Questions tagged [encodings]
A mapping of a given code to values or semantics. Guessing the meaning of an encoding requires a lot of trials but some encoding are standard and can be guessed quite easily.
93
questions
2
votes
0
answers
48
views
Android game reverse http request body
I'm trying to reverse request that are made to an android game to learn more about how it works.
I was able to find endpoints requests that are made with frida and mitmproxy but now I'm stuck because ...
2
votes
1
answer
44
views
GNU strings with --encoding=S
I have two binaries. Both contain the string "precondition failed" (without the quotes).
The corresponding byte sequence 70 72 65 63 6C 65 64 00 is the same for both binaries. However, the ...
- 1,508
0
votes
0
answers
58
views
Decode encoded XHR/Ajax response payload
I'm trying to access a site using it's API with Insomnia client, but some XHR responses are encoded, it seems. I don't know the exact algorithm that's being used (but it's not base64, I tried decoding)...
3
votes
0
answers
386
views
Reverse engineering and exactly re-creating a QR code
The Casio FX-991EX calculator has a QR code feature for accessing the current equation from another device. It supports version 3 QR codes for some menus and version 11 for most menus.
For example, ...
- 31
3
votes
1
answer
166
views
Simplifying and reversing an encryption/decryption algorithm in ASM X86 / Python
I'm trying to reverse a decoding function in order to produce the function for encoding (for the curious this is a save game for a legacy adventure game which use codes for saving).
So far I have ...
- 31
0
votes
0
answers
53
views
Invalid "Variation" of a base64 encoding
I am starring at the following which looks like base64 but not quite:
t=base64.b64decode('gAKrEgADAAFwEgACAAFwEgACAAhmYWlybmVzcxIACQAGcmVzdWx0B0ANMzMzMzMzAAZudW1iZXIHQHdO+...
1
vote
0
answers
17
views
Encoding scheme identification of the following communication message
I'm trying to RE an app for educational purposes.
So here is the behavior of the app.
When the app starts, it communicate with a server in plain tcp and based on those tcp messages, it either work as ...
- 11
0
votes
0
answers
77
views
Reverse engineering what seems to be a checksum used for RS232 packets
I will try to be as concise as possible: the issue is, I'm trying to develop a custom application for a dielectric tester. I have access to the original program, which was made some 20 years ago or ...
- 1
0
votes
0
answers
144
views
Encrypted properties files in asset folder of android application
I'm trying to reverse engineer an Android application. The goal is to obtain a secret from the apk. After decompiling the application, I found some interesting files in the assets directory. The files ...
1
vote
1
answer
257
views
2-byte checksum
I cannot figure out what checksum is used for the following communication.
As I understand, 450D is the “stop” part. It doesn't change no matter what. And the two bytes before 450D are the “checksum”.
...
- 31
2
votes
1
answer
139
views
433MHz Protocol: Unknown Three-Symbol-Encoding within the OOK data
Reverse engineering the protocol of a remote-controlled wall socket (433MHz On-Off-Keying) revealed an embedded pattern which apparently uses three symbols (besides 0s).
Symbol A = 000001
Symbol B = ...
- 123
1
vote
1
answer
195
views
Decoding API response of unknown encoding?
I'm using Proxyman to inspect the api requests of an app I use. Most of the data is returned in plain JSON blobs but there is one response which is returning data encoded/encrypted. How can I go ...
- 11
0
votes
0
answers
168
views
QR-Codes of Temial-Teamachine
I have a tea-machine that reads QR-Codes and brews the tea accordingly. I want to generate my own codes.
I have the following codes (and more):
Copy/Paste of the C-Column
L7UMQRQCQAZBD
OYXPVAANAB4ZE
...
- 101
0
votes
1
answer
77
views
Unknown binary format of a b64-encoded list of doubles
While reverse engineering a database middleware. This is presumably encoding a list of double or float values with Base64 encoding and then compressing it.
Via zlib.decompress() I was able to ...
0
votes
0
answers
125
views
Decoding Game data
I am very new to this whole business so please bear with me.
Goal: Am trying to decode data from a post request from game to server starting with Q0.
Most of the game data is encoded in Base64, but ...
- 1
0
votes
1
answer
207
views
Can you get the error-correction level of a QR code?
You can get the version number of a QR (1-40) by checking the dimensions of the QR, but is there a way to get the error-correction level that was used to generate the QR code?
Trying to reverse ...
- 101
1
vote
0
answers
179
views
How to retrieve the encryption key from a dll file?
I have a dll file that makes an http post request to a webserver , request looks something like this :
UmdUsFrEB3wGMuuAz1Znywuedx6+...
- 11
2
votes
1
answer
59
views
The Logic Of Incremental Data on Serial Communication Encoding
These are the serial communication reverse values.
I am trying to understand the logic behind this.
I am pretty sure that 2 bytes represent 1 byte(high byte and low byte), values are correct.
I tried ...
1
vote
1
answer
124
views
What encoding is this?
This is a picture of the encoded code. I'm just wondering what is the encoding that it is using.
- 11
1
vote
1
answer
1k
views
How to find encrypted strings in an executable?
I am trying to reverse engineer an executable.
I am using Process explorer to dump all strings present in the exe image, and from the process's RAM when it is running.
The two dumps return a ...
- 111
-2
votes
2
answers
1k
views
1
vote
2
answers
1k
views
How to convert hexadecimal values to 16-bit Unicode in IDA Pro 7.5?
The context:
For a student project which goal is to make us learn reverse engineering and how to use IDA Pro, we have to reverse engineer the APT28 hospitality malware (as described in this blog post: ...
- 111
0
votes
1
answer
57
views
Encoding of 64-bit double
I'm in the process of reverse engineering a USB driver, and I'm having problems finding a way to decode the binary representation of double values. The values don't seem to be encoded in IEEE-754 ...
- 3
0
votes
0
answers
817
views
Decoding messages sent/received by Python websocket client
I am using the websocket module for my client in python3, and I am trying to troubleshoot some errors I am getting that lead to the client disconnecting after seemingly random intervals.
When I ...
3
votes
3
answers
1k
views
Reverse engineering a partially known binary format
I have files with binary data, the format description of them is very vague and incomplete. E.g., it states that records start with header byte, like (hex) FA, followed by datetime (accurate down to ...
- 43
2
votes
0
answers
292
views
Decode bitmaps from Director .dxr files
I'm trying to extract bitmaps from an old Macromedia Director protected .dxr file. I was able to find some information about the file structure from here (it turns out to be a XFIR container, the ...
0
votes
0
answers
70
views
Looking for encoding of SVG data
I have some SVG images stored in a database; but I am not able to find out which encoding is used.
Unfortunately, I don't have the exact SVG plain text available. The given examples "probably&...
0
votes
1
answer
75
views
Password evaluated from the sum of ASCII letters
After analyzing the code, I have been able to understand and recreate the algorithm used to check if the password the binary takes is correct, but don't know how to solve it (or at least can't think ...
- 3
3
votes
2
answers
10k
views
Trying to decode the Ontario Driver's License #
**The Ontario Driver's License follows the below format:**
LXxxx-FFFMY-YMMDD
Where:
L is the first letter of your last name
X is a numeric encoding of the last name (See Chart 1 below)
xxx is a ...
- 31
0
votes
0
answers
88
views
What kind of integer obfuscation is this?
I'm looking at the network traffic of a game submitting the user's score to the high-score server. The score value seems to be obfuscated in some way.
The score is a non-negative integer, and not more ...
- 1
1
vote
0
answers
122
views
What is the URL format for Google Trends?
When you search for the search term Tesla or AOL you get the following URLs:
https://trends.google.com/trends/explore?geo=US&q=Tesla
But, for the automobile maker, you get:
https://trends.google....
- 111
1
vote
0
answers
179
views
Determining the encoding of an unknown image format [closed]
I'm trying to reverse engineer a REST API and there is an endpoint that delivers images. Some of them are jpegs but other ones look like they're base64 encoded, except they don't appear to be, as they ...
- 11
2
votes
1
answer
108
views
The questions about li instruction
When reversing a MIPS binary using IDA Pro, I have 2 questions.
The source code is as follows.
int main(int argc, char* argv[])
{
int m = 1;
int n = 5;
printf("sum = %d\n", m+n);
}
....
- 391
1
vote
1
answer
133
views
Which JSON object compact binary serialization is this?
I am trying to reverse engineer an unknown JSON binary serialization format found in a request-response pair between a mobile app, and a server.
Does anyone recognize this? I've attached the first ...
- 11
1
vote
1
answer
176
views
Encoding method of float
I'm reversing this game and got stuck. To make it simple, You have some amount of coins in the game (float or double) and you can spend it on some things. I started sniffing network traffic and ...
- 183
0
votes
2
answers
449
views
How to wire up a rotary encoder with a "0v" connection?
I have a servo motor with rotary encoder salvaged from an old scanner. I'm trying to figure out how to re-use it in a DIY CNC machine.
By reading through the engineering manual from the original ...
- 13
2
votes
2
answers
294
views
How to identify the encoding performed on this string
I have an old application that stores the username and password in plaintext but encoded by an unknown encoding algorithm to me, it seams like base64, but I think it's not,
It seams that any word ...
- 23
0
votes
0
answers
216
views
Reverse Engineering a Vehicle Identification Number (VIN) encoding
Not sure if this is the right place so please point me to the right place if needed.
I have an input of a VIN (Vehicle Identification Number) number with 17 characters, each character is either an ...
- 101
1
vote
0
answers
660
views
Is there any way to change the encoding of an exe file?
I have an exe file and it will browse the xml, or txt files to display this exe file.
And the characters only display the exact language of that country when I switch the language of the computer to ...
- 43
3
votes
2
answers
842
views
Translating a Korean Exclusive PS2 game ~ hangeul encoding?
I got my hands on a copy of Mystic Nights, a survival horror game for the PS2 realeased exclusively in Korea. The game's text is all in Hangeul (Korean writting system). I extracted the ISO and ...
- 43
3
votes
1
answer
1k
views
String Encoding and Decoding Method
so I came across the following string encoding method in python.
def encode(the_string):
encoded_string = ''
rotations = ord(the_string[-1]) + 5
for i in range(0, len(the_string)):
...
- 31
13
votes
1
answer
4k
views
How should I approach reverse engineering this text encoding?
So I'm trying to hack the translation from the PS4 version of a game into the Vita version. The script files were conveniently uncompressed, and I was able to drop them in and have it working without ...
- 133
3
votes
1
answer
125
views
Is there a standard character encoding that is ASCII minus control characters?
I came across some unusual strings in some embedded SH2A code I'm analyzing....
11 53 54 00 53 55 4E 44 41 59 00 4F 46 00 2E 4F 56 45 4D 42 45 52
. S T . S U N D A Y . O F . . O V E ...
- 193
2
votes
1
answer
260
views
Find out string encoding/shift of proprietary binary file format
I'm trying to reverse-engineer a proprietary file format to be able to extract certain strings from files in this format. I have the application, that writes the files, at hand.
By trial-and-error I ...
- 23
9
votes
1
answer
1k
views
Need help to reverse engineer a dog collar transmitter
I have a Petrainer PET998DRU shock collar (similar to this one) that got partially chewed up by the dog it is supposed to train. I salvaged it to the point where I have the following buttons:
Mode (...
- 93
2
votes
1
answer
2k
views
How to identify known encryption algorithm?
I reverse an .exe file with IDA.
I see a function that appears to be encrypting something by generating some random numbers.
It there any tool to identify if it is a known encryption algorithm?
- 513
1
vote
1
answer
1k
views
Reading from text file and printing it in IDA Pro
I have a text.txt file and I want to read it and print its content in the Output Window of IDA Pro (Free version).
I wrote an .idc script as follows:
#include <idc.idc>
static main() {
...
- 123
2
votes
1
answer
141
views
How can I generate the recovery password on a legacy system (Original company is out of business) running on my local machine?
I'm attempting to use a legacy systems recovery feature that typically required calling/faxing a company that is no longer around.
Basically, the system was designed to go into a recovery mode and ...
- 51
1
vote
0
answers
203
views
CD-ROM CIRC encoder
I'm studying the principles of data storage CD-ROM
At the moment I understand structures of sectors, F1 frames, F3 frames, subcode channels.
But I just can not understand the principle of forming F2 ...
- 11
2
votes
1
answer
276
views
Help with a packed date format
I've came across what appears to be a date format from a legacy database application.
I don't have access to the code that generated it, just have examples corresponding to certain Holiday messages.
...
- 21
Hot Network Questions
- How much suffering is needed for an overall happy life?
- How can I signal to others on my flight that I want to make friends and chat?
- In 'The Graveyard Book' by Neil Gaiman, why is one 'Jack' named for a historical person
- Are you supposed to paint the spoke nipples?
- Why are nuclear fusion reactors difficult?
- Is Earth really flattened at the poles because of centrifugal force?
- What evidence has the ICC relied on in ordering the arrest of the President of Russia?
- How can I properly plot this region, with some filling too?
- Did Russia communicate President Vladimir Putin's planned Mariupol visit to Ukraine for deconfliction purposes?
- What game elements use class DC only?
- Looking for terminology for when a hygroscopic chemical gets moisture in it
- ChatGPT is aware of today's date
- Cryptic-clue explanation: What does “One in 10?” mean in the definition of ‘Ladle’
- What’s the difference between errands and shopping?
- Issues to avoid when writing military sci-fi?
- How to draw a circle with a background image
- Does the NEC allow a sub panel to be powered by a generator and an automatic transfer switch?
- Why do we need "canonical" well orders?
- Does every code have transversal Pauli group?
- Clock hands at right angle
- How to label features avoiding duplicate attributes and conditioning by two fields
- Is "samuraily" correct?
- Non-dairy Substitute for meat to protect from tomato acid
- After upgrade from Craft 3 to 4: frontend error: Array to string conversion