Questions tagged [encryption]
Process of encoding information such that decoding requires the knowledge of some secret (a key). This tag covers questions about obfuscated and encrypted programs, or tools, but higher level questions may get better answers on Cryptography Stack Exchange.
150
questions
0
votes
0answers
50 views
Is this algorithm reversable?
b1 = MD5(S + RA)____|____ c(1) = p1 xor b1
b2 = MD5(S + c(1))____|____ c(2) = p2 xor b2
. .
. .
. .
bi = MD5(S + c(i-1))____|____ ...
0
votes
0answers
27 views
Identify encrypt /decrypt rsa function
I have arm static binary that I know it use RSA.
How can I find the encrypt/decrypt function?
3
votes
1answer
106 views
How can I retrieve the encryption key in this code?
can anyone explain the following code? is it possible to retrieve the encryption key?
I think the code was heavily obfuscated in addition to obfuscation, I can recognize it is using algorithms like ...
0
votes
0answers
27 views
How to call strongly encrypted DLL from Resources?
There is a program. This program accepts plugins. Plugins written with C#. I have to encrypt it. But when I use strong obfuscators I have exception. Program doesn't read. How can I fix that ? How can ...
1
vote
2answers
59 views
NOPed encrypt/decrypt functions in a Path of Exile client and now it crashes without message. Next step?
I am reversing an old Path of Exile client with the purpose of building an emulator. I managed to reach the character select screen in a newer, 64-bit client but I am struggling to make the same ...
0
votes
0answers
57 views
RE Huawei HG8145V5 user credentials
I have Huawei HG8145V5 and I backed up config file which contains encrypted root and admin credentials, but I dont know how they are encrypted. Here is an example of one password
$2*FuHXY<y5$...
0
votes
1answer
61 views
Encrypted image format
I am trying to reverse a simple image format for bitmap data with an indexed colour palette. The structure of the file is generally clear and I am able to extract the size of the picture and the ...
0
votes
0answers
87 views
reversing xiaomi update firmware encrypted?
I am playing around with a xiaomi firmware [mijia_4k_0.6.16.02] for a camera
Running binwalk on the file I see this output
DECIMAL HEXADECIMAL DESCRIPTION
----------------------------------...
0
votes
0answers
30 views
How to bypass encrypted disk Android pin lock?
I have a forgotten pass code of my android device which is encrypted and ask password before boot time.
How can I recover the pass or my data...
2
votes
1answer
59 views
How to “unprotect” malicious workbook without knowing password
Right now I'm looking at an office document (most likely rtf based on it exploiting equation editor) that opens just fine when you double click it, but on further examination in a hex editor and in ...
0
votes
1answer
28 views
Linux encryption/luks/pymouth password scripts corruption
I noticed that the bootup scripts that collect the password for full disk encryption on linux (fedora-31) were displaying corrupted text. The kind that looked like binary data being printed at text:
...
1
vote
1answer
71 views
Python self decryption script, as mean of obfuscation
I have a software with an embedded python interpreter. The software can open upon startup a given .py script and execute it. Let's assume that in my python environment I can't open other files, and I ...
1
vote
0answers
42 views
Possibly infected image
Long story short I'v downloaded a template for my website and instead of images it has the .html files included, and at the beginning those html files do include PNG IHDR , and they are being loaded ...
4
votes
2answers
95 views
Is there a way to confirm and decompress files that I suspect are compressed with a very early format of PKZIP?
I have a very large number of files (tens of thousands) who's binary all begins with 0x00 0x06. They do not open with 7-ZIP. I notice also that all Office files seem to share the same next 32 bytes.
...
0
votes
0answers
91 views
How to recover randomly generated private key from a Program that implements Diffie Hellman Exchange
This program implements Diffie Hellman key Exchange, a pair of random private keys are generated every time the program runs. How should I go about finding the random number generation subroutine ...
2
votes
1answer
165 views
PE32+ executable : .text segment encryption
I am working on PE segment encryption(in C++). I completed the PE32 .text segment encryption. I added stub segment to the PE that will decrypt .text segment at runtime. Used inline assembly in the ...
1
vote
2answers
149 views
Way to know if firmware is compressed
I dumped a wifi firmware of ps3 console but it seems that this firmware is compressed.
Here you can have some informations : https://www.psdevwiki.com/ps3/Wifi_Firmware
What can I do to decompress it ...
0
votes
0answers
58 views
Packet: Game last byte encrypted?
12:14
WSARecv()
C3-73-3E-BE-36-2F-14-37-37
F4-44-09-89-01-18-23-00-00
------------------------------------------
12:14
send()
C3-73-38-31-0E-35-EE-35-A5-35-7F-34-37-37-8D
F4-44-0F-06-39-02-D9-02-92-02-...
1
vote
2answers
83 views
Strings weirdly split in binary
Recently I have come across a few parts in a binary that looked odd to me, and I wanted to ask if this is something common compilers do, and if there is a way to undo it.
(The binary is from a raw ...
5
votes
1answer
171 views
How does IPA decryption works?
All IPAs being downloaded from AppStore gets encrypted on servers as part of FairPlay DRM. But decryption is accomplished on local device. As far as I know there is some hardware module which contains ...
0
votes
0answers
194 views
how can i Encrypt a decrypted zte zxhn h108n V2.5 config file?
i have decrypted the config file using a program i found online ( maybe made by python to exe )
so to decrypt using it you type is command into CMD
decode_zte_config.exe config.bin config.bin.xml ...
0
votes
0answers
71 views
How does windows 10 v.1803 save the password in the SAM file?
I'm doing a search on how windows 10 saves hashed passwords in the SAM file. From this article I suppose that Windows does this:
If the password is 123456 and the user has RID 000003E9:
CALCULATION ...
0
votes
1answer
99 views
Need help identifying a -possibly- encrypted string
I'm having some trouble building an app that gets data from a database to keep a log of files added to a website.
Most URLs are generated from a file ID and a time stamp, some of those URLs are ...
2
votes
2answers
191 views
How to identify the encoding performed on this string
I have an old application that stores the username and password in plaintext but encoded by an unknown encoding algorithm to me, it seams like base64, but I think it's not,
It seams that any word ...
0
votes
0answers
101 views
Reverse Engineering a Vehicle Identification Number (VIN) encoding
Not sure if this is the right place so please point me to the right place if needed.
I have an input of a VIN (Vehicle Identification Number) number with 17 characters, each character is either an ...
0
votes
0answers
130 views
find a video file in memory dump of a process
I have a player that plays encrypted video files and works like this:
I open an encrypted video file with it
it decrypts the video file and writes it to its memory
and plays the file from the memory ...
0
votes
1answer
707 views
how can i decrypt huawei HG531s v1 config file?
I have tried to follow this guide but
libxmlapi.so didn't have the required ATP_GetInfo1 function
so i moved to the next file libhttpapi.so
it had
ATP_GetInfo1
ATP_GetInfo2
ATP_GetInfo3
...
-1
votes
1answer
260 views
Determining the hash algorithm used [closed]
I have some test data:
Test 1
Text: pass1234
Salt: 33b9d87b83c097ce3ea6e6f84a298f839aafc6d7aa23d909a43ac94bdee35ddf
Hash: 61477724c136fb285918114792685a4d
Test 2
Text: test1234
Salt: ...
0
votes
0answers
65 views
How to guess the key of XOR encryption in java?
I am trying to find the key of XOR encrypted string in java. It is very much probable that the key is eight characters long. I have the encrypted string.
I am not able to understand how to go ...
3
votes
1answer
165 views
String Encoding and Decoding Method
so I came across the following string encoding method in python.
def encode(the_string):
encoded_string = ''
rotations = ord(the_string[-1]) + 5
for i in range(0, len(the_string)):
...
0
votes
1answer
109 views
Is it possible to recover the key to a decrypted file?
Is it possible to recover the key to a decrypted file if you have the initialization vector and it uses RijndaelManaged? If so how?
The file I want to recover the key from is a xml that looks like ...
0
votes
1answer
116 views
me_cleaner and fwupd, or manipulating UEFI .cab files
I'd like to extract a plain dump of the UEFI firmware of my laptop (1:1 copy of the flash content, often called .bin or .rom files) from the .cap file, so that I can modify it slightly with me_cleaner....
1
vote
1answer
128 views
Tool to search known hash/encryption algo in files in Windows
I am looking for a tool (the best would be an Ida plugin) that can search files in a folder for a known hash (md5/sha1 etc.) and encryption (aes /rsa etc.).
I know an Ida plugin called FindCrypt2 but ...
0
votes
1answer
67 views
Where can I go to learn about decryption? [closed]
I understand the basics of encryption and decryption, but I don't know where to go to talk to people and learn more. Are there any forums or resources to look at to learn more?
For example, I was ...
-1
votes
2answers
1k views
XOR encryption - How to find the key?
I'm trying to solve a crackme which basically uses a XOR encryption scheme in which the password is used as the key to an encrypted buffer which is subsequently executed. The following is the ...
1
vote
0answers
345 views
Reverse crypto algorythm, based on AES
Hello!
I'm working on reversing one library (shared object) written for ARM architecture. It's obfuscated or packed with something pretty strong what makes debugging much harder and almost impossible ...
1
vote
1answer
353 views
Reversing a Java digest function, with known public key and source code
A Java application verifies that an XML string that came from a clearnet server (no SSL) has not been tampered, using a message digest. It does so with a public key stored locally, accessed with the ...
0
votes
1answer
140 views
how to find private Key and passphrase stored inside a program?
There are some files (drivers) that are encrypted, and these files are working in a program that is installed in my computer. The program using these files needs to decrypt them. I am sure that the ...
0
votes
1answer
133 views
Algorithm to find secret cipher S-box in bin file [closed]
Is there any algorithm that searches through binary file and detects existence of secret S-box built from look-up table (4 bit or 8 bit)? Consider the sbox is unavailable for public
The attached bin ...
-2
votes
1answer
514 views
How do i find the decryption key for a encrypted text file [closed]
So context i have a game and a encrypted save file. My thoughts were how to find the decryption key in reverse engineering my game .I watched tuts but i think this topic isnt much detailed so i need ...
2
votes
0answers
122 views
How should I got about working out the format for this psp game?
I have been attempting to reverse engineer a format for a visual novel psp game ('Mirai Nikki RE: WRITE - 13 Ninme No Nikki Shoyuusha') and I have come to the understanding that the format works as a ...
-1
votes
1answer
100 views
How to use Python while debugging in IDA
I'm debugging an .exe file in IDA.
At a specific point during debugging, I want the Python code to automatically take the data in *(eax+8) and encrypt it with that module and print the result to file ...
-2
votes
1answer
1k views
How to install ida plugin to identify encryption function
I saw here How to identify known encryption algorithm? the IDA plugin https://github.com/nihilus/IDA_Signsrch
I don't understand how to install it .
In the INSTALL I saw coppy the plug-in and ...
2
votes
1answer
985 views
How to identify known encryption algorithm?
I reverse an .exe file with IDA.
I see a function that appears to be encrypting something by generating some random numbers.
It there any tool to identify if it is a known encryption algorithm?
2
votes
1answer
127 views
How can I generate the recovery password on a legacy system (Original company is out of business) running on my local machine?
I'm attempting to use a legacy systems recovery feature that typically required calling/faxing a company that is no longer around.
Basically, the system was designed to go into a recovery mode and ...
-3
votes
1answer
638 views
Identification of AES portion code in binary
I want to locate AES code portion in binary after reverse engineering. I have tried to locate manually and using plugin findcrypt2 but I was not successful. Kindly show me a direction so that I can ...
2
votes
1answer
3k views
Decrypting SQLite Database with key
I have a SQLite database that contains a dictionary (just words and definitions) that can be opened with free but proprietary software. To use with the software, it requires an 'unlock' key, which I ...
0
votes
1answer
131 views
Does someone recognize this “lookup table”? (used for xor encryption)
This table is part of the packet encryption of an old game for which I am developing a server.
The crypto algorithm doesn't just xor the password with the message.
It uses a multiple of the ascii ...
1
vote
1answer
525 views
Binary encryption
I'd like to ask your help to understand the algorithm used to encrypt these hex/bin firmware (for an ARM-Cortex M4 microcontroller).
In the tar file above you can find different firmware versions.
...
2
votes
0answers
1k views
Arm hex firmware reverse
it has been a couple of months that I'm working on the firmware produced by a company that makes (not licensed) gamepad console adapters.
One of my goal was to understand how they bypassed (hacked) ...
