Questions tagged [encryption]
Process of encoding information such that decoding requires the knowledge of some secret (a key). This tag covers questions about obfuscated and encrypted programs, or tools, but higher level questions may get better answers on Cryptography Stack Exchange.
167
questions
0
votes
0answers
4 views
Best way to protect source code of exe that being loaded by Assembly.Load method
I am protecting an exe that being loaded by Assembly.Load... This makes everything difficult because most obfuscators causing it to not work properly or not load at all. I used confuserEx Ameteurz ...
2
votes
0answers
37 views
Is this executable packed, encrypted or what?
I have an executable that I'd like to patch, but I'm very new to RE. I some have assembly knowledge of x86 as first learned language last year, but not of this one: PowerPC (in this case is PPC32), ...
1
vote
0answers
22 views
ZTE AES-256-CBC Encrypted backup config file
i tried router pass view tool on (a closed source one) it's able to decrypt the older version of it V3.1. tested on two routers of it and it gave me this output
Encrypted Data Start Position: 227
...
1
vote
0answers
45 views
How does one start with reversing router config encryption?
There is not enough info on the web from what I have seen.
Most write ups/guides/blog-posts are like this:
They provide only the decrypt/encrypt script-tool with how to run it and nothing else
They ...
0
votes
0answers
31 views
Is it possible to successfully clone a Playstation4 partition?
Specifically, this question refers to the possibility of fixing a damaged system partition (causing "Cannot start the PS4" on boot) on a storage device (with many hours of game save data) by ...
0
votes
0answers
94 views
Need Help with decryption backup config.bin file “ZTE ZXHN H267N v1.1”
hi i'm trying to decrypt config.bin file from new router I got from my company, I tried a tool found on github "https://github.com/mkst/zte-config-utility" I got this ERROR:
python3 examples/...
1
vote
2answers
75 views
Figuring out encryption technique of network connection
I am trying to reverse a virtualized program (using VMProtect 3.4.x). I decided to hook certain functions of the program such as the winsocks library send() and recv().
This is how it looks like:
[...
0
votes
0answers
22 views
Is it possible to somehow derive the decryption key for iOS app binaries?
While disassembling an IPA downloaded directly from the App Store CDN, I noticed that the binary had an unusually large entropy. Looking this occurrence up confirmed my suspicion that it was encrypted,...
1
vote
1answer
66 views
Need help with ZTE router config.bin file decryption and encryption
bin file extracted from a ZXHN H168N V3.1. RouterPassView is able to decrypt the file successfully but the tool can't re-encrypt the file, it gave me some info about the method used to decrypt here ...
0
votes
0answers
45 views
Looking for encoding of SVG data
I have some SVG images stored in a database; but I am not able to find out which encoding is used.
Unfortunately, I don't have the exact SVG plain text available. The given examples "probably&...
0
votes
0answers
32 views
Reverse engineering algorithm for get keys
I have 2 groups of 4 byte and from this i have to get a key that have 6 byte.
Im trying to get the algorithm but i cant in any way.
The 1st group have only one bit different from the 2nd one.
Idk if i ...
0
votes
0answers
258 views
Trying to decode the Ontario Driver's License #
**The Ontario Driver's License follows the below format:**
LXxxx-FFFMY-YMMDD
Where:
L is the first letter of your last name
X is a numeric encoding of the last name (See Chart 1 below)
xxx is a ...
1
vote
1answer
134 views
Encrypted firmware, need some hints
I'm relatively new to firmware reverse engineering but it has been a very interesting journey, loved it!
I am currently trying to crack open the firmware of my Panasonic Lumix DC-G9 camera to see if I ...
0
votes
0answers
37 views
How to intercept encrypted traffic from windows 10 vm application?
I have a virtualbox virtual machine which is running windows 10 and is running a piece of software (LINE desktop client) which i would like to analyze. Specifically i would like to analyze the traffic ...
0
votes
1answer
148 views
Android packageInfo signature
Are there anyways I can learn what packageInfo.signatures[0] is so I can use it to apply the same algorithm in Python.
To further explain:
private static SecretKeySpec a(Context context) {
...
0
votes
0answers
33 views
help about methodology
I am a beginner in reverse engineering.
For a challenge I need to reverse a code in python this code use enigma algorithm :
To found the good configuration to decode the enigma code received.
The ...
0
votes
0answers
27 views
Create Custom Packers
I scanned many PE files. Some files are not recognized as packed although they are packed. These are most difficult to reverse.
Can you suggest me any tutorial for creating such packers or to pack ...
0
votes
0answers
84 views
Obfuscated and/or encrypted firmware?
I own 3 samples file of a firmware but I can't determine if it's obfuscated and/or encrypted. Could you give some hint about it? Here is the following samples:
Sample 1
Sample 2
Sample 3
1
vote
0answers
56 views
Trying to replicate encryption of an android app
I was trying to replicate/copy the encryption of an android app which uses CryptoJS with sha256 encryption as having seen in the source code of the android app. fingerprinting the app, it was built ...
2
votes
0answers
78 views
Which value is used for verifiying Zip password?
I am studying the way that can be used to check if a given password for an encrypted zip file is correct or not. I see this link:
How does a zip file detect a correct password?
In the answer of this ...
0
votes
0answers
65 views
Is this algorithm reversable?
b1 = MD5(S + RA)____|____ c(1) = p1 xor b1
b2 = MD5(S + c(1))____|____ c(2) = p2 xor b2
. .
. .
. .
bi = MD5(S + c(i-1))____|____ ...
0
votes
0answers
47 views
Identify encrypt /decrypt rsa function
I have arm static binary that I know it use RSA.
How can I find the encrypt/decrypt function?
3
votes
1answer
175 views
How can I retrieve the encryption key in this code?
can anyone explain the following code? is it possible to retrieve the encryption key?
I think the code was heavily obfuscated in addition to obfuscation, I can recognize it is using algorithms like ...
0
votes
0answers
48 views
How to call strongly encrypted DLL from Resources?
There is a program. This program accepts plugins. Plugins written with C#. I have to encrypt it. But when I use strong obfuscators I have exception. Program doesn't read. How can I fix that ? How can ...
1
vote
2answers
122 views
NOPed encrypt/decrypt functions in a Path of Exile client and now it crashes without message. Next step?
I am reversing an old Path of Exile client with the purpose of building an emulator. I managed to reach the character select screen in a newer, 64-bit client but I am struggling to make the same ...
3
votes
1answer
257 views
RE Huawei HG8145V5 user credentials
I have Huawei HG8145V5 and I backed up config file which contains encrypted root and admin credentials, but I dont know how they are encrypted. Here is an example of one password
$2*FuHXY<y5$...
0
votes
1answer
73 views
Encrypted image format
I am trying to reverse a simple image format for bitmap data with an indexed colour palette. The structure of the file is generally clear and I am able to extract the size of the picture and the ...
0
votes
0answers
194 views
reversing xiaomi update firmware encrypted?
I am playing around with a xiaomi firmware [mijia_4k_0.6.16.02] for a camera
Running binwalk on the file I see this output
DECIMAL HEXADECIMAL DESCRIPTION
----------------------------------...
0
votes
0answers
36 views
How to bypass encrypted disk Android pin lock?
I have a forgotten pass code of my android device which is encrypted and ask password before boot time.
How can I recover the pass or my data...
2
votes
1answer
69 views
How to “unprotect” malicious workbook without knowing password
Right now I'm looking at an office document (most likely rtf based on it exploiting equation editor) that opens just fine when you double click it, but on further examination in a hex editor and in ...
0
votes
1answer
31 views
Linux encryption/luks/pymouth password scripts corruption
I noticed that the bootup scripts that collect the password for full disk encryption on linux (fedora-31) were displaying corrupted text. The kind that looked like binary data being printed at text:
...
1
vote
1answer
167 views
Python self decryption script, as mean of obfuscation
I have a software with an embedded python interpreter. The software can open upon startup a given .py script and execute it. Let's assume that in my python environment I can't open other files, and I ...
1
vote
0answers
43 views
Possibly infected image
Long story short I'v downloaded a template for my website and instead of images it has the .html files included, and at the beginning those html files do include PNG IHDR , and they are being loaded ...
4
votes
2answers
334 views
Is there a way to confirm and decompress files that I suspect are compressed with a very early format of PKZIP?
I have a very large number of files (tens of thousands) who's binary all begins with 0x00 0x06. They do not open with 7-ZIP. I notice also that all Office files seem to share the same next 32 bytes.
...
1
vote
0answers
114 views
How to recover randomly generated private key from a Program that implements Diffie Hellman Exchange
This program implements Diffie Hellman key Exchange, a pair of random private keys are generated every time the program runs. How should I go about finding the random number generation subroutine ...
3
votes
2answers
334 views
PE32+ executable : .text segment encryption
I am working on PE segment encryption(in C++). I completed the PE32 .text segment encryption. I added stub segment to the PE that will decrypt .text segment at runtime. Used inline assembly in the ...
1
vote
2answers
314 views
Way to know if firmware is compressed
I dumped a wifi firmware of ps3 console but it seems that this firmware is compressed.
Here you can have some informations : https://www.psdevwiki.com/ps3/Wifi_Firmware
What can I do to decompress it ...
1
vote
2answers
98 views
Strings weirdly split in binary
Recently I have come across a few parts in a binary that looked odd to me, and I wanted to ask if this is something common compilers do, and if there is a way to undo it.
(The binary is from a raw ...
6
votes
1answer
331 views
How does IPA decryption works?
All IPAs being downloaded from AppStore gets encrypted on servers as part of FairPlay DRM. But decryption is accomplished on local device. As far as I know there is some hardware module which contains ...
1
vote
1answer
505 views
how can i Encrypt a decrypted zte zxhn h108n V2.5 config file?
i have decrypted the config file using a program i found online ( maybe made by python to exe )
so to decrypt using it you type is command into CMD
decode_zte_config.exe config.bin config.bin.xml ...
0
votes
1answer
101 views
Need help identifying a -possibly- encrypted string
I'm having some trouble building an app that gets data from a database to keep a log of files added to a website.
Most URLs are generated from a file ID and a time stamp, some of those URLs are ...
2
votes
2answers
217 views
How to identify the encoding performed on this string
I have an old application that stores the username and password in plaintext but encoded by an unknown encoding algorithm to me, it seams like base64, but I think it's not,
It seams that any word ...
0
votes
0answers
117 views
Reverse Engineering a Vehicle Identification Number (VIN) encoding
Not sure if this is the right place so please point me to the right place if needed.
I have an input of a VIN (Vehicle Identification Number) number with 17 characters, each character is either an ...
0
votes
0answers
211 views
find a video file in memory dump of a process
I have a player that plays encrypted video files and works like this:
I open an encrypted video file with it
it decrypts the video file and writes it to its memory
and plays the file from the memory ...
0
votes
1answer
2k views
how can i decrypt huawei HG531s v1 config file?
I have tried to follow this guide but
libxmlapi.so didn't have the required ATP_GetInfo1 function
so i moved to the next file libhttpapi.so
it had
ATP_GetInfo1
ATP_GetInfo2
ATP_GetInfo3
...
-1
votes
1answer
365 views
Determining the hash algorithm used [closed]
I have some test data:
Test 1
Text: pass1234
Salt: 33b9d87b83c097ce3ea6e6f84a298f839aafc6d7aa23d909a43ac94bdee35ddf
Hash: 61477724c136fb285918114792685a4d
Test 2
Text: test1234
Salt: ...
4
votes
1answer
363 views
String Encoding and Decoding Method
so I came across the following string encoding method in python.
def encode(the_string):
encoded_string = ''
rotations = ord(the_string[-1]) + 5
for i in range(0, len(the_string)):
...
0
votes
1answer
113 views
Is it possible to recover the key to a decrypted file?
Is it possible to recover the key to a decrypted file if you have the initialization vector and it uses RijndaelManaged? If so how?
The file I want to recover the key from is a xml that looks like ...
1
vote
1answer
185 views
me_cleaner and fwupd, or manipulating UEFI .cab files
I'd like to extract a plain dump of the UEFI firmware of my laptop (1:1 copy of the flash content, often called .bin or .rom files) from the .cap file, so that I can modify it slightly with me_cleaner....
1
vote
1answer
136 views
Tool to search known hash/encryption algo in files in Windows
I am looking for a tool (the best would be an Ida plugin) that can search files in a folder for a known hash (md5/sha1 etc.) and encryption (aes /rsa etc.).
I know an Ida plugin called FindCrypt2 but ...
