Questions tagged [encryption]
Process of encoding information such that decoding requires the knowledge of some secret (a key). This tag covers questions about obfuscated and encrypted programs, or tools, but higher level questions may get better answers on Cryptography Stack Exchange.
154
questions
0
votes
1answer
62 views
Android packageInfo signature
Are there anyways I can learn what packageInfo.signatures[0] is so I can use it to apply the same algorithm in Python.
To further explain:
private static SecretKeySpec a(Context context) {
...
0
votes
0answers
28 views
help about methodology
I am a beginner in reverse engineering.
For a challenge I need to reverse a code in python this code use enigma algorithm :
To found the good configuration to decode the enigma code received.
The ...
0
votes
0answers
21 views
Create Custom Packers
I scanned many PE files. Some files are not recognized as packed although they are packed. These are most difficult to reverse.
Can you suggest me any tutorial for creating such packers or to pack ...
0
votes
0answers
74 views
Obfuscated and/or encrypted firmware?
I own 3 samples file of a firmware but I can't determine if it's obfuscated and/or encrypted. Could you give some hint about it? Here is the following samples:
Sample 1
Sample 2
Sample 3
1
vote
0answers
49 views
Trying to replicate encryption of an android app
I was trying to replicate/copy the encryption of an android app which uses CryptoJS with sha256 encryption as having seen in the source code of the android app. fingerprinting the app, it was built ...
2
votes
0answers
76 views
Which value is used for verifiying Zip password?
I am studying the way that can be used to check if a given password for an encrypted zip file is correct or not. I see this link:
How does a zip file detect a correct password?
In the answer of this ...
0
votes
0answers
62 views
Is this algorithm reversable?
b1 = MD5(S + RA)____|____ c(1) = p1 xor b1
b2 = MD5(S + c(1))____|____ c(2) = p2 xor b2
. .
. .
. .
bi = MD5(S + c(i-1))____|____ ...
0
votes
0answers
39 views
Identify encrypt /decrypt rsa function
I have arm static binary that I know it use RSA.
How can I find the encrypt/decrypt function?
3
votes
1answer
153 views
How can I retrieve the encryption key in this code?
can anyone explain the following code? is it possible to retrieve the encryption key?
I think the code was heavily obfuscated in addition to obfuscation, I can recognize it is using algorithms like ...
0
votes
0answers
31 views
How to call strongly encrypted DLL from Resources?
There is a program. This program accepts plugins. Plugins written with C#. I have to encrypt it. But when I use strong obfuscators I have exception. Program doesn't read. How can I fix that ? How can ...
1
vote
2answers
85 views
NOPed encrypt/decrypt functions in a Path of Exile client and now it crashes without message. Next step?
I am reversing an old Path of Exile client with the purpose of building an emulator. I managed to reach the character select screen in a newer, 64-bit client but I am struggling to make the same ...
1
vote
0answers
97 views
RE Huawei HG8145V5 user credentials
I have Huawei HG8145V5 and I backed up config file which contains encrypted root and admin credentials, but I dont know how they are encrypted. Here is an example of one password
$2*FuHXY<y5$...
0
votes
1answer
66 views
Encrypted image format
I am trying to reverse a simple image format for bitmap data with an indexed colour palette. The structure of the file is generally clear and I am able to extract the size of the picture and the ...
0
votes
0answers
139 views
reversing xiaomi update firmware encrypted?
I am playing around with a xiaomi firmware [mijia_4k_0.6.16.02] for a camera
Running binwalk on the file I see this output
DECIMAL HEXADECIMAL DESCRIPTION
----------------------------------...
0
votes
0answers
33 views
How to bypass encrypted disk Android pin lock?
I have a forgotten pass code of my android device which is encrypted and ask password before boot time.
How can I recover the pass or my data...
2
votes
1answer
67 views
How to “unprotect” malicious workbook without knowing password
Right now I'm looking at an office document (most likely rtf based on it exploiting equation editor) that opens just fine when you double click it, but on further examination in a hex editor and in ...
0
votes
1answer
28 views
Linux encryption/luks/pymouth password scripts corruption
I noticed that the bootup scripts that collect the password for full disk encryption on linux (fedora-31) were displaying corrupted text. The kind that looked like binary data being printed at text:
...
1
vote
1answer
100 views
Python self decryption script, as mean of obfuscation
I have a software with an embedded python interpreter. The software can open upon startup a given .py script and execute it. Let's assume that in my python environment I can't open other files, and I ...
1
vote
0answers
43 views
Possibly infected image
Long story short I'v downloaded a template for my website and instead of images it has the .html files included, and at the beginning those html files do include PNG IHDR , and they are being loaded ...
4
votes
2answers
221 views
Is there a way to confirm and decompress files that I suspect are compressed with a very early format of PKZIP?
I have a very large number of files (tens of thousands) who's binary all begins with 0x00 0x06. They do not open with 7-ZIP. I notice also that all Office files seem to share the same next 32 bytes.
...
0
votes
0answers
96 views
How to recover randomly generated private key from a Program that implements Diffie Hellman Exchange
This program implements Diffie Hellman key Exchange, a pair of random private keys are generated every time the program runs. How should I go about finding the random number generation subroutine ...
2
votes
1answer
242 views
PE32+ executable : .text segment encryption
I am working on PE segment encryption(in C++). I completed the PE32 .text segment encryption. I added stub segment to the PE that will decrypt .text segment at runtime. Used inline assembly in the ...
1
vote
2answers
210 views
Way to know if firmware is compressed
I dumped a wifi firmware of ps3 console but it seems that this firmware is compressed.
Here you can have some informations : https://www.psdevwiki.com/ps3/Wifi_Firmware
What can I do to decompress it ...
0
votes
0answers
63 views
Packet: Game last byte encrypted?
12:14
WSARecv()
C3-73-3E-BE-36-2F-14-37-37
F4-44-09-89-01-18-23-00-00
------------------------------------------
12:14
send()
C3-73-38-31-0E-35-EE-35-A5-35-7F-34-37-37-8D
F4-44-0F-06-39-02-D9-02-92-02-...
1
vote
2answers
90 views
Strings weirdly split in binary
Recently I have come across a few parts in a binary that looked odd to me, and I wanted to ask if this is something common compilers do, and if there is a way to undo it.
(The binary is from a raw ...
6
votes
1answer
244 views
How does IPA decryption works?
All IPAs being downloaded from AppStore gets encrypted on servers as part of FairPlay DRM. But decryption is accomplished on local device. As far as I know there is some hardware module which contains ...
1
vote
1answer
332 views
how can i Encrypt a decrypted zte zxhn h108n V2.5 config file?
i have decrypted the config file using a program i found online ( maybe made by python to exe )
so to decrypt using it you type is command into CMD
decode_zte_config.exe config.bin config.bin.xml ...
0
votes
1answer
100 views
Need help identifying a -possibly- encrypted string
I'm having some trouble building an app that gets data from a database to keep a log of files added to a website.
Most URLs are generated from a file ID and a time stamp, some of those URLs are ...
2
votes
2answers
200 views
How to identify the encoding performed on this string
I have an old application that stores the username and password in plaintext but encoded by an unknown encoding algorithm to me, it seams like base64, but I think it's not,
It seams that any word ...
0
votes
0answers
107 views
Reverse Engineering a Vehicle Identification Number (VIN) encoding
Not sure if this is the right place so please point me to the right place if needed.
I have an input of a VIN (Vehicle Identification Number) number with 17 characters, each character is either an ...
0
votes
0answers
167 views
find a video file in memory dump of a process
I have a player that plays encrypted video files and works like this:
I open an encrypted video file with it
it decrypts the video file and writes it to its memory
and plays the file from the memory ...
0
votes
1answer
1k views
how can i decrypt huawei HG531s v1 config file?
I have tried to follow this guide but
libxmlapi.so didn't have the required ATP_GetInfo1 function
so i moved to the next file libhttpapi.so
it had
ATP_GetInfo1
ATP_GetInfo2
ATP_GetInfo3
...
-1
votes
1answer
288 views
Determining the hash algorithm used [closed]
I have some test data:
Test 1
Text: pass1234
Salt: 33b9d87b83c097ce3ea6e6f84a298f839aafc6d7aa23d909a43ac94bdee35ddf
Hash: 61477724c136fb285918114792685a4d
Test 2
Text: test1234
Salt: ...
3
votes
1answer
222 views
String Encoding and Decoding Method
so I came across the following string encoding method in python.
def encode(the_string):
encoded_string = ''
rotations = ord(the_string[-1]) + 5
for i in range(0, len(the_string)):
...
0
votes
1answer
112 views
Is it possible to recover the key to a decrypted file?
Is it possible to recover the key to a decrypted file if you have the initialization vector and it uses RijndaelManaged? If so how?
The file I want to recover the key from is a xml that looks like ...
0
votes
1answer
147 views
me_cleaner and fwupd, or manipulating UEFI .cab files
I'd like to extract a plain dump of the UEFI firmware of my laptop (1:1 copy of the flash content, often called .bin or .rom files) from the .cap file, so that I can modify it slightly with me_cleaner....
1
vote
1answer
131 views
Tool to search known hash/encryption algo in files in Windows
I am looking for a tool (the best would be an Ida plugin) that can search files in a folder for a known hash (md5/sha1 etc.) and encryption (aes /rsa etc.).
I know an Ida plugin called FindCrypt2 but ...
0
votes
1answer
78 views
Where can I go to learn about decryption? [closed]
I understand the basics of encryption and decryption, but I don't know where to go to talk to people and learn more. Are there any forums or resources to look at to learn more?
For example, I was ...
-1
votes
2answers
2k views
XOR encryption - How to find the key?
I'm trying to solve a crackme which basically uses a XOR encryption scheme in which the password is used as the key to an encrypted buffer which is subsequently executed. The following is the ...
1
vote
0answers
405 views
Reverse crypto algorythm, based on AES
Hello!
I'm working on reversing one library (shared object) written for ARM architecture. It's obfuscated or packed with something pretty strong what makes debugging much harder and almost impossible ...
1
vote
1answer
427 views
Reversing a Java digest function, with known public key and source code
A Java application verifies that an XML string that came from a clearnet server (no SSL) has not been tampered, using a message digest. It does so with a public key stored locally, accessed with the ...
0
votes
1answer
197 views
how to find private Key and passphrase stored inside a program?
There are some files (drivers) that are encrypted, and these files are working in a program that is installed in my computer. The program using these files needs to decrypt them. I am sure that the ...
0
votes
1answer
151 views
Algorithm to find secret cipher S-box in bin file [closed]
Is there any algorithm that searches through binary file and detects existence of secret S-box built from look-up table (4 bit or 8 bit)? Consider the sbox is unavailable for public
The attached bin ...
-2
votes
1answer
613 views
How do i find the decryption key for a encrypted text file [closed]
So context i have a game and a encrypted save file. My thoughts were how to find the decryption key in reverse engineering my game .I watched tuts but i think this topic isnt much detailed so i need ...
2
votes
0answers
167 views
How should I got about working out the format for this psp game?
I have been attempting to reverse engineer a format for a visual novel psp game ('Mirai Nikki RE: WRITE - 13 Ninme No Nikki Shoyuusha') and I have come to the understanding that the format works as a ...
-1
votes
1answer
119 views
How to use Python while debugging in IDA
I'm debugging an .exe file in IDA.
At a specific point during debugging, I want the Python code to automatically take the data in *(eax+8) and encrypt it with that module and print the result to file ...
-2
votes
1answer
1k views
How to install ida plugin to identify encryption function
I saw here How to identify known encryption algorithm? the IDA plugin https://github.com/nihilus/IDA_Signsrch
I don't understand how to install it .
In the INSTALL I saw coppy the plug-in and ...
2
votes
1answer
1k views
How to identify known encryption algorithm?
I reverse an .exe file with IDA.
I see a function that appears to be encrypting something by generating some random numbers.
It there any tool to identify if it is a known encryption algorithm?
2
votes
1answer
129 views
How can I generate the recovery password on a legacy system (Original company is out of business) running on my local machine?
I'm attempting to use a legacy systems recovery feature that typically required calling/faxing a company that is no longer around.
Basically, the system was designed to go into a recovery mode and ...
-3
votes
1answer
704 views
Identification of AES portion code in binary
I want to locate AES code portion in binary after reverse engineering. I have tried to locate manually and using plugin findcrypt2 but I was not successful. Kindly show me a direction so that I can ...
