Questions tagged [encryption]

Process of encoding information such that decoding requires the knowledge of some secret (a key). This tag covers questions about obfuscated and encrypted programs, or tools, but higher level questions may get better answers on Cryptography Stack Exchange.

Filter by
Sorted by
Tagged with
1
vote
0answers
19 views

Decrypting .PNG files from Chinese mobile game

Amateur here. I'm working on decrypting a couple of .PNG files extracted from an .apk of a Chinese One-Punch Man mobile game. They're identified as .PNGs by Windows, but can't be opened by any ...
2
votes
2answers
87 views

How can I decrypte the data in this SQLite Database file

I have this SQLite Database file https://we.tl/t-RwKqYyS3D7 When I open it in notepad++, I got some decoded strings. I was trying to clean it and show only the strings without the symboles but then I ...
0
votes
0answers
653 views

Need Help with decryption backup config.bin file “ZTE ZXHN H267N v1.1”

hi i'm trying to decrypt config.bin file from new router I got from my company, I tried a tool found on github "https://github.com/mkst/zte-config-utility" I got this ERROR: python3 examples/...
1
vote
0answers
49 views

where can i find decryption key inside of the dll file?

I am testing a dll file , in a C# console app , and by the looks of it the dll file sends a web request with encrypted and then encoded values to a remote server. after intercepting and analyzing the ...
3
votes
2answers
397 views

PE32+ executable : .text segment encryption

I am working on PE segment encryption(in C++). I completed the PE32 .text segment encryption. I added stub segment to the PE that will decrypt .text segment at runtime. Used inline assembly in the ...
1
vote
1answer
323 views

Need help with ZTE router config.bin file decryption and encryption

bin file extracted from a ZXHN H168N V3.1. RouterPassView is able to decrypt the file successfully but the tool can't re-encrypt the file, it gave me some info about the method used to decrypt here ...
1
vote
0answers
76 views

How to create an algorithm in C…(or C# or C++, basically in “a programming language”)

After a LOT of sending challenges and recording the responses I've 'broken' the "encryption" in my car's immobiliser...the reason for doing it is so I can use the engine and transmission in ...
0
votes
0answers
46 views

Stuck attempting to reverse Denon AVR encrypted update

I am trying to RE the update file for a Denon AVR for fun and to see if I can figure out how to access the device's webserver which otherwise returns HTTP 403, and how to enable Pandora on my EU ...
0
votes
0answers
30 views

Reverse engineering encrypted router backup config file

My router has a config backup function that downloads a base64-encoded file. After decoding the file, it's clear that it is encrypted: I have tried redownloading the config, both after having changed ...
4
votes
1answer
558 views

RE Huawei HG8145V5 user credentials

I have Huawei HG8145V5 and I backed up config file which contains encrypted root and admin credentials, but I dont know how they are encrypted. Here is an example of one password $2*FuHXY<y5$...
0
votes
1answer
1k views

Trying to decode the Ontario Driver's License #

**The Ontario Driver's License follows the below format:** LXxxx-FFFMY-YMMDD Where: L is the first letter of your last name X is a numeric encoding of the last name (See Chart 1 below) xxx is a ...
0
votes
1answer
28 views

The Logic Of Incremental Data on Serial Communication Encoding

These are the serial communication reverse values. I am trying to understand the logic behind this. I am pretty sure that 2 bytes represent 1 byte(high byte and low byte), values are correct. I tried ...
0
votes
0answers
55 views

how to get rid of this obfuscator?

i somehow know that this is Confuserex but noting working agter many try the file is still unreadable. is there a way to? or im just bad... ps.i unpack this from the exe file that only has PE(maybe ...
4
votes
6answers
45k views

Decoding New Jersey Driver's License Codes

Driver's License numbers in New Jersey aren't random. They follow the format: Affff lllii mmyye, where A is the first letter of the person's last name, ffff is some mapping of the remaining letters of ...
0
votes
1answer
55 views

Java Help Understanding RSA Encrypt/Decrypt file and SD card

I was directed tyhis way from the main superuser site: I have zero experience with Java or Android apps (have coding experience in C) and tried reverse engineering a [now defunct/unsupported] app ...
0
votes
1answer
86 views

Best way to protect source code of exe that being loaded by Assembly.Load method

I am protecting an exe that being loaded by Assembly.Load... This makes everything difficult because most obfuscators causing it to not work properly or not load at all. I used confuserEx Ameteurz ...
0
votes
0answers
44 views

Understand the AES encryption mode

I am reverse engineering a software that implements its own encryption over HTTP. The implementation is very simple, the client has the server's public key which it uses to encrypt the data it sends ...
1
vote
1answer
246 views

How to find encrypted strings in an executable?

I am trying to reverse engineer an executable. I am using Process explorer to dump all strings present in the exe image, and from the process's RAM when it is running. The two dumps return a ...
2
votes
1answer
607 views

how can i Encrypt a decrypted zte zxhn h108n V2.5 config file?

i have decrypted the config file using a program i found online ( maybe made by python to exe ) so to decrypt using it you type is command into CMD decode_zte_config.exe config.bin config.bin.xml ...
4
votes
1answer
183 views

Find Decryption algorithm of an encryption algorithm

I recently work on an algorithm that encrypt some data with 8 byte length. I worked hard and I successful to get this algorithm, but I need decryption of this algorithm. How I can invert it? I guess ...
11
votes
3answers
16k views

ZTE encrypted backup config file

I was poking around in ZTE Speedport Entry 2i (CPE used mostly in Germany, Slovakia etc, probably custom made for Deutsche Telekom). It's possible to download backup of config from UI. I found out ...
1
vote
1answer
537 views

File reverse engineering - .tbl format

I've been trying to google any information about how can i create a viewer for some custom file formats. In my case I've extracted multiple .tbl files from game sources. This file contains a database ...
1
vote
0answers
42 views

Is this executable packed, encrypted or what?

I have an executable that I'd like to patch, but I'm very new to RE. I some have assembly knowledge of x86 as first learned language last year, but not of this one: PowerPC (in this case is PPC32), ...
1
vote
0answers
55 views

How does one start with reversing router config encryption?

There is not enough info on the web from what I have seen. Most write ups/guides/blog-posts are like this: They provide only the decrypt/encrypt script-tool with how to run it and nothing else They ...
1
vote
0answers
101 views

ZTE AES-256-CBC Encrypted backup config file

i tried router pass view tool on (a closed source one) it's able to decrypt the older version of it V3.1. tested on two routers of it and it gave me this output Encrypted Data Start Position: 227 ...
0
votes
0answers
32 views

Is it possible to successfully clone a Playstation4 partition?

Specifically, this question refers to the possibility of fixing a damaged system partition (causing "Cannot start the PS4" on boot) on a storage device (with many hours of game save data) by ...
1
vote
2answers
82 views

Figuring out encryption technique of network connection

I am trying to reverse a virtualized program (using VMProtect 3.4.x). I decided to hook certain functions of the program such as the winsocks library send() and recv(). This is how it looks like: [...
0
votes
0answers
24 views

Is it possible to somehow derive the decryption key for iOS app binaries?

While disassembling an IPA downloaded directly from the App Store CDN, I noticed that the binary had an unusually large entropy. Looking this occurrence up confirmed my suspicion that it was encrypted,...
2
votes
2answers
2k views

Java - Decipher encrypted classes in a jar file

I have a couple of classes that are encrypted. The class loader must decrypt these before executing in the JVM. The question is, how and where? What can I do to understand who is responsible to ...
0
votes
1answer
2k views

how can i decrypt huawei HG531s v1 config file?

I have tried to follow this guide but libxmlapi.so didn't have the required ATP_GetInfo1 function so i moved to the next file libhttpapi.so it had ATP_GetInfo1 ATP_GetInfo2 ATP_GetInfo3 ...
0
votes
0answers
46 views

Looking for encoding of SVG data

I have some SVG images stored in a database; but I am not able to find out which encoding is used. Unfortunately, I don't have the exact SVG plain text available. The given examples "probably&...
0
votes
0answers
36 views

Reverse engineering algorithm for get keys

I have 2 groups of 4 byte and from this i have to get a key that have 6 byte. Im trying to get the algorithm but i cant in any way. The 1st group have only one bit different from the 2nd one. Idk if i ...
1
vote
1answer
210 views

Encrypted firmware, need some hints

I'm relatively new to firmware reverse engineering but it has been a very interesting journey, loved it! I am currently trying to crack open the firmware of my Panasonic Lumix DC-G9 camera to see if I ...
1
vote
1answer
477 views

Which encryption/decryption algorithm is used in Synology Cloud Sync format 3.0 session key and data encryption?

Background: Based on general information in a whitepaper from Synology, I have reverse engineered the specifics of their Cloud Sync encryption algorithm; see synology-decrypt for details. In this ...
0
votes
0answers
39 views

How to intercept encrypted traffic from windows 10 vm application?

I have a virtualbox virtual machine which is running windows 10 and is running a piece of software (LINE desktop client) which i would like to analyze. Specifically i would like to analyze the traffic ...
4
votes
2answers
5k views

What key is being using to encrypt the key transport in this Zigbee capture?

I am working with a Zigbee system and I have been trying to grab the network key as it is exchanged during pairing. I wasn't having much luck with the combination of TI Packet Sniffer, Wireshark and ...
0
votes
1answer
256 views

Android packageInfo signature

Are there anyways I can learn what packageInfo.signatures[0] is so I can use it to apply the same algorithm in Python. To further explain: private static SecretKeySpec a(Context context) { ...
0
votes
0answers
36 views

help about methodology

I am a beginner in reverse engineering. For a challenge I need to reverse a code in python this code use enigma algorithm : To found the good configuration to decode the enigma code received. The ...
2
votes
0answers
78 views

Which value is used for verifiying Zip password?

I am studying the way that can be used to check if a given password for an encrypted zip file is correct or not. I see this link: How does a zip file detect a correct password? In the answer of this ...
1
vote
0answers
60 views

Trying to replicate encryption of an android app

I was trying to replicate/copy the encryption of an android app which uses CryptoJS with sha256 encryption as having seen in the source code of the android app. fingerprinting the app, it was built ...
3
votes
1answer
205 views

How can I retrieve the encryption key in this code?

can anyone explain the following code? is it possible to retrieve the encryption key? I think the code was heavily obfuscated in addition to obfuscation, I can recognize it is using algorithms like ...
2
votes
2answers
438 views

How can I identify how this string is being encoded so I can replicate it?

A friends company uses an old VB6 application to generate encoded strings to then use in their also old and out of date database system. They have the application running in standalone mode so I can ...
0
votes
0answers
80 views

How to call strongly encrypted DLL from Resources?

There is a program. This program accepts plugins. Plugins written with C#. I have to encrypt it. But when I use strong obfuscators I have exception. Program doesn't read. How can I fix that ? How can ...
12
votes
1answer
4k views

Howto clone Android RSA SecurID Software Token

At the moment I try to figure out how the RSA SecurID Software Token protects itself from getting cloned to another android device. The token I imported has no device binding enabled and I already ...
1
vote
2answers
186 views

NOPed encrypt/decrypt functions in a Path of Exile client and now it crashes without message. Next step?

I am reversing an old Path of Exile client with the purpose of building an emulator. I managed to reach the character select screen in a newer, 64-bit client but I am struggling to make the same ...
0
votes
1answer
74 views

Encrypted image format

I am trying to reverse a simple image format for bitmap data with an indexed colour palette. The structure of the file is generally clear and I am able to extract the size of the picture and the ...
0
votes
0answers
251 views

reversing xiaomi update firmware encrypted?

I am playing around with a xiaomi firmware [mijia_4k_0.6.16.02] for a camera Running binwalk on the file I see this output DECIMAL HEXADECIMAL DESCRIPTION ----------------------------------...
2
votes
1answer
71 views

How to “unprotect” malicious workbook without knowing password

Right now I'm looking at an office document (most likely rtf based on it exploiting equation editor) that opens just fine when you double click it, but on further examination in a hex editor and in ...
0
votes
1answer
32 views

Linux encryption/luks/pymouth password scripts corruption

I noticed that the bootup scripts that collect the password for full disk encryption on linux (fedora-31) were displaying corrupted text. The kind that looked like binary data being printed at text: ...
5
votes
2answers
486 views

Is there a way to confirm and decompress files that I suspect are compressed with a very early format of PKZIP?

I have a very large number of files (tens of thousands) who's binary all begins with 0x00 0x06. They do not open with 7-ZIP. I notice also that all Office files seem to share the same next 32 bytes. ...