Questions tagged [encryption]
Process of encoding information such that decoding requires the knowledge of some secret (a key). This tag covers questions about obfuscated and encrypted programs, or tools, but higher level questions may get better answers on Cryptography Stack Exchange.
179
questions
0
votes
0answers
30 views
How can I retrieve dropped PE files from a dropper without the program necessary to execute the dropper?
I have a file (dll) that is a Cobalt Strike dropper based on the strings found inside. The file has an "entry0", and other general windows specific functions. The file appears to be ...
0
votes
0answers
31 views
Tools to generate code to hidde hardcoded critical data
I have retrieve a code file related to security topic, that contains a piece of code to protect harcoded value of RSA key against static analysis:
// Byte values of encrypted key
//121, 217, 79, 9, ...
0
votes
0answers
123 views
Decrypting my router config backup file
so I have this ONT router/mode (ZTE F660) provided to me by the ISP, it's interface contains very little settings and I wanted to see if I can get anything useful from it's config backup file. The ...
0
votes
0answers
37 views
Huawei HG8145V5 user credentials
I have Huawei HG8145V5 and I backed up config file which contains encrypted root and admin credentials, but I dont know how they are encrypted. Here is an example of one password
$2:2`0Ui@T0@O0;x+V:x&...
0
votes
0answers
37 views
is it possible to get code out of chipset through reverse engineering?
for example, encryption/decryption mechanism was inbuilt in a chip, to get the code that performs this mechanisms, is there some ways you can get this code through reverse engineering? what tools and ...
0
votes
0answers
78 views
Decoding a ZTE H188A config. file
I got this router from my ISP it's fairly good but most of the config options are grayed out. I wanted to decrypt the config file and change those options form there. after some research I found this ...
0
votes
1answer
19 views
Issue in opening a file type after unzipping
I downloaded a file from this link https://storage.cloud.google.com/gresearch/smallcnnzoo-dataset/cifar10.tar.xz, and I successfully downloaded the archive file.I unzipped it using 7-Zip. After ...
1
vote
0answers
107 views
Decrypting .PNG files from Chinese mobile game
Amateur here.
I'm working on decrypting a couple of .PNG files extracted from an .apk of a Chinese One-Punch Man mobile game. They're identified as .PNGs by Windows, but can't be opened by any ...
2
votes
2answers
323 views
How can I decrypte the data in this SQLite Database file
I have this SQLite Database file
https://we.tl/t-RwKqYyS3D7
When I open it in notepad++, I got some decoded strings. I was trying to clean it and show only the strings without the symboles but then I ...
1
vote
0answers
112 views
where can i find decryption key inside of the dll file?
I am testing a dll file , in a C# console app , and by the looks of it the dll file sends a web request with encrypted and then encoded values to a remote server.
after intercepting and analyzing the ...
1
vote
0answers
83 views
How to create an algorithm in C...(or C# or C++, basically in "a programming language")
After a LOT of sending challenges and recording the responses I've 'broken' the "encryption" in my car's immobiliser...the reason for doing it is so I can use the engine and transmission in ...
0
votes
0answers
177 views
Stuck attempting to reverse Denon AVR encrypted update
I am trying to RE the update file for a Denon AVR for fun and to see if I can figure out how to access the device's webserver which otherwise returns HTTP 403, and how to enable Pandora on my EU ...
0
votes
0answers
99 views
Reverse engineering encrypted router backup config file
My router has a config backup function that downloads a base64-encoded file.
After decoding the file, it's clear that it is encrypted:
I have tried redownloading the config, both after having changed ...
0
votes
0answers
73 views
how to get rid of this obfuscator?
i somehow know that this is Confuserex but noting working agter many try the file is still unreadable. is there a way to? or im just bad...
ps.i unpack this from the exe file that only has PE(maybe ...
0
votes
1answer
35 views
The Logic Of Incremental Data on Serial Communication Encoding
These are the serial communication reverse values.
I am trying to understand the logic behind this.
I am pretty sure that 2 bytes represent 1 byte(high byte and low byte), values are correct.
I tried ...
0
votes
0answers
53 views
Understand the AES encryption mode
I am reverse engineering a software that implements its own encryption over HTTP. The implementation is very simple, the client has the server's public key which it uses to encrypt the data it sends ...
0
votes
1answer
113 views
Java Help Understanding RSA Encrypt/Decrypt file and SD card
I was directed this way from the main superuser site:
I have zero experience with Java or Android apps (I have coding experience in C) and tried reverse engineering a [now defunct/unsupported] app ...
1
vote
1answer
568 views
How to find encrypted strings in an executable?
I am trying to reverse engineer an executable.
I am using Process explorer to dump all strings present in the exe image, and from the process's RAM when it is running.
The two dumps return a ...
4
votes
1answer
192 views
Find Decryption algorithm of an encryption algorithm
I recently work on an algorithm that encrypt some data with 8 byte length.
I worked hard and I successful to get this algorithm, but I need decryption of this algorithm.
How I can invert it?
I guess ...
1
vote
1answer
189 views
Best way to protect source code of exe that being loaded by Assembly.Load method
I am protecting an exe that being loaded by Assembly.Load... This makes everything difficult because most obfuscators causing it to not work properly or not load at all. I used confuserEx Ameteurz ...
1
vote
0answers
44 views
Is this executable packed, encrypted or what?
I have an executable that I'd like to patch, but I'm very new to RE. I some have assembly knowledge of x86 as first learned language last year, but not of this one: PowerPC (in this case is PPC32), ...
1
vote
0answers
292 views
ZTE AES-256-CBC Encrypted backup config file
i tried router pass view tool on (a closed source one) it's able to decrypt the older version of it V3.1. tested on two routers of it and it gave me this output
Encrypted Data Start Position: 227
...
1
vote
0answers
62 views
How does one start with reversing router config encryption?
There is not enough info on the web from what I have seen.
Most write ups/guides/blog-posts are like this:
They provide only the decrypt/encrypt script-tool with how to run it and nothing else
They ...
0
votes
0answers
1k views
Need Help with decryption backup config.bin file "ZTE ZXHN H267N v1.1"
hi i'm trying to decrypt config.bin file from new router I got from my company, I tried a tool found on github "https://github.com/mkst/zte-config-utility" I got this ERROR:
python3 examples/...
1
vote
2answers
92 views
Figuring out encryption technique of network connection
I am trying to reverse a virtualized program (using VMProtect 3.4.x). I decided to hook certain functions of the program such as the winsocks library send() and recv().
This is how it looks like:
[...
0
votes
0answers
28 views
Is it possible to somehow derive the decryption key for iOS app binaries?
While disassembling an IPA downloaded directly from the App Store CDN, I noticed that the binary had an unusually large entropy. Looking this occurrence up confirmed my suspicion that it was encrypted,...
0
votes
2answers
1k views
Need help with ZTE router config.bin file decryption and encryption
bin file extracted from a ZXHN H168N V3.1. RouterPassView is able to decrypt the file successfully but the tool can't re-encrypt the file, it gave me some info about the method used to decrypt here ...
0
votes
0answers
54 views
Looking for encoding of SVG data
I have some SVG images stored in a database; but I am not able to find out which encoding is used.
Unfortunately, I don't have the exact SVG plain text available. The given examples "probably&...
0
votes
0answers
38 views
Reverse engineering algorithm for get keys
I have 2 groups of 4 byte and from this i have to get a key that have 6 byte.
Im trying to get the algorithm but i cant in any way.
The 1st group have only one bit different from the 2nd one.
Idk if i ...
0
votes
1answer
3k views
Trying to decode the Ontario Driver's License #
**The Ontario Driver's License follows the below format:**
LXxxx-FFFMY-YMMDD
Where:
L is the first letter of your last name
X is a numeric encoding of the last name (See Chart 1 below)
xxx is a ...
1
vote
1answer
318 views
Encrypted firmware, need some hints
I'm relatively new to firmware reverse engineering but it has been a very interesting journey, loved it!
I am currently trying to crack open the firmware of my Panasonic Lumix DC-G9 camera to see if I ...
0
votes
1answer
352 views
Android packageInfo signature
Are there anyways I can learn what packageInfo.signatures[0] is so I can use it to apply the same algorithm in Python.
To further explain:
private static SecretKeySpec a(Context context) {
...
0
votes
0answers
36 views
help about methodology
I am a beginner in reverse engineering.
For a challenge I need to reverse a code in python this code use enigma algorithm :
To found the good configuration to decode the enigma code received.
The ...
1
vote
0answers
68 views
Trying to replicate encryption of an android app
I was trying to replicate/copy the encryption of an android app which uses CryptoJS with sha256 encryption as having seen in the source code of the android app. fingerprinting the app, it was built ...
2
votes
0answers
82 views
Which value is used for verifiying Zip password?
I am studying the way that can be used to check if a given password for an encrypted zip file is correct or not. I see this link:
How does a zip file detect a correct password?
In the answer of this ...
3
votes
1answer
259 views
How can I retrieve the encryption key in this code?
can anyone explain the following code? is it possible to retrieve the encryption key?
I think the code was heavily obfuscated in addition to obfuscation, I can recognize it is using algorithms like ...
0
votes
0answers
91 views
How to call strongly encrypted DLL from Resources?
There is a program. This program accepts plugins. Plugins written with C#. I have to encrypt it. But when I use strong obfuscators I have exception. Program doesn't read. How can I fix that ? How can ...
1
vote
2answers
251 views
NOPed encrypt/decrypt functions in a Path of Exile client and now it crashes without message. Next step?
I am reversing an old Path of Exile client with the purpose of building an emulator. I managed to reach the character select screen in a newer, 64-bit client but I am struggling to make the same ...
4
votes
1answer
932 views
RE Huawei HG8145V5 user credentials
I have Huawei HG8145V5 and I backed up config file which contains encrypted root and admin credentials, but I dont know how they are encrypted. Here is an example of one password
$2*FuHXY<y5$...
0
votes
1answer
86 views
Encrypted image format
I am trying to reverse a simple image format for bitmap data with an indexed colour palette. The structure of the file is generally clear and I am able to extract the size of the picture and the ...
0
votes
0answers
297 views
reversing xiaomi update firmware encrypted?
I am playing around with a xiaomi firmware [mijia_4k_0.6.16.02] for a camera
Running binwalk on the file I see this output
DECIMAL HEXADECIMAL DESCRIPTION
----------------------------------...
2
votes
1answer
81 views
How to “unprotect” malicious workbook without knowing password
Right now I'm looking at an office document (most likely rtf based on it exploiting equation editor) that opens just fine when you double click it, but on further examination in a hex editor and in ...
0
votes
1answer
37 views
Linux encryption/luks/pymouth password scripts corruption
I noticed that the bootup scripts that collect the password for full disk encryption on linux (fedora-31) were displaying corrupted text. The kind that looked like binary data being printed at text:
...
1
vote
1answer
280 views
Python self decryption script, as mean of obfuscation
I have a software with an embedded python interpreter. The software can open upon startup a given .py script and execute it. Let's assume that in my python environment I can't open other files, and I ...
1
vote
0answers
44 views
Possibly infected image
Long story short I'v downloaded a template for my website and instead of images it has the .html files included, and at the beginning those html files do include PNG IHDR , and they are being loaded ...
5
votes
2answers
628 views
Is there a way to confirm and decompress files that I suspect are compressed with a very early format of PKZIP?
I have a very large number of files (tens of thousands) who's binary all begins with 0x00 0x06. They do not open with 7-ZIP. I notice also that all Office files seem to share the same next 32 bytes.
...
0
votes
0answers
137 views
How to recover randomly generated private key from a Program that implements Diffie Hellman Exchange
This program implements Diffie Hellman key Exchange, a pair of random private keys are generated every time the program runs. How should I go about finding the random number generation subroutine ...
2
votes
2answers
500 views
PE32+ executable : .text segment encryption
I am working on PE segment encryption(in C++). I completed the PE32 .text segment encryption. I added stub segment to the PE that will decrypt .text segment at runtime. Used inline assembly in the ...
1
vote
2answers
664 views
Way to know if firmware is compressed
I dumped a wifi firmware of ps3 console but it seems that this firmware is compressed.
Here you can have some informations : https://www.psdevwiki.com/ps3/Wifi_Firmware
What can I do to decompress it ...
1
vote
2answers
132 views
Strings weirdly split in binary
Recently I have come across a few parts in a binary that looked odd to me, and I wanted to ask if this is something common compilers do, and if there is a way to undo it.
(The binary is from a raw ...
