Questions tagged [encryption]
Process of encoding information such that decoding requires the knowledge of some secret (a key). This tag covers questions about obfuscated and encrypted programs, or tools, but higher level questions may get better answers on Cryptography Stack Exchange.
173
questions
2
votes
2answers
85 views
How can I decrypte the data in this SQLite Database file
I have this SQLite Database file
https://we.tl/t-RwKqYyS3D7
When I open it in notepad++, I got some decoded strings. I was trying to clean it and show only the strings without the symboles but then I ...
1
vote
0answers
49 views
where can i find decryption key inside of the dll file?
I am testing a dll file , in a C# console app , and by the looks of it the dll file sends a web request with encrypted and then encoded values to a remote server.
after intercepting and analyzing the ...
1
vote
0answers
76 views
How to create an algorithm in C…(or C# or C++, basically in “a programming language”)
After a LOT of sending challenges and recording the responses I've 'broken' the "encryption" in my car's immobiliser...the reason for doing it is so I can use the engine and transmission in ...
0
votes
0answers
46 views
Stuck attempting to reverse Denon AVR encrypted update
I am trying to RE the update file for a Denon AVR for fun and to see if I can figure out how to access the device's webserver which otherwise returns HTTP 403, and how to enable Pandora on my EU ...
0
votes
0answers
29 views
Reverse engineering encrypted router backup config file
My router has a config backup function that downloads a base64-encoded file.
After decoding the file, it's clear that it is encrypted:
I have tried redownloading the config, both after having changed ...
0
votes
0answers
55 views
how to get rid of this obfuscator?
i somehow know that this is Confuserex but noting working agter many try the file is still unreadable. is there a way to? or im just bad...
ps.i unpack this from the exe file that only has PE(maybe ...
0
votes
1answer
28 views
The Logic Of Incremental Data on Serial Communication Encoding
These are the serial communication reverse values.
I am trying to understand the logic behind this.
I am pretty sure that 2 bytes represent 1 byte(high byte and low byte), values are correct.
I tried ...
0
votes
0answers
44 views
Understand the AES encryption mode
I am reverse engineering a software that implements its own encryption over HTTP. The implementation is very simple, the client has the server's public key which it uses to encrypt the data it sends ...
0
votes
1answer
55 views
Java Help Understanding RSA Encrypt/Decrypt file and SD card
I was directed tyhis way from the main superuser site:
I have zero experience with Java or Android apps (have coding experience in C) and tried reverse engineering a [now defunct/unsupported] app ...
1
vote
1answer
237 views
How to find encrypted strings in an executable?
I am trying to reverse engineer an executable.
I am using Process explorer to dump all strings present in the exe image, and from the process's RAM when it is running.
The two dumps return a ...
4
votes
1answer
183 views
Find Decryption algorithm of an encryption algorithm
I recently work on an algorithm that encrypt some data with 8 byte length.
I worked hard and I successful to get this algorithm, but I need decryption of this algorithm.
How I can invert it?
I guess ...
0
votes
1answer
85 views
Best way to protect source code of exe that being loaded by Assembly.Load method
I am protecting an exe that being loaded by Assembly.Load... This makes everything difficult because most obfuscators causing it to not work properly or not load at all. I used confuserEx Ameteurz ...
1
vote
0answers
42 views
Is this executable packed, encrypted or what?
I have an executable that I'd like to patch, but I'm very new to RE. I some have assembly knowledge of x86 as first learned language last year, but not of this one: PowerPC (in this case is PPC32), ...
1
vote
0answers
100 views
ZTE AES-256-CBC Encrypted backup config file
i tried router pass view tool on (a closed source one) it's able to decrypt the older version of it V3.1. tested on two routers of it and it gave me this output
Encrypted Data Start Position: 227
...
1
vote
0answers
55 views
How does one start with reversing router config encryption?
There is not enough info on the web from what I have seen.
Most write ups/guides/blog-posts are like this:
They provide only the decrypt/encrypt script-tool with how to run it and nothing else
They ...
0
votes
0answers
32 views
Is it possible to successfully clone a Playstation4 partition?
Specifically, this question refers to the possibility of fixing a damaged system partition (causing "Cannot start the PS4" on boot) on a storage device (with many hours of game save data) by ...
0
votes
0answers
643 views
Need Help with decryption backup config.bin file “ZTE ZXHN H267N v1.1”
hi i'm trying to decrypt config.bin file from new router I got from my company, I tried a tool found on github "https://github.com/mkst/zte-config-utility" I got this ERROR:
python3 examples/...
1
vote
2answers
82 views
Figuring out encryption technique of network connection
I am trying to reverse a virtualized program (using VMProtect 3.4.x). I decided to hook certain functions of the program such as the winsocks library send() and recv().
This is how it looks like:
[...
0
votes
0answers
24 views
Is it possible to somehow derive the decryption key for iOS app binaries?
While disassembling an IPA downloaded directly from the App Store CDN, I noticed that the binary had an unusually large entropy. Looking this occurrence up confirmed my suspicion that it was encrypted,...
1
vote
1answer
304 views
Need help with ZTE router config.bin file decryption and encryption
bin file extracted from a ZXHN H168N V3.1. RouterPassView is able to decrypt the file successfully but the tool can't re-encrypt the file, it gave me some info about the method used to decrypt here ...
0
votes
0answers
46 views
Looking for encoding of SVG data
I have some SVG images stored in a database; but I am not able to find out which encoding is used.
Unfortunately, I don't have the exact SVG plain text available. The given examples "probably&...
0
votes
0answers
36 views
Reverse engineering algorithm for get keys
I have 2 groups of 4 byte and from this i have to get a key that have 6 byte.
Im trying to get the algorithm but i cant in any way.
The 1st group have only one bit different from the 2nd one.
Idk if i ...
0
votes
1answer
1k views
Trying to decode the Ontario Driver's License #
**The Ontario Driver's License follows the below format:**
LXxxx-FFFMY-YMMDD
Where:
L is the first letter of your last name
X is a numeric encoding of the last name (See Chart 1 below)
xxx is a ...
1
vote
1answer
208 views
Encrypted firmware, need some hints
I'm relatively new to firmware reverse engineering but it has been a very interesting journey, loved it!
I am currently trying to crack open the firmware of my Panasonic Lumix DC-G9 camera to see if I ...
0
votes
0answers
39 views
How to intercept encrypted traffic from windows 10 vm application?
I have a virtualbox virtual machine which is running windows 10 and is running a piece of software (LINE desktop client) which i would like to analyze. Specifically i would like to analyze the traffic ...
0
votes
1answer
254 views
Android packageInfo signature
Are there anyways I can learn what packageInfo.signatures[0] is so I can use it to apply the same algorithm in Python.
To further explain:
private static SecretKeySpec a(Context context) {
...
0
votes
0answers
36 views
help about methodology
I am a beginner in reverse engineering.
For a challenge I need to reverse a code in python this code use enigma algorithm :
To found the good configuration to decode the enigma code received.
The ...
1
vote
0answers
60 views
Trying to replicate encryption of an android app
I was trying to replicate/copy the encryption of an android app which uses CryptoJS with sha256 encryption as having seen in the source code of the android app. fingerprinting the app, it was built ...
2
votes
0answers
78 views
Which value is used for verifiying Zip password?
I am studying the way that can be used to check if a given password for an encrypted zip file is correct or not. I see this link:
How does a zip file detect a correct password?
In the answer of this ...
3
votes
1answer
205 views
How can I retrieve the encryption key in this code?
can anyone explain the following code? is it possible to retrieve the encryption key?
I think the code was heavily obfuscated in addition to obfuscation, I can recognize it is using algorithms like ...
0
votes
0answers
80 views
How to call strongly encrypted DLL from Resources?
There is a program. This program accepts plugins. Plugins written with C#. I have to encrypt it. But when I use strong obfuscators I have exception. Program doesn't read. How can I fix that ? How can ...
1
vote
2answers
183 views
NOPed encrypt/decrypt functions in a Path of Exile client and now it crashes without message. Next step?
I am reversing an old Path of Exile client with the purpose of building an emulator. I managed to reach the character select screen in a newer, 64-bit client but I am struggling to make the same ...
4
votes
1answer
551 views
RE Huawei HG8145V5 user credentials
I have Huawei HG8145V5 and I backed up config file which contains encrypted root and admin credentials, but I dont know how they are encrypted. Here is an example of one password
$2*FuHXY<y5$...
0
votes
1answer
74 views
Encrypted image format
I am trying to reverse a simple image format for bitmap data with an indexed colour palette. The structure of the file is generally clear and I am able to extract the size of the picture and the ...
0
votes
0answers
249 views
reversing xiaomi update firmware encrypted?
I am playing around with a xiaomi firmware [mijia_4k_0.6.16.02] for a camera
Running binwalk on the file I see this output
DECIMAL HEXADECIMAL DESCRIPTION
----------------------------------...
2
votes
1answer
71 views
How to “unprotect” malicious workbook without knowing password
Right now I'm looking at an office document (most likely rtf based on it exploiting equation editor) that opens just fine when you double click it, but on further examination in a hex editor and in ...
0
votes
1answer
32 views
Linux encryption/luks/pymouth password scripts corruption
I noticed that the bootup scripts that collect the password for full disk encryption on linux (fedora-31) were displaying corrupted text. The kind that looked like binary data being printed at text:
...
1
vote
1answer
242 views
Python self decryption script, as mean of obfuscation
I have a software with an embedded python interpreter. The software can open upon startup a given .py script and execute it. Let's assume that in my python environment I can't open other files, and I ...
1
vote
0answers
43 views
Possibly infected image
Long story short I'v downloaded a template for my website and instead of images it has the .html files included, and at the beginning those html files do include PNG IHDR , and they are being loaded ...
5
votes
2answers
484 views
Is there a way to confirm and decompress files that I suspect are compressed with a very early format of PKZIP?
I have a very large number of files (tens of thousands) who's binary all begins with 0x00 0x06. They do not open with 7-ZIP. I notice also that all Office files seem to share the same next 32 bytes.
...
0
votes
0answers
125 views
How to recover randomly generated private key from a Program that implements Diffie Hellman Exchange
This program implements Diffie Hellman key Exchange, a pair of random private keys are generated every time the program runs. How should I go about finding the random number generation subroutine ...
3
votes
2answers
395 views
PE32+ executable : .text segment encryption
I am working on PE segment encryption(in C++). I completed the PE32 .text segment encryption. I added stub segment to the PE that will decrypt .text segment at runtime. Used inline assembly in the ...
1
vote
2answers
465 views
Way to know if firmware is compressed
I dumped a wifi firmware of ps3 console but it seems that this firmware is compressed.
Here you can have some informations : https://www.psdevwiki.com/ps3/Wifi_Firmware
What can I do to decompress it ...
1
vote
2answers
109 views
Strings weirdly split in binary
Recently I have come across a few parts in a binary that looked odd to me, and I wanted to ask if this is something common compilers do, and if there is a way to undo it.
(The binary is from a raw ...
6
votes
1answer
387 views
How does IPA decryption works?
All IPAs being downloaded from AppStore gets encrypted on servers as part of FairPlay DRM. But decryption is accomplished on local device. As far as I know there is some hardware module which contains ...
2
votes
1answer
607 views
how can i Encrypt a decrypted zte zxhn h108n V2.5 config file?
i have decrypted the config file using a program i found online ( maybe made by python to exe )
so to decrypt using it you type is command into CMD
decode_zte_config.exe config.bin config.bin.xml ...
0
votes
1answer
101 views
Need help identifying a -possibly- encrypted string
I'm having some trouble building an app that gets data from a database to keep a log of files added to a website.
Most URLs are generated from a file ID and a time stamp, some of those URLs are ...
2
votes
2answers
220 views
How to identify the encoding performed on this string
I have an old application that stores the username and password in plaintext but encoded by an unknown encoding algorithm to me, it seams like base64, but I think it's not,
It seams that any word ...
0
votes
0answers
132 views
Reverse Engineering a Vehicle Identification Number (VIN) encoding
Not sure if this is the right place so please point me to the right place if needed.
I have an input of a VIN (Vehicle Identification Number) number with 17 characters, each character is either an ...
0
votes
0answers
262 views
find a video file in memory dump of a process
I have a player that plays encrypted video files and works like this:
I open an encrypted video file with it
it decrypts the video file and writes it to its memory
and plays the file from the memory ...
