Questions tagged [hash-functions]
An surjective function that maps a set of keys to a smaller data sets of a fixed length. Cryptographic hash-function are supposed to be practically impossible to reverse except by brute-force.
43
questions
1
vote
0
answers
52
views
can sha1 hash of file converted to sha2 hash?
I have a phone database /data/user/0/com.miui.gallery/databases/gallery.db containing information such as exif data and file name. there is a column sha1 containing value
...
- 113
2
votes
0
answers
41
views
Identifying a hash function knowing both input and output
I am creating a custom client for an old game. Now I got stuck on login to the server. I made several experiments with wireshark but it doesn't seem to be any common hashes.
From my limited ...
2
votes
0
answers
74
views
How the hash/code in url is generated
I am trying to scrape publicly available sites by urls. But the problem is I can not understand the urls needed to be accessed.
URLs are like
https://ldtax.gov.bd/ldtax-holdings/individual-rashid-...
- 121
-1
votes
1
answer
66
views
Anti-patching checksum [closed]
I'm busy with debugging a program in x64dbg and it has some kind of anti-patching mechanism so can someone please advise me on how I would go about finding the functions which are calculating the ...
- 29
1
vote
1
answer
51
views
Overclock CPU in BIOS - ARM/C/C++/Py
new guy here. Working on Bi0S script, adding as many features as possible. It is possible to change fan speeds, advanced security, manipulate voltages, etc. How do you overclock the microprocessor ...
0
votes
0
answers
59
views
Where can I find the hashing algorithm in source code?
When I submit login credentials in an Android Application it POSTs an encrypted string to an API endpoint.
For example, if I enter the following email & pass :
"abc@abbc.com:abc"
it ...
- 1
0
votes
1
answer
51
views
Which function or file is responsible for initialization of g_37HashSeed
I'm checking tcpip.sys file in IDA and found that in the .data part
there is an int called g_37HashSeed.
This seed is an input for a hash function that I look into.
Can someone tell me which program ...
- 121
1
vote
1
answer
77
views
How to debug an obfuscated self hashing program?
I need to understand what the following obfuscated application does:
interpreter.py:
string = "lambda x : obfuscated_code_to_interpret_variable_x"
interpreter = eval(string)
...
- 111
3
votes
1
answer
290
views
How is lite hash rate (LHR) of Nvidia implemented?
Nvidia limited some of their GPUs with LHR to decrease the performance of Ethereum mining. What in detail is LHR doing? It seems to limit non sequential memory operations (which is actually not what ...
- 131
0
votes
2
answers
179
views
How to know which hashing algorithm is being used?
I’ve been reading about digital signatures getting ready for some certification, and there is one question regarding this topic, that I don’t really understand.
Let’s say that I receive a plaintext ...
- 3
1
vote
1
answer
393
views
Log input data and resulting hash for CC_MD5 calls in an iOS app with Frida
I am trying to understand the usage of calls to CC_MD5 in an iOS application.
From Apple's man page I can see that when it is called it requires 3 arguments:
extern unsigned char *
CC_MD5(const void *...
- 157
2
votes
0
answers
146
views
How to find how a hash in generated in an iOS app
I'm currently working on an iOS app to replicate a signature which looks to be generated with a MD5 hash. I'm currently using Frida, but haven't had any luck replicating it. I've used the script to ...
- 21
0
votes
0
answers
64
views
Determining a password-hashing function knowing plaintext + output
I have a password that has been stored and I'd like to figure out how it's been 'transformed' to be stored in my database.
The plaintext password is:
k4oK203$
And the password as it is stored 'crypted'...
- 101
0
votes
0
answers
124
views
Hashing algorithm of length 50
I have been trying to reverse-engineer an Android application using Jadx for static analysis and Frida for dynamic analysis. The end goal is to be able to re-create the request signature, sent as a "x-...
- 33
-1
votes
1
answer
182
views
cracking SHA256 if you think you know its original value but don't know which is it
I have a hash and what I think is its original value
DRMSoftwareRadio-MERLIN-00000218
20030130
Frank Garnier
Frank.Garnier@rnw.nl
Witte Kruislaan 55
Hilversum
1217AM
Netherlands
...
0
votes
0
answers
218
views
Reverse Engineering a Vehicle Identification Number (VIN) encoding
Not sure if this is the right place so please point me to the right place if needed.
I have an input of a VIN (Vehicle Identification Number) number with 17 characters, each character is either an ...
- 101
3
votes
4
answers
2k
views
Is it possible to build an equivalent function just looking at the input and output of the original function?
Imagine you are reverse engineering a software. This software uses a library, which is obfuscated and encrypted. The library contains a function, lets call it secret_function. This function is a pure ...
- 178
0
votes
0
answers
109
views
Does anyone recognise following (USB,HID?) encoding method?
Im reverse engineering a Keyborard RGB LED Control Software and there is a Library called "HidServ.dll" that seems to be the interface between the Keyboard and the Software. Every Function of that ...
- 153
1
vote
1
answer
226
views
Tool to search known hash/encryption algo in files in Windows
I am looking for a tool (the best would be an Ida plugin) that can search files in a folder for a known hash (md5/sha1 etc.) and encryption (aes /rsa etc.).
I know an Ida plugin called FindCrypt2 but ...
- 31
1
vote
1
answer
730
views
How to detect md5 and sha256?
I use FindCrypt2 Ida plugin but it detect md4 and not md5 , and not detect sha256.
How can I detect md5 in assembly?
How can I detect sha256 in assembly?
thanks
- 31
3
votes
1
answer
181
views
Identification of RF hash algorithm
I have an unbranded LED lamp with a remote control. I would like to reverse the protocol of the remote but unfortunately I can't create my own packages. The frequency of the remote transceiver is 2....
- 88
1
vote
1
answer
246
views
Reverse engineering Nextbike API and random 16 character pre-shared key
I am trying to get to know how Nextbike's API works. It's not a public API but capturing the outgoing traffic with my phone I can see all the traffic and endpoints that are being contacted.
I've ...
- 111
1
vote
0
answers
141
views
Techniques for reversing (basic) hash function
Hi I'm relatively new to RE, and I'm using GDB and Radare2. As part of a crackme I'm trying to reverse a weak hash function that's a little too complicated for me to undo by hand. I've been trying to ...
- 101
0
votes
1
answer
2k
views
CRC32 reverse engineer without knowing parameters, but knowing the input value
Dear members,
I am trying to figure out the parameters of some hexadecimal CRC32 values I have.
The values are:
Value - input (before hashing)
55D3028A - J
73AF2D02 - O
6742BE71 - T
I hope I can ...
- 1
2
votes
0
answers
359
views
Struggling with an archive file format using "encryption"
I am currently working on a file format used to pack (storage only, no compression) different file types together for transport. There is some sort of very simple "encryption" used and so far I have ...
1
vote
1
answer
248
views
Trying to reverse function to generate certain color strings from an HMAC signature - decompiled code LOOKS right, but my results differ
This might be a bit difficult to follow without context, but the gist of it is the following; I'm trying to reverse a certain application, and part of what I"m attempting to reverse in the app ...
- 113
1
vote
1
answer
2k
views
Understanding hashing in cookies
I am using a website whose cookies are as following (when I'm as a guest at 3 different instances in increasing order of time) :
eyJ0YWxrX3N0YXRlIjowfQ\075\075|1497742098|...
- 13
2
votes
2
answers
5k
views
How to get file back from generated sha256 checksum?
The title seems little crazy, but I think that it is possible. Just think about it. If you create text file like this:
Hello world!
You get this checksum:
...
- 135
7
votes
1
answer
359
views
Is there a way to find out which hash standard by studying the source code?
We have an embedded product, which we are carrying for several hardware iterations since more than 5 years ago. We have all the source code, most of it nicely documented. As the product is actively ...
- 173
0
votes
2
answers
204
views
Identifying a very weak hash algorithm
I'm reverse-engineering a string translation file format for a particular game. It's ultimately just an ID-to-string map, where the IDs are four-byte integers. There are 1935 IDs in total; you can see ...
- 111
1
vote
1
answer
594
views
Reverse-engineer digest http authentication
I have an iOS app which uses digest HTTP authentication with nonce which expires every 5 minutes.
The client calculates response as following:
HA1=MD5(username:realm:password)
HA2=MD5(method:...
- 121
2
votes
0
answers
222
views
What checksum is Super Smash Bros. Wii U using?
When you save a screenshot in Super Smash Bros. for Wii U on the SD card it writes to, it makes two files: a .JPG and a .BIN file. Both these files are in the format of HNI_XXXX.EXTENTION, where XXXX ...
- 121
1
vote
0
answers
80
views
Reverse engineering a hash generated from IP and unixtime - How to approach?
There is a website that gives you a token and the unixtime to access a resource on another domain.
I can use those 2 values to access it like that:
Example: example.com/test.txt?st=[HASH]&e=[...
- 11
3
votes
8
answers
3k
views
Is MD5 hashing of files a valid method of creating an anti-virus program?
Is it a good way to create Virus signature in MD5 or it is better in SHA1 or SHA256 and why it is?
- 41
1
vote
2
answers
2k
views
Extract decrypted token from EXE
EDIT
As some people have pointed out, this exe file classifies as a 'virus' on some analysers. I can assure you this exe is from a very trusted source, and is actually part of a large puzzle (which ...
- 137
0
votes
1
answer
377
views
Reverse-engineering the generation of a hash?
Using a forward proxy, I have logged two payloads that are POST requests to a site, and I was curious as to what the best way to determine how a particular attribute in the payloads was generated. ...
- 269
-1
votes
1
answer
1k
views
Reversing sha1 hash with 2 captured hashes
As an exercise we need to reverse a SHA-1 to get the 'original' message.
All we know is that the lowercase SHA-1 of the code gives:
B39ECFBC2C64ADBB7C7A9292EEE31794D28FE224
And, the SHA-1 of the ...
- 11
2
votes
1
answer
647
views
How do I find a collision for a simple hash algorithm
I have the following hash algorithm:
unsigned long specialNum=0x4E67C6A7;
unsigned int ch;
char inputVal[]=" AAPB2GXG";
for(int i=0;i<strlen(inputVal);i++)
...
- 203
5
votes
3
answers
1k
views
Hash algorithm written in C decompiled with IDA
I have been working on rewriting a program, although it uses a hash to fingerprint the file, I have used IDA to find the function doing the hash and what it is doing to the file before it sends it to ...
- 153
4
votes
0
answers
2k
views
Reverse Engineering a 8 bit CRC checksum
I am trying to create a communication interface using C Language to an Air conditioning system, after analyzing the data packets I have identified that the data packet is consist of an 8 bit CRC (I am ...
- 41
3
votes
2
answers
564
views
Highscores being sent as hash
There is a game that has been created with Unity which I'm trying to beat. It sends your high-score to a site and gets posted there.
I've sniffed the outgoing traffic and the game sends your username,...
- 31
2
votes
2
answers
615
views
SHA + Mersenne Twister
I'm trying to decrypt some audio files. At first I thought that they were encrypted using Blowfish, but apparently "SHA + Mersenne Twister used for generate key and decrypt". What exactly does this ...
- 173
3
votes
2
answers
2k
views
Determine Hash Method - Busybox Linux
I'm trying to figure out how an ARM-Based device running Busybox Linux is storing hashes for users in a configuration file. Basically, the system allows you to backup the entire configuration to a ...
- 31