Questions tagged [encryption]

Process of encoding information such that decoding requires the knowledge of some secret (a key). This tag covers questions about obfuscated and encrypted programs, or tools, but higher level questions may get better answers on Cryptography Stack Exchange.

Filter by
Sorted by
Tagged with
0
votes
0answers
18 views

Reverse engineering algorithm for get keys

I have 2 groups of 4 byte and from this i have to get a key that have 6 byte. Im trying to get the algorithm but i cant in any way. The 1st group have only one bit different from the 2nd one. Idk if i ...
9
votes
3answers
13k views

ZTE encrypted backup config file

I was poking around in ZTE Speedport Entry 2i (CPE used mostly in Germany, Slovakia etc, probably custom made for Deutsche Telekom). It's possible to download backup of config from UI. I found out ...
0
votes
0answers
38 views

Trying to decode the Ontario Driver's License #

**The Ontario Driver's License follows the below format:** LXxxx-FFFMY-YMMDD Where: L is the first letter of your last name X is a numeric encoding of the last name (See Chart 1 below) xxx is a ...
4
votes
4answers
35k views

Decoding New Jersey Driver's License Codes

Driver's License numbers in New Jersey aren't random. They follow the format: Affff lllii mmyye, where A is the first letter of the person's last name, ffff is some mapping of the remaining letters of ...
1
vote
1answer
83 views

Encrypted firmware, need some hints

I'm relatively new to firmware reverse engineering but it has been a very interesting journey, loved it! I am currently trying to crack open the firmware of my Panasonic Lumix DC-G9 camera to see if I ...
1
vote
1answer
351 views

Which encryption/decryption algorithm is used in Synology Cloud Sync format 3.0 session key and data encryption?

Background: Based on general information in a whitepaper from Synology, I have reverse engineered the specifics of their Cloud Sync encryption algorithm; see synology-decrypt for details. In this ...
0
votes
0answers
35 views

How to intercept encrypted traffic from windows 10 vm application?

I have a virtualbox virtual machine which is running windows 10 and is running a piece of software (LINE desktop client) which i would like to analyze. Specifically i would like to analyze the traffic ...
2
votes
1answer
254 views

PE32+ executable : .text segment encryption

I am working on PE segment encryption(in C++). I completed the PE32 .text segment encryption. I added stub segment to the PE that will decrypt .text segment at runtime. Used inline assembly in the ...
4
votes
2answers
5k views

What key is being using to encrypt the key transport in this Zigbee capture?

I am working with a Zigbee system and I have been trying to grab the network key as it is exchanged during pairing. I wasn't having much luck with the combination of TI Packet Sniffer, Wireshark and ...
1
vote
1answer
391 views

how can i Encrypt a decrypted zte zxhn h108n V2.5 config file?

i have decrypted the config file using a program i found online ( maybe made by python to exe ) so to decrypt using it you type is command into CMD decode_zte_config.exe config.bin config.bin.xml ...
0
votes
1answer
78 views

Android packageInfo signature

Are there anyways I can learn what packageInfo.signatures[0] is so I can use it to apply the same algorithm in Python. To further explain: private static SecretKeySpec a(Context context) { ...
0
votes
0answers
32 views

help about methodology

I am a beginner in reverse engineering. For a challenge I need to reverse a code in python this code use enigma algorithm : To found the good configuration to decode the enigma code received. The ...
0
votes
0answers
23 views

Create Custom Packers

I scanned many PE files. Some files are not recognized as packed although they are packed. These are most difficult to reverse. Can you suggest me any tutorial for creating such packers or to pack ...
0
votes
0answers
75 views

Obfuscated and/or encrypted firmware?

I own 3 samples file of a firmware but I can't determine if it's obfuscated and/or encrypted. Could you give some hint about it? Here is the following samples: Sample 1 Sample 2 Sample 3
2
votes
0answers
76 views

Which value is used for verifiying Zip password?

I am studying the way that can be used to check if a given password for an encrypted zip file is correct or not. I see this link: How does a zip file detect a correct password? In the answer of this ...
1
vote
0answers
54 views

Trying to replicate encryption of an android app

I was trying to replicate/copy the encryption of an android app which uses CryptoJS with sha256 encryption as having seen in the source code of the android app. fingerprinting the app, it was built ...
0
votes
0answers
65 views

Is this algorithm reversable?

b1 = MD5(S + RA)____|____ c(1) = p1 xor b1 b2 = MD5(S + c(1))____|____ c(2) = p2 xor b2 . . . . . . bi = MD5(S + c(i-1))____|____ ...
0
votes
0answers
40 views

Identify encrypt /decrypt rsa function

I have arm static binary that I know it use RSA. How can I find the encrypt/decrypt function?
3
votes
1answer
160 views

How can I retrieve the encryption key in this code?

can anyone explain the following code? is it possible to retrieve the encryption key? I think the code was heavily obfuscated in addition to obfuscation, I can recognize it is using algorithms like ...
2
votes
2answers
383 views

How can I identify how this string is being encoded so I can replicate it?

A friends company uses an old VB6 application to generate encoded strings to then use in their also old and out of date database system. They have the application running in standalone mode so I can ...
0
votes
0answers
31 views

How to call strongly encrypted DLL from Resources?

There is a program. This program accepts plugins. Plugins written with C#. I have to encrypt it. But when I use strong obfuscators I have exception. Program doesn't read. How can I fix that ? How can ...
12
votes
1answer
3k views

Howto clone Android RSA SecurID Software Token

At the moment I try to figure out how the RSA SecurID Software Token protects itself from getting cloned to another android device. The token I imported has no device binding enabled and I already ...
1
vote
2answers
89 views

NOPed encrypt/decrypt functions in a Path of Exile client and now it crashes without message. Next step?

I am reversing an old Path of Exile client with the purpose of building an emulator. I managed to reach the character select screen in a newer, 64-bit client but I am struggling to make the same ...
1
vote
0answers
107 views

RE Huawei HG8145V5 user credentials

I have Huawei HG8145V5 and I backed up config file which contains encrypted root and admin credentials, but I dont know how they are encrypted. Here is an example of one password $2*FuHXY<y5$...
0
votes
1answer
67 views

Encrypted image format

I am trying to reverse a simple image format for bitmap data with an indexed colour palette. The structure of the file is generally clear and I am able to extract the size of the picture and the ...
0
votes
0answers
154 views

reversing xiaomi update firmware encrypted?

I am playing around with a xiaomi firmware [mijia_4k_0.6.16.02] for a camera Running binwalk on the file I see this output DECIMAL HEXADECIMAL DESCRIPTION ----------------------------------...
0
votes
0answers
34 views

How to bypass encrypted disk Android pin lock?

I have a forgotten pass code of my android device which is encrypted and ask password before boot time. How can I recover the pass or my data...
2
votes
1answer
67 views

How to “unprotect” malicious workbook without knowing password

Right now I'm looking at an office document (most likely rtf based on it exploiting equation editor) that opens just fine when you double click it, but on further examination in a hex editor and in ...
0
votes
1answer
28 views

Linux encryption/luks/pymouth password scripts corruption

I noticed that the bootup scripts that collect the password for full disk encryption on linux (fedora-31) were displaying corrupted text. The kind that looked like binary data being printed at text: ...
4
votes
2answers
245 views

Is there a way to confirm and decompress files that I suspect are compressed with a very early format of PKZIP?

I have a very large number of files (tens of thousands) who's binary all begins with 0x00 0x06. They do not open with 7-ZIP. I notice also that all Office files seem to share the same next 32 bytes. ...
0
votes
2answers
240 views

Checksum in CAN message

I'm trying to fake a CAN message, but I'm not able to understand how the 8-bit checksum is calculated. The checksum follows a pattern along with a 4-bit rolling counter. As long as the data of the ...
1
vote
1answer
115 views

Python self decryption script, as mean of obfuscation

I have a software with an embedded python interpreter. The software can open upon startup a given .py script and execute it. Let's assume that in my python environment I can't open other files, and I ...
1
vote
0answers
43 views

Possibly infected image

Long story short I'v downloaded a template for my website and instead of images it has the .html files included, and at the beginning those html files do include PNG IHDR , and they are being loaded ...
0
votes
0answers
96 views

How to recover randomly generated private key from a Program that implements Diffie Hellman Exchange

This program implements Diffie Hellman key Exchange, a pair of random private keys are generated every time the program runs. How should I go about finding the random number generation subroutine ...
1
vote
2answers
223 views

Way to know if firmware is compressed

I dumped a wifi firmware of ps3 console but it seems that this firmware is compressed. Here you can have some informations : https://www.psdevwiki.com/ps3/Wifi_Firmware What can I do to decompress it ...
0
votes
0answers
67 views

Packet: Game last byte encrypted?

12:14 WSARecv() C3-73-3E-BE-36-2F-14-37-37 F4-44-09-89-01-18-23-00-00 ------------------------------------------ 12:14 send() C3-73-38-31-0E-35-EE-35-A5-35-7F-34-37-37-8D F4-44-0F-06-39-02-D9-02-92-02-...
6
votes
1answer
269 views

How does IPA decryption works?

All IPAs being downloaded from AppStore gets encrypted on servers as part of FairPlay DRM. But decryption is accomplished on local device. As far as I know there is some hardware module which contains ...
0
votes
1answer
100 views

Need help identifying a -possibly- encrypted string

I'm having some trouble building an app that gets data from a database to keep a log of files added to a website. Most URLs are generated from a file ID and a time stamp, some of those URLs are ...
4
votes
2answers
3k views

TP-Link encrypted backup file TX-VG1530

I have been trying to wrap my head round this stuff so bear with me. I have a Tp-Link TX-VG1530. From the gui you can download the config file however the file is encrypted, I include a portion of ...
1
vote
2answers
93 views

Strings weirdly split in binary

Recently I have come across a few parts in a binary that looked odd to me, and I wanted to ask if this is something common compilers do, and if there is a way to undo it. (The binary is from a raw ...
1
vote
2answers
16k views

Driver's Licence Last Name Numbering Format (Ontario, Quebec, New Jersey)?

So I found out that Ontario Driver's Licences have the following format: LXXXX - NNNIY - YMMDD L - first letter of last name XXXX - number referring to your last name NNN - number referring to your ...
0
votes
1answer
1k views

how can i decrypt huawei HG531s v1 config file?

I have tried to follow this guide but libxmlapi.so didn't have the required ATP_GetInfo1 function so i moved to the next file libhttpapi.so it had ATP_GetInfo1 ATP_GetInfo2 ATP_GetInfo3 ...
2
votes
2answers
204 views

How to identify the encoding performed on this string

I have an old application that stores the username and password in plaintext but encoded by an unknown encoding algorithm to me, it seams like base64, but I think it's not, It seams that any word ...
0
votes
0answers
109 views

Reverse Engineering a Vehicle Identification Number (VIN) encoding

Not sure if this is the right place so please point me to the right place if needed. I have an input of a VIN (Vehicle Identification Number) number with 17 characters, each character is either an ...
0
votes
0answers
175 views

find a video file in memory dump of a process

I have a player that plays encrypted video files and works like this: I open an encrypted video file with it it decrypts the video file and writes it to its memory and plays the file from the memory ...
-1
votes
1answer
303 views

Determining the hash algorithm used [closed]

I have some test data: Test 1 Text: pass1234 Salt: 33b9d87b83c097ce3ea6e6f84a298f839aafc6d7aa23d909a43ac94bdee35ddf Hash: 61477724c136fb285918114792685a4d Test 2 Text: test1234 Salt: ...
3
votes
1answer
243 views

String Encoding and Decoding Method

so I came across the following string encoding method in python. def encode(the_string): encoded_string = '' rotations = ord(the_string[-1]) + 5 for i in range(0, len(the_string)): ...
0
votes
1answer
112 views

Is it possible to recover the key to a decrypted file?

Is it possible to recover the key to a decrypted file if you have the initialization vector and it uses RijndaelManaged? If so how? The file I want to recover the key from is a xml that looks like ...
2
votes
1answer
2k views

Assistance in Decrypting Lua script that is obfuscated with Base64 > SSL

Can anyone on here help me on decrypting the SSL encryption that protects this LUA script linked at the end of this topic ? Basically they are encoded with Base64 then SSL, but I have no idea how to ...
0
votes
1answer
164 views

me_cleaner and fwupd, or manipulating UEFI .cab files

I'd like to extract a plain dump of the UEFI firmware of my laptop (1:1 copy of the flash content, often called .bin or .rom files) from the .cap file, so that I can modify it slightly with me_cleaner....