Questions tagged [decryption]

Process of decoding an encrypted message with an authorized access (knowledge of the protocol, the encryption algorithm and the key).

Filter by
Sorted by
Tagged with
0
votes
1answer
96 views

How to decrypt a file who encryption and key is unknown? [closed]

Here is the file that I am trying to findout a way to decrypt. settings.ini This file is from the settings of the MetaTrader 5. The same is the name of the application. Kindly suggest a better way so ...
0
votes
0answers
62 views

Reverse ASCII checksum algorithm

I am looking to reverse engineer what appears to be a 24-bit ASCII checksum. I tried the standard CRC 16 and 32-bit checksums and they don't work. Any pointers would be appreciated. Here is some ...
0
votes
1answer
142 views

How to decrypt the password using radare2 or gdb?

.--------------------------------------------------. | [0x804851b] | ...
0
votes
0answers
77 views

What kind of compression/encryption could this be?

I am dealing with a file that seems to use some kind of proprietary compression/encryption I can't figure out. I have a lot of sample files as well as different versions of the same file, so I have ...
2
votes
1answer
163 views

Recognize a decryption algorithm

I'm trying to reverse a malware that builds its IAT at runtime. Due to my inexperience, I'm having trouble to understand this function that accepts into EAX a dword (maybe some sort of hash) and into ...
1
vote
0answers
95 views

Decrypting the Config file of a Huawei router “HG630 V2”

followed that post from Wordpress https://hg658c.wordpress.com/2017/12/04/decrypting-configuration-files-from-other-huawei-home-gateway-routers/ Extracted the 4 Hex strings needed. But, looks ...
2
votes
1answer
35 views

Partially correctly decoded strings from pkware zip with known plaintext

I have a password-protected zip file, where the paths and filenames of each file are encrypted using PKWARE encryption. The password is known and correct, and so is the encryption algorithm. I also ...
3
votes
1answer
127 views

How does IPA decryption works?

All IPAs being downloaded from AppStore gets encrypted on servers as part of FairPlay DRM. But decryption is accomplished on local device. As far as I know there is some hardware module which contains ...
0
votes
1answer
419 views

decrypt config.bin file from Huawei B5328 router i have source files

Hello i need somehelp in decrypting the file config.bin generated by the page backup_setting.html from huawei B5328 router , i have access to all files in the router even the www files hosted on the ...
0
votes
0answers
218 views

Decrypting Lua Files from game

I'm truing to decrypt LUA scrpits from cocos2dx game (for wiki). Links to files of game: libhellolua.so (cocos2dx external library) example encrypted LUA-scripts (*.abc files) I was reading a ...
0
votes
0answers
91 views

how can i Encrypt a decrypted zte zxhn h108n V2.5 config file?

i have decrypted the config file using a program i found online ( maybe made by python to exe ) so to decrypt using it you type is command into CMD decode_zte_config.exe config.bin config.bin.xml ...
0
votes
0answers
91 views

find a video file in memory dump of a process

I have a player that plays encrypted video files and works like this: I open an encrypted video file with it it decrypts the video file and writes it to its memory and plays the file from the memory ...
-1
votes
1answer
234 views

Determining the hash algorithm used [closed]

I have some test data: Test 1 Text: pass1234 Salt: 33b9d87b83c097ce3ea6e6f84a298f839aafc6d7aa23d909a43ac94bdee35ddf Hash: 61477724c136fb285918114792685a4d Test 2 Text: test1234 Salt: ...
1
vote
1answer
74 views

Reverse Engineering Temperatures (RS485 Bus)

I have the following hex byte data. Can someone help me reverse engineer the temperatures calculation? ID || 81 00 8c 00 82 00 aa 00 83 00 04 01 84 00 ff 00 85 00 21 04 The first byte is the id!...
-1
votes
1answer
176 views

Intercept zip decryption key or files from an application

If an application is reading from a password protected zip file, is there a way to intercept the key being sent to decrypt the zip file. Or, is there a way to dump the files being read themselves?
0
votes
0answers
62 views

How to guess the key of XOR encryption in java?

I am trying to find the key of XOR encrypted string in java. It is very much probable that the key is eight characters long. I have the encrypted string. I am not able to understand how to go ...
1
vote
1answer
144 views

picoCTF be-quick-or-be-dead-1 dcrypt simulation with python

This is be-quick-or-be-dead-1 in picoCTF challenge (Download) in this file we can see decrypt_flag() function, this function return this flag: ./be-quick-or-be-dead-1 Calculating key... Done ...
1
vote
0answers
78 views

Sniffing TCP packets using Wireshark

I am trying to reverse engineer a decoder. The decoder contains a web server that makes sending/receiving information through the Internet possible. To do so I need to sniff the packets that the ...
0
votes
1answer
489 views

Ghidra pseudocode to Java/C

I have this piece of code generated from Ghidra void __cdecl FUNCTION(uint *key,uint *text) { undefined uVar1; ushort uVar2; uint *puVar3; uint *puVar4; uint *puVar5; int iVar6; uint ...
0
votes
1answer
122 views

Difficulty decrypting LCG string

I'm trying to analyze some malware. To get the hang of it I am following the decoding process on this website: Here is a description of the string encoding/decoding process: String encoding ...
0
votes
1answer
105 views

Is it possible to recover the key to a decrypted file?

Is it possible to recover the key to a decrypted file if you have the initialization vector and it uses RijndaelManaged? If so how? The file I want to recover the key from is a xml that looks like ...
-2
votes
1answer
65 views

Can any one de-obfuscator this php code [closed]

my developer has changed all his contact info and i am unable to contact him and i want to move my site to another server but because of this obfuscator code in my php script i am unable to move my ...
1
vote
0answers
85 views

Decrypt ibt.sfi linux firmware(Intel Wireless 8265 Linux Bluetooth)

Why I want to decrypt: Intel 8265 Bluetooth is likely a RAMUSB device, which needs system to update firmware. I try to transplant this linux firmware to macOS. Problems I met: The macOS BT firmware ...
3
votes
1answer
242 views

Reverse engineering file format - ImageLink

I have some technical documentation which is supplied in the form of a generic Windows viewer and a database. The database contains different "books", which are represented by a bunch files: book.bbi ...
1
vote
0answers
56 views

1990s non windows software keys [closed]

Hi I am a Service Engineer on some very old ASML stppers that run a system called PAS (Philips automated steppers), these steppers are obsoleted by the manufacturer and no longer supported by anyone. ...
1
vote
1answer
202 views

How to identify which iOS kernelcache is installed?

I've an iPhone7 running iOS11.3 (15E216). The ipsw for this build version contains two separate kernelcache files named kernelcache.release.iphone9 and kernelcache.release.iphone10. Neither file is an ...
0
votes
2answers
357 views

RSA Decryption? [closed]

I am playing a game in my university where you have different puzzles based on cryptography and now in a puzzle named 'rsa', we have 2 files: 'key', 'secret'. The task for this is to decrypt the ...
1
vote
0answers
281 views

Reverse crypto algorythm, based on AES

Hello! I'm working on reversing one library (shared object) written for ARM architecture. It's obfuscated or packed with something pretty strong what makes debugging much harder and almost impossible ...
1
vote
0answers
145 views

Reverse engineering key fob checksum

I am trying to reverse engineer the key fob of my Ford Fiesta 2014 but I am stuck at finding the used checksum algorithm. I've successfully demodulates the key fob signal (using on-off keying + ...
3
votes
0answers
275 views

EEPROM data bytes verification

I'm investigating a tool. I have an section of an eeprom memory dump that this tool uses, shown in the figure below. By my inquiries, the two bytes highlighted in red are based on the bytes ...
0
votes
1answer
109 views

how to find private Key and passphrase stored inside a program?

There are some files (drivers) that are encrypted, and these files are working in a program that is installed in my computer. The program using these files needs to decrypt them. I am sure that the ...
3
votes
1answer
165 views

Help reverse decrypt function (decode -> encode)

I have this java function that decode 8bytes text string(encoded as int[]): public static int[] decode(int[] text, int[] key) { int j = 0x3c; //value 60 in decimal int i = 0x33; //value 51 in ...
3
votes
0answers
153 views

Guessing checksum 8 bit ASCII algorithm

I am trying to reverse engineer an 8-bit checksum algorithm of a Chinese machine with RS485 communication and ASCII encoding. I tried with all the algorithm I could find, but it seems that data ...
-2
votes
1answer
433 views

How do i find the decryption key for a encrypted text file [closed]

So context i have a game and a encrypted save file. My thoughts were how to find the decryption key in reverse engineering my game .I watched tuts but i think this topic isnt much detailed so i need ...
1
vote
0answers
81 views

File Decryption Problems

over the past year, I provided an English patch to a community of thousands of players of a game I love and which is not available in English (just Chinese and Korean). Sadly, besides me, other ...
-3
votes
1answer
6k views

How do I decode this JavaScript code? [duplicate]

Each file starts with the same function: (function(_0x128f83, _0x1ae5b9) { var _0x1b5471 = function(_0x339be5) { while (--_0x339be5) { _0x128f83['push'](_0x128f83['shift']()); ...
1
vote
1answer
218 views

Reverse Engineering Checksum (RS485 Bus)

I have the following data. Can someone help me reverse engineer the checksum calculation? Data Checksum 01 02 80 05 00 00 00 00 00 7d 8c 01 03 80 05 00 00 00 00 00 ...
-1
votes
4answers
502 views

Decrypting authorization PHP script

Description I asked for help on freelancing, for the finalization of the project in PHP. All this worked well until I needed to edit the authorization mechanism. Having opened the file, I found that ...
0
votes
1answer
127 views

Reverse engineering checksum - LG 485 a/c protocol

I'm trying to reverse engineer serial protocol, everything seems straightforward, except checksum byte. Seems to be some easy algorithm - when sum of all bytes is the same, checksum/crc stays the same....
1
vote
1answer
3k views

Decrypting SQLite Database with key

I have a SQLite database that contains a dictionary (just words and definitions) that can be opened with free but proprietary software. To use with the software, it requires an 'unlock' key, which I ...
1
vote
2answers
96 views

How is the IV generated from a timestamp based on this function?

Background: I am currently looking to make some diagnostic software interoperable with other software, but all communication that occurs in this software is encrypted with AES-128-CBC. A sample ...
1
vote
4answers
299 views

Decrypting SSL traffic from malware

I am a cybersecurity student. What is the best approach to decrypting traffic from a malware? I am using x32dbg (I'm new to assembly) and have trouble finding the private key. Are there any other ...
1
vote
1answer
194 views

Reverse engineer CAN-Bus checksum

I am trying to figure out a checksum algorithm. D1 to D6 is data, D7 is a counter obviously and byte 8 must be a CRC, but I didnt have any idea on how to build it. Tried to check if it fits any ...
1
vote
1answer
1k views

Need some pointers to decode/decrypt/unobfuscate JSON files (updated with related scripts)

I am very new to this whole business so please bear with me. Goal My goal is to read JSON data from a game. Since I do not know what kind of information will/will not be useful, here are some of ...
2
votes
2answers
534 views

IDA: call a function with different arguments

I'm reversing some software and found the function which decrypts some stuff: As you can see it has the password parameter for it which gets decrypted in this function. Function disassembly: ...
-2
votes
1answer
413 views

Unknown game file decompress [closed]

So I got this file with an unknown extension. The file is an event flow code Ok, so I analysed the file (with HxD) and it seems to be compressed in some way because you can read some plain text there....
2
votes
0answers
1k views

How to bypass certificate pinning on OS X and Windows [closed]

When reverse engineering a thick application it can be very useful to be able to see the network traffic it generates. Because of this, many applications use HTTPS to communicate with their servers. ...
1
vote
0answers
126 views

Reverse engineer checksum in AC Sharp IR packet

i use microcontroller and received ir frame of air conditioner SHARP. This Ir frame have 13 byte data (in decimal number, not hex) like below: 85 90 243 8 131 140 66 0 176 1 32 7 133 85 90 243 8 142 ...
3
votes
2answers
376 views

how to find the encryption algorithm?

I have an arm complied so file and find the decrypt function which pseudocode generated by IDA Pro is like this: char __cdecl EncodeUtil::getDecryptStr() { int *v0; // r0 int *v1; // r7 ...
1
vote
0answers
121 views

Difficulty decrypting nested PKCS #7 / AES router configuration file

I am trying to decrypt a router configuration backup file that appears to be a combination of a 128-byte header, a PKCS #7 encrypted file, and another OpenSSL salted format encrypted file. I think ...