Questions tagged [encryption]
Process of encoding information such that decoding requires the knowledge of some secret (a key). This tag covers questions about obfuscated and encrypted programs, or tools, but higher level questions may get better answers on [crypto.stackexchange.com](https://crypto.stackexchange.com/).
137
questions
0
votes
1answer
69 views
Encrypt a function in the exe and decrypt at runtime C++, PE32 [closed]
I want to keep an important function encrypted in the exe and while running the program, decrypt it at run time from memory. After execution of the function, I will encrypt it back in the memory (so ...
0
votes
0answers
78 views
How to recover randomly generated private key from a Program that implements Diffie Hellman Exchange
This program implements Diffie Hellman key Exchange, a pair of random private keys are generated every time the program runs. How should I go about finding the random number generation subroutine ...
2
votes
1answer
101 views
PE32+ executable : .text segment encryption
I am working on PE segment encryption(in C++). I completed the PE32 .text segment encryption. I added stub segment to the PE that will decrypt .text segment at runtime. Used inline assembly in the ...
1
vote
2answers
115 views
Way to know if firmware is compressed
I dumped a wifi firmware of ps3 console but it seems that this firmware is compressed.
Here you can have some informations : https://www.psdevwiki.com/ps3/Wifi_Firmware
What can I do to decompress it ...
0
votes
0answers
47 views
Packet: Game last byte encrypted?
12:14
WSARecv()
C3-73-3E-BE-36-2F-14-37-37
F4-44-09-89-01-18-23-00-00
------------------------------------------
12:14
send()
C3-73-38-31-0E-35-EE-35-A5-35-7F-34-37-37-8D
F4-44-0F-06-39-02-D9-02-92-02-...
1
vote
2answers
76 views
Strings weirdly split in binary
Recently I have come across a few parts in a binary that looked odd to me, and I wanted to ask if this is something common compilers do, and if there is a way to undo it.
(The binary is from a raw ...
3
votes
1answer
127 views
How does IPA decryption works?
All IPAs being downloaded from AppStore gets encrypted on servers as part of FairPlay DRM. But decryption is accomplished on local device. As far as I know there is some hardware module which contains ...
0
votes
0answers
91 views
how can i Encrypt a decrypted zte zxhn h108n V2.5 config file?
i have decrypted the config file using a program i found online ( maybe made by python to exe )
so to decrypt using it you type is command into CMD
decode_zte_config.exe config.bin config.bin.xml ...
0
votes
0answers
57 views
How does windows 10 v.1803 save the password in the SAM file?
I'm doing a search on how windows 10 saves hashed passwords in the SAM file. From this article I suppose that Windows does this:
If the password is 123456 and the user has RID 000003E9:
CALCULATION ...
0
votes
1answer
95 views
Need help identifying a -possibly- encrypted string
I'm having some trouble building an app that gets data from a database to keep a log of files added to a website.
Most URLs are generated from a file ID and a time stamp, some of those URLs are ...
2
votes
2answers
179 views
How to identify the encoding performed on this string
I have an old application that stores the username and password in plaintext but encoded by an unknown encoding algorithm to me, it seams like base64, but I think it's not,
It seams that any word ...
0
votes
0answers
80 views
Reverse Engineering a Vehicle Identification Number (VIN) encoding
Not sure if this is the right place so please point me to the right place if needed.
I have an input of a VIN (Vehicle Identification Number) number with 17 characters, each character is either an ...
0
votes
0answers
91 views
find a video file in memory dump of a process
I have a player that plays encrypted video files and works like this:
I open an encrypted video file with it
it decrypts the video file and writes it to its memory
and plays the file from the memory ...
0
votes
1answer
438 views
how can i decrypt huawei HG531s v1 config file?
I have tried to follow this guide but
libxmlapi.so didn't have the required ATP_GetInfo1 function
so i moved to the next file libhttpapi.so
it had
ATP_GetInfo1
ATP_GetInfo2
ATP_GetInfo3
...
-1
votes
1answer
234 views
Determining the hash algorithm used [closed]
I have some test data:
Test 1
Text: pass1234
Salt: 33b9d87b83c097ce3ea6e6f84a298f839aafc6d7aa23d909a43ac94bdee35ddf
Hash: 61477724c136fb285918114792685a4d
Test 2
Text: test1234
Salt: ...
0
votes
0answers
62 views
How to guess the key of XOR encryption in java?
I am trying to find the key of XOR encrypted string in java. It is very much probable that the key is eight characters long. I have the encrypted string.
I am not able to understand how to go ...
3
votes
1answer
116 views
String Encoding and Decoding Method
so I came across the following string encoding method in python.
def encode(the_string):
encoded_string = ''
rotations = ord(the_string[-1]) + 5
for i in range(0, len(the_string)):
...
0
votes
1answer
105 views
Is it possible to recover the key to a decrypted file?
Is it possible to recover the key to a decrypted file if you have the initialization vector and it uses RijndaelManaged? If so how?
The file I want to recover the key from is a xml that looks like ...
0
votes
1answer
73 views
me_cleaner and fwupd, or manipulating UEFI .cab files
I'd like to extract a plain dump of the UEFI firmware of my laptop (1:1 copy of the flash content, often called .bin or .rom files) from the .cap file, so that I can modify it slightly with me_cleaner....
1
vote
1answer
124 views
Tool to search known hash/encryption algo in files in Windows
I am looking for a tool (the best would be an Ida plugin) that can search files in a folder for a known hash (md5/sha1 etc.) and encryption (aes /rsa etc.).
I know an Ida plugin called FindCrypt2 but ...
0
votes
1answer
63 views
Where can I go to learn about decryption? [closed]
I understand the basics of encryption and decryption, but I don't know where to go to talk to people and learn more. Are there any forums or resources to look at to learn more?
For example, I was ...
-1
votes
2answers
958 views
XOR encryption - How to find the key?
I'm trying to solve a crackme which basically uses a XOR encryption scheme in which the password is used as the key to an encrypted buffer which is subsequently executed. The following is the ...
1
vote
0answers
280 views
Reverse crypto algorythm, based on AES
Hello!
I'm working on reversing one library (shared object) written for ARM architecture. It's obfuscated or packed with something pretty strong what makes debugging much harder and almost impossible ...
1
vote
1answer
262 views
Reversing a Java digest function, with known public key and source code
A Java application verifies that an XML string that came from a clearnet server (no SSL) has not been tampered, using a message digest. It does so with a public key stored locally, accessed with the ...
0
votes
1answer
109 views
how to find private Key and passphrase stored inside a program?
There are some files (drivers) that are encrypted, and these files are working in a program that is installed in my computer. The program using these files needs to decrypt them. I am sure that the ...
0
votes
1answer
116 views
Algorithm to find secret cipher S-box in bin file [closed]
Is there any algorithm that searches through binary file and detects existence of secret S-box built from look-up table (4 bit or 8 bit)? Consider the sbox is unavailable for public
The attached bin ...
-2
votes
1answer
432 views
How do i find the decryption key for a encrypted text file [closed]
So context i have a game and a encrypted save file. My thoughts were how to find the decryption key in reverse engineering my game .I watched tuts but i think this topic isnt much detailed so i need ...
2
votes
0answers
106 views
How should I got about working out the format for this psp game?
I have been attempting to reverse engineer a format for a visual novel psp game ('Mirai Nikki RE: WRITE - 13 Ninme No Nikki Shoyuusha') and I have come to the understanding that the format works as a ...
-1
votes
1answer
70 views
How to use Python while debugging in IDA
I'm debugging an .exe file in IDA.
At a specific point during debugging, I want the Python code to automatically take the data in *(eax+8) and encrypt it with that module and print the result to file ...
-2
votes
1answer
914 views
How to install ida plugin to identify encryption function
I saw here How to identify known encryption algorithm? the IDA plugin https://github.com/nihilus/IDA_Signsrch
I don't understand how to install it .
In the INSTALL I saw coppy the plug-in and ...
2
votes
1answer
885 views
How to identify known encryption algorithm?
I reverse an .exe file with IDA.
I see a function that appears to be encrypting something by generating some random numbers.
It there any tool to identify if it is a known encryption algorithm?
2
votes
1answer
124 views
How can I generate the recovery password on a legacy system (Original company is out of business) running on my local machine?
I'm attempting to use a legacy systems recovery feature that typically required calling/faxing a company that is no longer around.
Basically, the system was designed to go into a recovery mode and ...
-3
votes
1answer
543 views
Identification of AES portion code in binary
I want to locate AES code portion in binary after reverse engineering. I have tried to locate manually and using plugin findcrypt2 but I was not successful. Kindly show me a direction so that I can ...
1
vote
1answer
3k views
Decrypting SQLite Database with key
I have a SQLite database that contains a dictionary (just words and definitions) that can be opened with free but proprietary software. To use with the software, it requires an 'unlock' key, which I ...
0
votes
1answer
122 views
Does someone recognize this “lookup table”? (used for xor encryption)
This table is part of the packet encryption of an old game for which I am developing a server.
The crypto algorithm doesn't just xor the password with the message.
It uses a multiple of the ascii ...
1
vote
1answer
458 views
Binary encryption
I'd like to ask your help to understand the algorithm used to encrypt these hex/bin firmware (for an ARM-Cortex M4 microcontroller).
In the tar file above you can find different firmware versions.
...
2
votes
0answers
976 views
Arm hex firmware reverse
it has been a couple of months that I'm working on the firmware produced by a company that makes (not licensed) gamepad console adapters.
One of my goal was to understand how they bypassed (hacked) ...
0
votes
1answer
195 views
Encrypted String? [closed]
(I made a topic but I was ask'd to re-made it)
Hi! I have a program and when I want to decompile/dissamble it finish and when I inspect the code everywhere where should be some filenames there are .(...
3
votes
1answer
4k views
Finding the encryption key in a binary - IDA Pro and how an S-box might be represented in the binary
In practicing reading source code and analysing I've been looking at a program called aescrypt2_huawei which floats around the web and encrypts/decrypts the XML config file from Huawei routers like ...
1
vote
0answers
367 views
Need Help decrypting .luac files
I have been recently trying to decrypt .luac files inside an encrypted android app. I tried to follow some of the previous threads here but the following frida script didn't give any output.
...
2
votes
1answer
239 views
reverse checksum algorithm
I'm working on this pseudocode trying to find the correct input for the expected calculated value (i'm not sure if i can call it a checksum). I can't focus enough to generate the reverse algorithm, ...
1
vote
1answer
204 views
Unable to find Send/Recv type calls in Network Application
Target is protected by nProtect Gameguard. Packets are encrypted. Goal is to obtain unencrypted packet information via the client.
I obtained the free, 5.0 version, of IDA, and disassembled GVOnline....
2
votes
1answer
5k views
How do Enigma, Themida and VMProtect compare to each other?
I'll be releasing a piece of software soon and I'm looking for good protectors. The three that came to my attention were: Enigma, Themida and VMProtect. I searched a lot online but I couldn't find ...
4
votes
2answers
2k views
TP-Link encrypted backup file TX-VG1530
I have been trying to wrap my head round this stuff so bear with me.
I have a Tp-Link TX-VG1530. From the gui you can download the config file however the file is encrypted, I include a portion of ...
1
vote
0answers
691 views
How to decrypt .jpg files of comics app in a C Program?
I'm trying to decrypt jpg images of comics I purchased in my comic reader app on android but neither I can view them (after copying from SD card to Windows desktop) nor can I convert them to pdf to ...
2
votes
2answers
393 views
Emulation Project - GameGuard Protected Client
I'm not new to MMO Server Emulation, but I am new to working with a protected Client, and have very basic RCE skills. I would appreciate some direction, and maybe this won't be possible, given the ...
0
votes
1answer
364 views
How does a Smartcard work? [duplicate]
It appears there is more than just flash memory on Smartcards.
Presumably there is also some sort of microprocessor.
So then along comes this article:
Crippling crypto weakness opens millions ...
3
votes
0answers
645 views
Obtaining the decryption keys for Super Mario Run (Android/iOS Game)
Super Mario Run is a il2cpp Unity game. Most of its assets are downloaded in-game through http requests. I particularly want the OGG files of the music. I can see the list of their names comes from ...
4
votes
2answers
1k views
Identify password generation algorithm
I'm a newbie who just started own way through reverse engineering so I apologize if my question is not appropriate.
Currently I'm going through different Crackme puzzles and now I'm stuck. I've spend ...
0
votes
1answer
163 views
Checksum in CAN message
I'm trying to fake a CAN message, but I'm not able to understand how the 8-bit checksum is calculated. The checksum follows a pattern along with a 4-bit rolling counter. As long as the data of the ...
