Questions tagged [decryption]
Process of decoding an encrypted message with an authorized access (knowledge of the protocol, the encryption algorithm and the key).
226
questions
1
vote
1
answer
88
views
Reverse Engineering Temperatures (RS485 Bus)
I have the following hex byte data. Can someone help me reverse engineer the temperatures calculation?
ID
||
81 00 8c 00
82 00 aa 00
83 00 04 01
84 00 ff 00
85 00 21 04
The first byte is the id!...
0
votes
1
answer
762
views
Intercept zip decryption key or files from an application
If an application is reading from a password protected zip file, is there a way to intercept the key being sent to decrypt the zip file. Or, is there a way to dump the files being read themselves?
1
vote
1
answer
255
views
picoCTF be-quick-or-be-dead-1 dcrypt simulation with python
This is be-quick-or-be-dead-1 in picoCTF challenge (Download)
in this file we can see decrypt_flag() function, this function return this flag:
./be-quick-or-be-dead-1
Calculating key...
Done ...
1
vote
1
answer
779
views
Sniffing TCP packets using Wireshark
I am trying to reverse engineer a decoder. The decoder contains a web server that makes sending/receiving information through the Internet possible.
To do so I need to sniff the packets that the ...
0
votes
1
answer
4k
views
Ghidra pseudocode to Java/C
I have this piece of code generated from Ghidra
void __cdecl FUNCTION(uint *key,uint *text)
{
undefined uVar1;
ushort uVar2;
uint *puVar3;
uint *puVar4;
uint *puVar5;
int iVar6;
uint ...
0
votes
1
answer
768
views
Difficulty decrypting LCG string
I'm trying to analyze some malware. To get the hang of it I am following the decoding process on this website:
Here is a description of the string encoding/decoding process:
String encoding ...
0
votes
1
answer
121
views
Is it possible to recover the key to a decrypted file?
Is it possible to recover the key to a decrypted file if you have the initialization vector and it uses RijndaelManaged? If so how?
The file I want to recover the key from is a xml that looks like ...
-2
votes
1
answer
107
views
Can any one de-obfuscator this php code [closed]
my developer has changed all his contact info and i am unable to contact him
and i want to move my site to another server but because of this obfuscator code in my php script i am unable to move my ...
1
vote
0
answers
265
views
Decrypt ibt.sfi linux firmware(Intel Wireless 8265 Linux Bluetooth)
Why I want to decrypt:
Intel 8265 Bluetooth is likely a RAMUSB device, which needs system to update firmware. I try to transplant this linux firmware to macOS.
Problems I met:
The macOS BT firmware ...
4
votes
2
answers
917
views
Reverse engineering file format - ImageLink
I have some technical documentation which is supplied in the form of a generic Windows viewer and a database. The database contains different "books", which are represented by a bunch files:
book.bbi ...
1
vote
0
answers
61
views
1990s non windows software keys [closed]
Hi I am a Service Engineer on some very old ASML stppers that run a system called PAS (Philips automated steppers), these steppers are obsoleted by the manufacturer and no longer supported by anyone. ...
1
vote
1
answer
830
views
How to identify which iOS kernelcache is installed?
I've an iPhone7 running iOS11.3 (15E216). The ipsw for this build version contains two separate kernelcache files named kernelcache.release.iphone9 and kernelcache.release.iphone10. Neither file is an ...
0
votes
2
answers
2k
views
RSA Decryption? [closed]
I am playing a game in my university where you have different puzzles based on cryptography and now in a puzzle named 'rsa', we have 2 files: 'key', 'secret'.
The task for this is to decrypt the ...
1
vote
0
answers
649
views
Reverse crypto algorythm, based on AES
Hello!
I'm working on reversing one library (shared object) written for ARM architecture. It's obfuscated or packed with something pretty strong what makes debugging much harder and almost impossible ...
1
vote
0
answers
479
views
Reverse engineering key fob checksum
I am trying to reverse engineer the key fob of my Ford Fiesta 2014 but I am stuck at finding the used checksum algorithm. I've successfully demodulates the key fob signal (using on-off keying + ...
3
votes
0
answers
728
views
EEPROM data bytes verification
I'm investigating a tool. I have an section of an eeprom memory dump that this tool uses, shown in the figure below. By my inquiries, the two bytes highlighted in red are based on the bytes ...
0
votes
1
answer
853
views
how to find private Key and passphrase stored inside a program?
There are some files (drivers) that are encrypted, and these files are working in a program that is installed in my computer. The program using these files needs to decrypt them. I am sure that the ...
3
votes
1
answer
350
views
Help reverse decrypt function (decode -> encode)
I have this java function that decode 8bytes text string(encoded as int[]):
public static int[] decode(int[] text, int[] key) {
int j = 0x3c; //value 60 in decimal
int i = 0x33; //value 51 in ...
3
votes
0
answers
247
views
Guessing checksum 8 bit ASCII algorithm
I am trying to reverse engineer an 8-bit checksum algorithm of a Chinese machine with RS485 communication and ASCII encoding.
I tried with all the algorithm I could find, but it seems that data ...
-2
votes
1
answer
1k
views
How do i find the decryption key for a encrypted text file [closed]
So context i have a game and a encrypted save file. My thoughts were how to find the decryption key in reverse engineering my game .I watched tuts but i think this topic isnt much detailed so i need ...
1
vote
0
answers
114
views
File Decryption Problems
over the past year, I provided an English patch to a community of thousands of players of a game I love and which is not available in English (just Chinese and Korean).
Sadly, besides me, other ...
-2
votes
1
answer
19k
views
How do I decode this JavaScript code? [duplicate]
Each file starts with the same function:
(function(_0x128f83, _0x1ae5b9) {
var _0x1b5471 = function(_0x339be5) {
while (--_0x339be5) {
_0x128f83['push'](_0x128f83['shift']());
...
1
vote
1
answer
733
views
Reverse Engineering Checksum (RS485 Bus)
I have the following data. Can someone help me reverse engineer the checksum calculation?
Data Checksum
01 02 80 05 00 00 00 00 00 7d 8c
01 03 80 05 00 00 00 00 00 ...
-1
votes
4
answers
1k
views
Decrypting authorization PHP script
Description
I asked for help on freelancing, for the finalization of the project in PHP. All this worked well until I needed to edit the authorization mechanism. Having opened the file, I found that ...
0
votes
1
answer
302
views
Reverse engineering checksum - LG 485 a/c protocol
I'm trying to reverse engineer serial protocol, everything seems straightforward, except checksum byte. Seems to be some easy algorithm - when sum of all bytes is the same, checksum/crc stays the same....
2
votes
1
answer
5k
views
Decrypting SQLite Database with key
I have a SQLite database that contains a dictionary (just words and definitions) that can be opened with free but proprietary software. To use with the software, it requires an 'unlock' key, which I ...
1
vote
2
answers
160
views
How is the IV generated from a timestamp based on this function?
Background: I am currently looking to make some diagnostic software interoperable with other software, but all communication that occurs in this software is encrypted with AES-128-CBC. A sample ...
1
vote
4
answers
537
views
Decrypting SSL traffic from malware
I am a cybersecurity student. What is the best approach to decrypting traffic from a malware? I am using x32dbg (I'm new to assembly) and have trouble finding the private key. Are there any other ...
1
vote
1
answer
1k
views
Reverse engineer CAN-Bus checksum
I am trying to figure out a checksum algorithm.
D1 to D6 is data, D7 is a counter obviously and byte 8 must be a CRC, but I didnt have any idea on how to build it. Tried to check if it fits any ...
1
vote
1
answer
2k
views
Need some pointers to decode/decrypt/unobfuscate JSON files (updated with related scripts)
I am very new to this whole business so please bear with me.
Goal
My goal is to read JSON data from a game. Since I do not know what kind of information will/will not be useful, here are some of ...
2
votes
2
answers
2k
views
IDA: call a function with different arguments
I'm reversing some software and found the function which decrypts some stuff:
As you can see it has the password parameter for it which gets decrypted in this function.
Function disassembly:
...
-2
votes
1
answer
896
views
Unknown game file decompress [closed]
So I got this file with an unknown extension. The file is an event flow code
Ok, so I analysed the file (with HxD) and it seems to be compressed in some way because you can read some plain text there....
3
votes
0
answers
4k
views
How to bypass certificate pinning on OS X and Windows [closed]
When reverse engineering a thick application it can be very useful to be able to see the network traffic it generates.
Because of this, many applications use HTTPS to communicate with their servers. ...
1
vote
0
answers
196
views
Reverse engineer checksum in AC Sharp IR packet
i use microcontroller and received ir frame of air conditioner SHARP.
This Ir frame have 13 byte data (in decimal number, not hex) like below:
85 90 243 8 131 140 66 0 176 1 32 7 133
85 90 243 8 142 ...
3
votes
2
answers
930
views
how to find the encryption algorithm?
I have an arm complied so file and find the decrypt function which pseudocode generated by IDA Pro is like this:
char __cdecl EncodeUtil::getDecryptStr()
{
int *v0; // r0
int *v1; // r7
unsigned ...
1
vote
0
answers
232
views
Difficulty decrypting nested PKCS #7 / AES router configuration file
I am trying to decrypt a router configuration backup file that appears to be a combination of a 128-byte header, a PKCS #7 encrypted file, and another OpenSSL salted format encrypted file. I think ...
1
vote
0
answers
812
views
Need Help decrypting .luac files
I have been recently trying to decrypt .luac files inside an encrypted android app. I tried to follow some of the previous threads here but the following frida script didn't give any output.
...
2
votes
0
answers
363
views
Struggling with an archive file format using "encryption"
I am currently working on a file format used to pack (storage only, no compression) different file types together for transport. There is some sort of very simple "encryption" used and so far I have ...
1
vote
1
answer
52k
views
How to decompile an exe file? [duplicate]
I have been wondering, if every program is based on machine code, can we not decompile a program until it hits machine code and make it up to real programming languages?
How to decompile exe files ...
2
votes
1
answer
704
views
Animal Crossing: Pocket Camp .zdat File
Hello I am trying to obtain the music from the new game Animal Crossing: Pocket Camp. The music is contained in files like these:
https://download-cdn-ac-pocketcamp.akamaized.net/assets/...
2
votes
0
answers
1k
views
Obtaining the decryption keys for Super Mario Run (Android/iOS Game)
Super Mario Run is a il2cpp Unity game. Most of its assets are downloaded in-game through http requests. I particularly want the OGG files of the music. I can see the list of their names comes from ...
4
votes
2
answers
2k
views
Identify password generation algorithm
I'm a newbie who just started own way through reverse engineering so I apologize if my question is not appropriate.
Currently I'm going through different Crackme puzzles and now I'm stuck. I've spend ...
0
votes
2
answers
955
views
Checksum in CAN message
I'm trying to fake a CAN message, but I'm not able to understand how the 8-bit checksum is calculated. The checksum follows a pattern along with a 4-bit rolling counter. As long as the data of the ...
2
votes
0
answers
341
views
How to decrypt files given access to the decryption formula (bash) and passwords (Mach-O binary)
I have a decryption formula, the file it links to containing file passwords, and the encrypted files themselves, but I still don't understand how to reverse the process.
Question: Do I need any more ...
1
vote
2
answers
230
views
decrypting a microSD [closed]
a micro sd has been encrypted by a device, i have a backup of the encryption key (*.pk5), but the encryption device has been destroyed. any suggestions to decrypt the MicroSD? (except of buying a new ...
2
votes
1
answer
12k
views
How to decrypt encrypted script files for a game?
I want to mod Tony hawks underground 2.
I noticed that the files in a folder scripts (down the game's directory tree), are all encrypted.
Where do I start if I want to decrypt them?
5
votes
2
answers
2k
views
Unknown CRC calculation
I am seeking for a CRC calculation on EEPROM content. I try to add options to my car with BOSCH ECU. MCU in this ECU is Tricore TC1793 and EEPROM content seems to be divided into blocks of 128 bytes ...
0
votes
1
answer
3k
views
.dat file how to Encryption and decryption?
I am trying to decrypt or unpack a .dat file
I used a variety of methods, but do not work
When opened in notepad the text would look like these:
luRd+WbiiNGDNgs3XLX1fA==
vtAQlLx3N6HybkYYif3pAg==
...
1
vote
0
answers
151
views
Reverse engineering proprietary database file format .IDF
I have an old (I think) Windows software on a cd-rom, that is basically a database and its interface for show the data it contains.
I don't like the software view interface, want to make my own with ...
1
vote
2
answers
1k
views
Reverse engineer encrypted text file if I have both pre and post encryption files [closed]
As per the title, I have an encrypted text file that is generated by an Android app. I then have to send that off to the people whom made the app for them to decode it and send it back. Not ideal as ...