZTE)? [closed]
Although I have no hope really I will leave this here in case someone has the ability and time to help.
This is from a modem/router widely used in countries like Germany, Greece and others from ...
1
vote
0answers
136 views
ZTE AES-256-CBC Encrypted backup config file
i tried router pass view tool on (a closed source one) it's able to decrypt the older version of it V3.1. tested on two routers of it and it gave me this output
Encrypted Data Start Position: 227
...
1
vote
0answers
56 views
How does one start with reversing router config encryption?
There is not enough info on the web from what I have seen.
Most write ups/guides/blog-posts are like this:
They provide only the decrypt/encrypt script-tool with how to run it and nothing else
They ...
3
votes
1answer
141 views
Decoding algorithm with checksum
I'm a newbie, so I'm asking for your help.
I have to decode dumped data from an appliance because I wanted to try understand the data.
The data are in this format and some information are known:
7E 00 ...
0
votes
1answer
38 views
how can I disassemble a Nand binary file from an iPod nano?
Ive got a Nand image in bin format not encrypted armv4, cpu 80 MHz ARM 7TDMI processor it is a iPod nano 1st generation I want to see what calls the Nand makes because it is married to the motherboard....
0
votes
0answers
778 views
Need Help with decryption backup config.bin file “ZTE ZXHN H267N v1.1”
hi i'm trying to decrypt config.bin file from new router I got from my company, I tried a tool found on github "https://github.com/mkst/zte-config-utility" I got this ERROR:
python3 examples/...
2
votes
1answer
95 views
Decoding Hex Data
I'm trying to decode .PLW data acquired by a temperature logger (PicoLog PT-104).
If you convert the .PLW file to a .txt file through the official software you get something like this:
where each row ...
1
vote
1answer
414 views
Need help with ZTE router config.bin file decryption and encryption
bin file extracted from a ZXHN H168N V3.1. RouterPassView is able to decrypt the file successfully but the tool can't re-encrypt the file, it gave me some info about the method used to decrypt here ...
0
votes
1answer
82 views
Seemingly compressed file with some readable text
I've been trying to modify a data file within an app which has random lines of readable text but is mostly incomprehensible, it has no file extension.
I think its compressed because I was able to find ...
0
votes
0answers
24 views
Generating stats_data field for Badoo browser app login
Badoo (a Tinder-like service) desktop browser app sends the following message to the server with a sign-in request:
"server_login_by_password":{
"user":"xxx",
&...
0
votes
0answers
54 views
Forcing embedded libcurl to disable SSL verification
I am trying to decrypt HTTPs communications in a binary that I know has been statically linked with cURL. How can I force curl to not verify SSL certificates for fiddler to intercept? I am using the ...
1
vote
2answers
504 views
Turning an unknown audio data stream into wav or similar format
I am trying to get the commentary (casters voice) from a dota2 game file. I've managed to parse the game file and select what I believe is the voice data. This is in a weird format (CSVCMsg_VoiceData) ...
0
votes
0answers
72 views
Reverse engineering a “Crypto++/CryptoPP” Windows Service using Ghidra
I'm new the reversing scene (and this site!). I recently got interested in seeing how Windows Services tick, and discovered a weird encryption scheme. The binary isn't obfuscated at all (at least, it ...
2
votes
1answer
309 views
How to extract information from a binary file knowing the target info
I have some measured data comes from a various types of sensors. The sensors are connected to a data-logger in order to store measurement data. After measurement, the data transported and stored in a ...
1
vote
2answers
290 views
Decrypt application protocol packet
I have several applications that interact with the network, but the data is encrypted. I set breakpoints on send ws2_32.dll and found the correct buffer in which the encrypted data was located (then I ...
0
votes
0answers
53 views
Where are private keys for Google Play stored on an android device?
I am running an application in BlueStacks that was installed with Google Play and am trying to look at network packets which are encrypted using RSA over TLS. I can see the client key exchange packet ...
0
votes
0answers
102 views
Key Algorithm Reverse
I am trying to reverse a Seed/Key algorithm. i have some sample and knowledge about it, for example i know this algorithm work with only "xor" and "shift" operations.
some sample shown in below:
...
1
vote
1answer
136 views
Reversing an encoded key with a given cipher - figuring out the reverse algorithm
So I have an ancient application for a company that has since gone bust and I thought I'd look at how it works; it provides a key, and requires a key given to it. Both these keys are encoded in a ...
5
votes
1answer
692 views
Stuck on XOR decryption of firmware
TL;DR
I have an encrypted image and the cleartext version, and I'm almost certain it's an XOR cipher, but I can't figure out how to decrypt it. I have a few clues listed below.
Ciphertext excerpt (...
0
votes
1answer
219 views
Help with reversing decryption in assembly
I've used x64dbg to work out decryption in a particular program. I've found where it changes the encrypted material into readable text but can't work out the best way to use this information to ...
0
votes
1answer
207 views
How to decrypt a file who encryption and key is unknown? [closed]
Here is the file that I am trying to findout a way to decrypt.
settings.ini
This file is from the settings of the MetaTrader 5. The same is the name of the application.
Kindly suggest a better way so ...
0
votes
0answers
108 views
Reverse ASCII checksum algorithm
I am looking to reverse engineer what appears to be a 24-bit ASCII checksum. I tried the standard CRC 16 and 32-bit checksums and they don't work. Any pointers would be appreciated. Here is some ...
0
votes
1answer
446 views
How to decrypt the password using radare2 or gdb?
.--------------------------------------------------.
| [0x804851b] |
...
2
votes
1answer
183 views
Recognize a decryption algorithm
I'm trying to reverse a malware that builds its IAT at runtime. Due to my inexperience, I'm having trouble to understand this function that accepts into EAX a dword (maybe some sort of hash) and into ...
1
vote
0answers
518 views
Decrypting the Config file of a Huawei router “HG630 V2”
followed that post from Wordpress
https://hg658c.wordpress.com/2017/12/04/decrypting-configuration-files-from-other-huawei-home-gateway-routers/
Extracted the 4 Hex strings needed. But, looks ...
2
votes
1answer
79 views
Partially correctly decoded strings from pkware zip with known plaintext
I have a password-protected zip file, where the paths and filenames of each file are encrypted using PKWARE encryption.
The password is known and correct, and so is the encryption algorithm.
I also ...
6
votes
1answer
402 views
How does IPA decryption works?
All IPAs being downloaded from AppStore gets encrypted on servers as part of FairPlay DRM. But decryption is accomplished on local device. As far as I know there is some hardware module which contains ...
0
votes
1answer
1k views
decrypt config.bin file from Huawei B5328 router i have source files
Hello i need somehelp in decrypting the file config.bin generated by the page backup_setting.html from huawei B5328 router , i have access to all files in the router even the www files hosted on the ...
0
votes
1answer
1k views
Decrypting Lua Files from game
I'm truing to decrypt LUA scrpits from cocos2dx game (for wiki).
Links to files of game:
libhellolua.so (cocos2dx external library)
example encrypted LUA-scripts (*.abc files)
I was reading a ...
2
votes
1answer
620 views
how can i Encrypt a decrypted zte zxhn h108n V2.5 config file?
i have decrypted the config file using a program i found online ( maybe made by python to exe )
so to decrypt using it you type is command into CMD
decode_zte_config.exe config.bin config.bin.xml ...
0
votes
0answers
274 views
find a video file in memory dump of a process
I have a player that plays encrypted video files and works like this:
I open an encrypted video file with it
it decrypts the video file and writes it to its memory
and plays the file from the memory ...
-1
votes
1answer
505 views
Determining the hash algorithm used [closed]
I have some test data:
Test 1
Text: pass1234
Salt: 33b9d87b83c097ce3ea6e6f84a298f839aafc6d7aa23d909a43ac94bdee35ddf
Hash: 61477724c136fb285918114792685a4d
Test 2
Text: test1234
Salt: ...
1
vote
1answer
82 views
Reverse Engineering Temperatures (RS485 Bus)
I have the following hex byte data. Can someone help me reverse engineer the temperatures calculation?
ID
||
81 00 8c 00
82 00 aa 00
83 00 04 01
84 00 ff 00
85 00 21 04
The first byte is the id!...
