Questions tagged [decryption]
The process of decoding data that has been encrypted into a secret format.
388
questions
0
votes
1
answer
17
views
How to properly migrate authentication cookies to using a new encryption scheme on a website while being backwards compatible?
When a user logs in with their email/password combo and gets authenticated to our website, the backend sends the web browser an encrypted cookie based off of their memberId with us. While this ...
- 295
0
votes
0
answers
39
views
Wireshark can't decrypt TLS from a specific python library
I have a problem. I'm using Wireshark 4.0.8. I created my ssl file to store my "(pre)-master-secrets". I can thus decrypt TLS from my browser or from different python libraries without ...
- 1
0
votes
1
answer
43
views
Is DPAPI usable when only being able to read the file directory?
DPAPI: Windows Data Protection API
Say I would be able to read a Windows system file system, including all files.
Say there would be a DPAPI encrypted value somewhere in this system that I want to ...
0
votes
0
answers
37
views
What are password encryption schemes that result in variable length common in MySQL and PHP?
I have stumbled across passwords on a MySQL database behind a PHP webapp. Here are some examples.
753a524d56b48d825328ce27
789e0ad30d15
7ba0868c23e0a2
d327e265ca2abcd7c
48276b3d5618850
...
- 1
0
votes
0
answers
186
views
Decrypting Browser Cookies
So I am trying to write my own backdoor with python and it is something like Metaploit, where you can run a single command and it would do the work for you, so I am trying to implement a cookie ...
0
votes
2
answers
52
views
Post Exploitation in Oracle web logic server 10.35 (Oracle Linux Server 3.8)
Web Server : Oracle WebLogic 10.35
Machine : Oracle Linux Server 3.8
I was able to partially exploit this CVE. I can execute any command on server using HTTP request and redirecting its output to a ...
- 15
1
vote
1
answer
44
views
Problem Extracting SSL keys from Apache 2.4
I am trying to setup SSL key logging with Apache 2.4 on Ubuntu 22.04.
I followed the very good Walkthrough provided by Lekensteyn in this post: Extracting openssl pre-master secret from apache2
What ...
- 21
1
vote
0
answers
69
views
How can I encrypt files in a file transfer website? [closed]
I am a complete beginner and have almost no knowledge of encryption.
I have a file transfer website that encrypt the files before saving them in the server then it decrypts the files to be ready to ...
1
vote
0
answers
101
views
Wireshark decrypt TLS 1.2 from WCF client
I have managed to decrypt TLS 1.2 data using Wireshark on a connection from the browser to the WCF service, but cannot manage to do the same with the WCF client.
I'm not sure what is the difference, ...
- 11
0
votes
1
answer
916
views
Decrypt .enc file with .key file
I'm trying to decrypt JPEG and MP4 files (basically, media files) which they end in .enc file extension, encrypted with AES-256.
For each file, a .key file is associated, the file size is 48 bytes, ...
- 101
0
votes
1
answer
135
views
Feedback wanted regarding how secure this encryption/decryption is
I am creating a Password Manager and I wanted to create a JavaScript function to encrypt/decrypt data in the client-side, then I will be saving the only the encrypted data in MySQL Server. To encrypt/...
- 9
0
votes
0
answers
200
views
Is it possible to get krbtgt hash from TGT ticket?
As you know, during a kerberoasting attack, we can intercept the TGS ticket and use brute force tools (john the ripper, hashcat) to find out the password of the service accounts that signed the TGS ...
0
votes
1
answer
151
views
How can I decrypt a text file with gpg?
I want to decrypt a text file (which happens to be an Electrum wallet file) with gpg but I get the error gpg: no valid OpenPGP data found.
I have done a quick test by encrypting a small text file and ...
- 165
1
vote
0
answers
316
views
Tool to Decrypt Chrome, Firefox and Edge login information [closed]
Im new to python but Ive created a couple of programs that can collect the user credentials for Google Chrome, Mozilla Firefox and Microsoft Edge and decrypt them then save the decrypted output to ....
- 11
1
vote
0
answers
94
views
How to decrypt SSHv2 using AES-256 session keys from memory dump?
How to decrypt the plaintext contents of an SSH session from a PCAP file and SSHv2 AES session keys from a memory dump.
I have the full PCAP for the SSH sessions, including the initial handshake and ...
- 51
1
vote
0
answers
396
views
Recovering Chrome Passwords from Login Data File, Without Local State File
I ran the ForensIT profile migration wizard which migrates an existing profile to a new environment (from domain to workgroup, or vice versa). Doing so deletes encryption keys from Chrome's "...
- 11
0
votes
0
answers
19
views
Does anybody know what kind of encryption this could be? [duplicate]
I am trying to decypher this encrypted text:
‡GG3¢ò÷Gv—GFW"æ6öÒöÖ—F†÷W3÷3Ó# ¦‡GG3¢òö–&"æ6òôÄãFs†×0¦‡GG3¢òö–&"æ6òóV¥¤ÓEfà ¦‡GG3¢ò÷Gv—GFW"æ6öÒ÷F†VÇVfg–vV×3÷3Ó# ¦‡GG3¢òö–&...
1
vote
2
answers
390
views
what is the safest way to open/decrypt an encrypted gpg/pgp file in memory | gnu/linux debian?
I would like to open/decrypt an encrypted gpg/pgp file in the main memory without leaving any footprints on the file system including swap,etc.
what is the safest option on a gnu/linux debian from ...
- 119
0
votes
1
answer
234
views
Feedback wanted regarding my functions to Encrypt/Decrypt data using PHP (Openssl) [closed]
I am creating a web app (HTML, CSS, JavaScript, PHP & MySQL) where the users register, and only logged users can create and save personal Notes (encrypted) in a MySQL Server database I have for ...
- 9
1
vote
0
answers
152
views
Can you decrypt storage from an Android phone directly from the flash?
I have an old phone that I am trying to recover the data from. I was hoping to desolder the chip and buy an expensive reader for NAND flash chips but then it occurred to me that the contents of the ...
- 111
0
votes
0
answers
16
views
which encryption method is it? [duplicate]
i have a file and i want to edit it to do some changes but i think the file is encrypted anybody knows the encryption method? thanks
ELF > @æ@ @ F¾ @ 8 @ 0 / @ @ @ @ @ ...
1
vote
0
answers
67
views
Symmetric key importance During encrypt and decrypt [closed]
I am performing a small command line operation the goal is to generate a symmetric key using openssl and store the key in TPM FAPI keystore.
After modifying the symmetric key, the decryption should ...
- 161
2
votes
1
answer
224
views
Decrypting files given a sample encrypted file and original
One of my friends was hacked, all of his disk was encrypted.
The hackers are requesting money, that obviously we don't want to pay.
I am wondering if it's possible to decrypt everything, given that I ...
- 21
1
vote
1
answer
197
views
Decrypt TLS record layer using OpenSSL
I am trying to decrypt a given TLS record layer sent by a client using OpenSSL. The TLS version is TLS 1.2 and the cipher suite is TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA.
The encrypted record layer is ...
- 13
0
votes
2
answers
283
views
Ransomware public key: can I find the respective private key?
I got a ransomware called StopDjvu. On my PC, I have found the public key that is used by the malware (maybe RSA hardcoded).
Is it possible to extract the private key from the public key?
1
vote
1
answer
74
views
Non-interactive multi key encryption and decryption
I need some serious suggestions on my protocol, specifically for decryption.
So the scenario is Organizations A and B encrypt their employees' records with their respective public keys and store them ...
0
votes
2
answers
147
views
Encryption method for file that can only be read by program
I have a Python 3 program, and I’m having trouble finding an encryption method that will suit my needs.
Suppose the program is on a thumb drive. I would give the thumb drive to someone else, and they ...
- 103
2
votes
1
answer
482
views
How to decrypt Blowfish Advanced CS encrypted file
Cleaning up my disk space, I found an encrypted file (*.bfa), which I encrypted with Blowfish Advanced CS (Version 2.13.00.002) about 15 years ago.
I still have a copy of the original version of Bfacs,...
- 21
0
votes
0
answers
37
views
How to encrypt an e-mail to many recipients in an effective way? [duplicate]
Let's say we have an e-mail of 10MB, and we want to distribute this to 1000 users. Before sending the e-mail, I encrypt it. And all users have my public key to decrypt it.
What encryption method can I ...
- 101
0
votes
0
answers
52
views
In asymmetric encryption, is there a meaningful difference between the public and the private key? [duplicate]
Is it possible to swap them, so that the public key is kept secret while the private key is public? Or do they actually function differently?
Thinking specifically about DSA though I'm interested if ...
- 1,259
0
votes
1
answer
116
views
Decrypting with multiple keys
I have a PHP application which calls third party api with username and password embedded in the XML API call from my side.
I would like to encrypt and store the username and password embedded in the ...
0
votes
2
answers
336
views
Ensuring an encrypted file can be decrypted in the future
What is a suggested way to:
Encrypt a file
Put file on USB
Give USB to a 3rd party who is not that tech savvy
Someday in the future, somehow provide them with the password
Ensure that if #4 happens a ...
2
votes
1
answer
2k
views
CryptoJS AES encryption/decryption problem
A simple encryption/decryption using CryptoJS gives me a weird output. Can anyone point me to where the code is wrong? (I'm looking for the output in the console)
var code = "Testcode";
var ...
- 23
0
votes
1
answer
286
views
deleted a subkey and can now no longer decrypt
My public key had expired so I tried to edit the expiry date with
gpg --edit-key
It seemed to be too much trouble somehow to modify the correct subkey so I deleted the subkey instead with the ...
- 379
-2
votes
1
answer
167
views
Trying to decrypt my home network
I've put my wireless card in monitor mode following this tutorial. After that, I started monitor my wifi home and, after a few seconds, I stop it. Every packet was crypted (obviously), so I follow ...
- 99
0
votes
0
answers
3k
views
How to decrypt an OpenVPN EasyRSA Encrypted Private Key?
I want to copy my OpenVPN configuration from a client configuration file to my pfSense firewall. pfSense requires me to provide certificate and key. This is how they look like in the .ovpn ...
- 101
1
vote
0
answers
99
views
How does Tor's second node know the key to decrypt the second layer?
I was watching this video explaining how tor works: https://youtu.be/QRYzre4bf7I
It explains it with the example of 3 intermediate nodes between client and server. It says that each of the nodes can ...
0
votes
1
answer
206
views
How to Find Encryption when knowing Input Plain Text and Output Encrypted Text? [duplicate]
When I submit an Customer Reference ID in an Android Application it POSTs an Encrypted String to an API Endpoint.
For example, if I enter the following CR ID :
"CR-13261150"
it POSTs the ...
0
votes
0
answers
67
views
PubKey decrypted differences when Sending an encrypted email via a bash script and when sending it via Thunderbird
This is a 2-part question.
When GnuPG is used externally in Thunderbird 91.7.x, i tested email encryption from Account A to Account A, the message was received perfectly encrypted and in the "...
0
votes
1
answer
56
views
Is there anything that can be deduced from a ciphertext?
Given some strong cipher (like TLS uses), what can be deduced from its ciphertext? For example, is the length of the ciphertext the same as original text? Are spaces preserved? Or some letter ...
- 205
-2
votes
2
answers
2k
views
How to Find Encryption Type by Seeing Encrypted Text? [closed]
When I submit an Customer Reference ID in an Android Application it POSTs an Encrypted String to an API Endpoint.
For example, if I enter the following CR ID :
"CR-13261150"
it POSTs the ...
- 7
1
vote
1
answer
803
views
Decrypting WhatsApp traffic and blocking file uploads possible using a firewall ssl decryption policy?
So we want to block file uploads on WhatsApp but since it's encrypted, I doubt this can be done, however, can PANOS decrypt WhatsApp??
I ask because WhatsApp doesn't exactly use SSL right, it's more ...
- 11
0
votes
1
answer
87
views
Which is the preferred way of encrypting Personal Identifiable Information?
What is the preferred way to implement personal information encryption / decryption?
After some reading, the main options appear to be:
Encrypt/Decrypt it at the database level
Encrypt/Decrypt it at ...
0
votes
0
answers
118
views
decryption of message using private key [duplicate]
I don't why we can decrypt the message using our private key if it's encrypted using our public key.
If a message is encrypted using my public key, then how can I decrypt it using my private key? It ...
- 1
3
votes
1
answer
239
views
Same network steal data?
Say my home network has a wifi-password and my friends are connected to it (since I gave them my wifi-password).
Is it possible for me to read their data transfer?
If yes, then it would also be ...
- 33
-1
votes
1
answer
199
views
Prevent server MITM attack
I want to create a secure messaging application such that you don't have to trust the server.
Register with username and password. ->
Generate a pair of PGP keys (RSA). ->
Encrypt the private ...
- 1
8
votes
3
answers
1k
views
What makes a symmetric encryption algorithm cryptographically secure?
I'm trying to learn a bit more about symmetric encryption and found out that basically every symmetric encryption and decryption is (somehow) in the end based on a simple XOR-Byte-Toggle with using a ...
- 91
0
votes
0
answers
44
views
About password ciphertext [duplicate]
I need to decrypt a password. I have the ciphertext for this
however, I have many plain text and encrypted equivalents.
This device can only be given passwords with a maximum of 8 characters from the ...
- 1
0
votes
0
answers
84
views
Step-by-step file encryption/decryption using user-supplied password
Let's say I want to build a dropbox clone. When users upload files they need to be encrypted. Later on, when the user needs to access their files, the application should be able to decrypt them using ...
- 101
11
votes
1
answer
2k
views
If a WAF is compromised, can the adversary view all the traffic in clear text provided WAF uses SSL cert to decrypt it?
I understand Web Application Layer Firewall (WAF) uses an SSL cert to decrypt and inspect the traffic before passing to the backend server. If an attacker could gain admin access to both the WAF ...
- 115