Questions tagged [hash-functions]

An surjective function that maps a set of keys to a smaller data sets of a fixed length. Cryptographic hash-function are supposed to be practically impossible to reverse except by brute-force.

Filter by
Sorted by
Tagged with
1 vote
0 answers
52 views

can sha1 hash of file converted to sha2 hash?

I have a phone database /data/user/0/com.miui.gallery/databases/gallery.db containing information such as exif data and file name. there is a column sha1 containing value ...
  • 113
2 votes
0 answers
41 views

Identifying a hash function knowing both input and output

I am creating a custom client for an old game. Now I got stuck on login to the server. I made several experiments with wireshark but it doesn't seem to be any common hashes. From my limited ...
2 votes
0 answers
74 views

How the hash/code in url is generated

I am trying to scrape publicly available sites by urls. But the problem is I can not understand the urls needed to be accessed. URLs are like https://ldtax.gov.bd/ldtax-holdings/individual-rashid-...
  • 121
-1 votes
1 answer
66 views

Anti-patching checksum [closed]

I'm busy with debugging a program in x64dbg and it has some kind of anti-patching mechanism so can someone please advise me on how I would go about finding the functions which are calculating the ...
1 vote
1 answer
51 views

Overclock CPU in BIOS - ARM/C/C++/Py

new guy here. Working on Bi0S script, adding as many features as possible. It is possible to change fan speeds, advanced security, manipulate voltages, etc. How do you overclock the microprocessor ...
0 votes
0 answers
59 views

Where can I find the hashing algorithm in source code?

When I submit login credentials in an Android Application it POSTs an encrypted string to an API endpoint. For example, if I enter the following email & pass : "abc@abbc.com:abc" it ...
  • 1
0 votes
1 answer
51 views

Which function or file is responsible for initialization of g_37HashSeed

I'm checking tcpip.sys file in IDA and found that in the .data part there is an int called g_37HashSeed. This seed is an input for a hash function that I look into. Can someone tell me which program ...
1 vote
1 answer
77 views

How to debug an obfuscated self hashing program?

I need to understand what the following obfuscated application does: interpreter.py: string = "lambda x : obfuscated_code_to_interpret_variable_x" interpreter = eval(string) ...
3 votes
1 answer
290 views

How is lite hash rate (LHR) of Nvidia implemented?

Nvidia limited some of their GPUs with LHR to decrease the performance of Ethereum mining. What in detail is LHR doing? It seems to limit non sequential memory operations (which is actually not what ...
0 votes
2 answers
179 views

How to know which hashing algorithm is being used?

I’ve been reading about digital signatures getting ready for some certification, and there is one question regarding this topic, that I don’t really understand. Let’s say that I receive a plaintext ...
  • 3
1 vote
1 answer
393 views

Log input data and resulting hash for CC_MD5 calls in an iOS app with Frida

I am trying to understand the usage of calls to CC_MD5 in an iOS application. From Apple's man page I can see that when it is called it requires 3 arguments: extern unsigned char * CC_MD5(const void *...
  • 157
2 votes
0 answers
146 views

How to find how a hash in generated in an iOS app

I'm currently working on an iOS app to replicate a signature which looks to be generated with a MD5 hash. I'm currently using Frida, but haven't had any luck replicating it. I've used the script to ...
  • 21
0 votes
0 answers
64 views

Determining a password-hashing function knowing plaintext + output

I have a password that has been stored and I'd like to figure out how it's been 'transformed' to be stored in my database. The plaintext password is: k4oK203$ And the password as it is stored 'crypted'...
0 votes
0 answers
124 views

Hashing algorithm of length 50

I have been trying to reverse-engineer an Android application using Jadx for static analysis and Frida for dynamic analysis. The end goal is to be able to re-create the request signature, sent as a "x-...
  • 33
-1 votes
1 answer
182 views

cracking SHA256 if you think you know its original value but don't know which is it

I have a hash and what I think is its original value DRMSoftwareRadio-MERLIN-00000218 20030130 Frank Garnier Frank.Garnier@rnw.nl Witte Kruislaan 55 Hilversum 1217AM Netherlands ...
0 votes
0 answers
218 views

Reverse Engineering a Vehicle Identification Number (VIN) encoding

Not sure if this is the right place so please point me to the right place if needed. I have an input of a VIN (Vehicle Identification Number) number with 17 characters, each character is either an ...
3 votes
4 answers
2k views

Is it possible to build an equivalent function just looking at the input and output of the original function?

Imagine you are reverse engineering a software. This software uses a library, which is obfuscated and encrypted. The library contains a function, lets call it secret_function. This function is a pure ...
0 votes
0 answers
109 views

Does anyone recognise following (USB,HID?) encoding method?

Im reverse engineering a Keyborard RGB LED Control Software and there is a Library called "HidServ.dll" that seems to be the interface between the Keyboard and the Software. Every Function of that ...
1 vote
1 answer
226 views

Tool to search known hash/encryption algo in files in Windows

I am looking for a tool (the best would be an Ida plugin) that can search files in a folder for a known hash (md5/sha1 etc.) and encryption (aes /rsa etc.). I know an Ida plugin called FindCrypt2 but ...
1 vote
1 answer
730 views

How to detect md5 and sha256?

I use FindCrypt2 Ida plugin but it detect md4 and not md5 , and not detect sha256. How can I detect md5 in assembly? How can I detect sha256 in assembly? thanks
3 votes
1 answer
181 views

Identification of RF hash algorithm

I have an unbranded LED lamp with a remote control. I would like to reverse the protocol of the remote but unfortunately I can't create my own packages. The frequency of the remote transceiver is 2....
1 vote
1 answer
246 views

Reverse engineering Nextbike API and random 16 character pre-shared key

I am trying to get to know how Nextbike's API works. It's not a public API but capturing the outgoing traffic with my phone I can see all the traffic and endpoints that are being contacted. I've ...
1 vote
0 answers
141 views

Techniques for reversing (basic) hash function

Hi I'm relatively new to RE, and I'm using GDB and Radare2. As part of a crackme I'm trying to reverse a weak hash function that's a little too complicated for me to undo by hand. I've been trying to ...
0 votes
1 answer
2k views

CRC32 reverse engineer without knowing parameters, but knowing the input value

Dear members, I am trying to figure out the parameters of some hexadecimal CRC32 values I have. The values are: Value - input (before hashing) 55D3028A - J 73AF2D02 - O 6742BE71 - T I hope I can ...
  • 1
2 votes
0 answers
359 views

Struggling with an archive file format using "encryption"

I am currently working on a file format used to pack (storage only, no compression) different file types together for transport. There is some sort of very simple "encryption" used and so far I have ...
1 vote
1 answer
248 views

Trying to reverse function to generate certain color strings from an HMAC signature - decompiled code LOOKS right, but my results differ

This might be a bit difficult to follow without context, but the gist of it is the following; I'm trying to reverse a certain application, and part of what I"m attempting to reverse in the app ...
  • 113
1 vote
1 answer
2k views

Understanding hashing in cookies

I am using a website whose cookies are as following (when I'm as a guest at 3 different instances in increasing order of time) : eyJ0YWxrX3N0YXRlIjowfQ\075\075|1497742098|...
  • 13
2 votes
2 answers
5k views

How to get file back from generated sha256 checksum?

The title seems little crazy, but I think that it is possible. Just think about it. If you create text file like this: Hello world! You get this checksum: ...
7 votes
1 answer
359 views

Is there a way to find out which hash standard by studying the source code?

We have an embedded product, which we are carrying for several hardware iterations since more than 5 years ago. We have all the source code, most of it nicely documented. As the product is actively ...
0 votes
2 answers
204 views

Identifying a very weak hash algorithm

I'm reverse-engineering a string translation file format for a particular game. It's ultimately just an ID-to-string map, where the IDs are four-byte integers. There are 1935 IDs in total; you can see ...
1 vote
1 answer
594 views

Reverse-engineer digest http authentication

I have an iOS app which uses digest HTTP authentication with nonce which expires every 5 minutes. The client calculates response as following: HA1=MD5(username:realm:password) HA2=MD5(method:...
2 votes
0 answers
222 views

What checksum is Super Smash Bros. Wii U using?

When you save a screenshot in Super Smash Bros. for Wii U on the SD card it writes to, it makes two files: a .JPG and a .BIN file. Both these files are in the format of HNI_XXXX.EXTENTION, where XXXX ...
  • 121
1 vote
0 answers
80 views

Reverse engineering a hash generated from IP and unixtime - How to approach?

There is a website that gives you a token and the unixtime to access a resource on another domain. I can use those 2 values to access it like that: Example: example.com/test.txt?st=[HASH]&e=[...
3 votes
8 answers
3k views

Is MD5 hashing of files a valid method of creating an anti-virus program?

Is it a good way to create Virus signature in MD5 or it is better in SHA1 or SHA256 and why it is?
1 vote
2 answers
2k views

Extract decrypted token from EXE

EDIT As some people have pointed out, this exe file classifies as a 'virus' on some analysers. I can assure you this exe is from a very trusted source, and is actually part of a large puzzle (which ...
  • 137
0 votes
1 answer
377 views

Reverse-engineering the generation of a hash?

Using a forward proxy, I have logged two payloads that are POST requests to a site, and I was curious as to what the best way to determine how a particular attribute in the payloads was generated. ...
-1 votes
1 answer
1k views

Reversing sha1 hash with 2 captured hashes

As an exercise we need to reverse a SHA-1 to get the 'original' message. All we know is that the lowercase SHA-1 of the code gives: B39ECFBC2C64ADBB7C7A9292EEE31794D28FE224 And, the SHA-1 of the ...
  • 11
2 votes
1 answer
647 views

How do I find a collision for a simple hash algorithm

I have the following hash algorithm: unsigned long specialNum=0x4E67C6A7; unsigned int ch; char inputVal[]=" AAPB2GXG"; for(int i=0;i<strlen(inputVal);i++) ...
  • 203
5 votes
3 answers
1k views

Hash algorithm written in C decompiled with IDA

I have been working on rewriting a program, although it uses a hash to fingerprint the file, I have used IDA to find the function doing the hash and what it is doing to the file before it sends it to ...
4 votes
0 answers
2k views

Reverse Engineering a 8 bit CRC checksum

I am trying to create a communication interface using C Language to an Air conditioning system, after analyzing the data packets I have identified that the data packet is consist of an 8 bit CRC (I am ...
  • 41
3 votes
2 answers
564 views

Highscores being sent as hash

There is a game that has been created with Unity which I'm trying to beat. It sends your high-score to a site and gets posted there. I've sniffed the outgoing traffic and the game sends your username,...
2 votes
2 answers
615 views

SHA + Mersenne Twister

I'm trying to decrypt some audio files. At first I thought that they were encrypted using Blowfish, but apparently "SHA + Mersenne Twister used for generate key and decrypt". What exactly does this ...
  • 173
3 votes
2 answers
2k views

Determine Hash Method - Busybox Linux

I'm trying to figure out how an ARM-Based device running Busybox Linux is storing hashes for users in a configuration file. Basically, the system allows you to backup the entire configuration to a ...