Questions tagged [decryption]

The process of decoding data that has been encrypted into a secret format.

Filter by
Sorted by
Tagged with
0 votes
1 answer
17 views

How to properly migrate authentication cookies to using a new encryption scheme on a website while being backwards compatible?

When a user logs in with their email/password combo and gets authenticated to our website, the backend sends the web browser an encrypted cookie based off of their memberId with us. While this ...
user1068636's user avatar
0 votes
0 answers
39 views

Wireshark can't decrypt TLS from a specific python library

I have a problem. I'm using Wireshark 4.0.8. I created my ssl file to store my "(pre)-master-secrets". I can thus decrypt TLS from my browser or from different python libraries without ...
Big BG's user avatar
  • 1
0 votes
1 answer
43 views

Is DPAPI usable when only being able to read the file directory?

DPAPI: Windows Data Protection API Say I would be able to read a Windows system file system, including all files. Say there would be a DPAPI encrypted value somewhere in this system that I want to ...
thepancakeplant's user avatar
0 votes
0 answers
37 views

What are password encryption schemes that result in variable length common in MySQL and PHP?

I have stumbled across passwords on a MySQL database behind a PHP webapp. Here are some examples. 753a524d56b48d825328ce27 789e0ad30d15 7ba0868c23e0a2 d327e265ca2abcd7c 48276b3d5618850 ...
knods's user avatar
  • 1
0 votes
0 answers
186 views

Decrypting Browser Cookies

So I am trying to write my own backdoor with python and it is something like Metaploit, where you can run a single command and it would do the work for you, so I am trying to implement a cookie ...
LuckyCoder3607's user avatar
0 votes
2 answers
52 views

Post Exploitation in Oracle web logic server 10.35 (Oracle Linux Server 3.8)

Web Server : Oracle WebLogic 10.35 Machine : Oracle Linux Server 3.8 I was able to partially exploit this CVE. I can execute any command on server using HTTP request and redirecting its output to a ...
Abu Bakar's user avatar
1 vote
1 answer
44 views

Problem Extracting SSL keys from Apache 2.4

I am trying to setup SSL key logging with Apache 2.4 on Ubuntu 22.04. I followed the very good Walkthrough provided by Lekensteyn in this post: Extracting openssl pre-master secret from apache2 What ...
Todd Hight's user avatar
1 vote
0 answers
69 views

How can I encrypt files in a file transfer website? [closed]

I am a complete beginner and have almost no knowledge of encryption. I have a file transfer website that encrypt the files before saving them in the server then it decrypts the files to be ready to ...
Bob The Builder's user avatar
1 vote
0 answers
101 views

Wireshark decrypt TLS 1.2 from WCF client

I have managed to decrypt TLS 1.2 data using Wireshark on a connection from the browser to the WCF service, but cannot manage to do the same with the WCF client. I'm not sure what is the difference, ...
gitzko's user avatar
  • 11
0 votes
1 answer
916 views

Decrypt .enc file with .key file

I'm trying to decrypt JPEG and MP4 files (basically, media files) which they end in .enc file extension, encrypted with AES-256. For each file, a .key file is associated, the file size is 48 bytes, ...
Northumber's user avatar
0 votes
1 answer
135 views

Feedback wanted regarding how secure this encryption/decryption is

I am creating a Password Manager and I wanted to create a JavaScript function to encrypt/decrypt data in the client-side, then I will be saving the only the encrypted data in MySQL Server. To encrypt/...
Manuel's user avatar
  • 9
0 votes
0 answers
200 views

Is it possible to get krbtgt hash from TGT ticket?

As you know, during a kerberoasting attack, we can intercept the TGS ticket and use brute force tools (john the ripper, hashcat) to find out the password of the service accounts that signed the TGS ...
Mazy-Shame's user avatar
0 votes
1 answer
151 views

How can I decrypt a text file with gpg?

I want to decrypt a text file (which happens to be an Electrum wallet file) with gpg but I get the error gpg: no valid OpenPGP data found. I have done a quick test by encrypting a small text file and ...
Dan's user avatar
  • 165
1 vote
0 answers
316 views

Tool to Decrypt Chrome, Firefox and Edge login information [closed]

Im new to python but Ive created a couple of programs that can collect the user credentials for Google Chrome, Mozilla Firefox and Microsoft Edge and decrypt them then save the decrypted output to ....
Luke Jordan's user avatar
1 vote
0 answers
94 views

How to decrypt SSHv2 using AES-256 session keys from memory dump?

How to decrypt the plaintext contents of an SSH session from a PCAP file and SSHv2 AES session keys from a memory dump. I have the full PCAP for the SSH sessions, including the initial handshake and ...
Wesley Jones's user avatar
1 vote
0 answers
396 views

Recovering Chrome Passwords from Login Data File, Without Local State File

I ran the ForensIT profile migration wizard which migrates an existing profile to a new environment (from domain to workgroup, or vice versa). Doing so deletes encryption keys from Chrome's "...
junioradams's user avatar
0 votes
0 answers
19 views

Does anybody know what kind of encryption this could be? [duplicate]

I am trying to decypher this encrypted text: ‡GG3¢ò÷Gv—GFW"æ6öÒöÖ—F†÷W3÷3Ó# ¦‡GG3¢òö–&"æ6òôÄãFs†×0¦‡GG3¢òö–&"æ6òóV¥¤ÓEfà ¦‡GG3¢ò÷Gv—GFW"æ6öÒ÷F†VÇVfg–vV×3÷3Ó#  ¦‡GG3¢òö–&...
user21264248's user avatar
1 vote
2 answers
390 views

what is the safest way to open/decrypt an encrypted gpg/pgp file in memory | gnu/linux debian?

I would like to open/decrypt an encrypted gpg/pgp file in the main memory without leaving any footprints on the file system including swap,etc. what is the safest option on a gnu/linux debian from ...
Z0OM's user avatar
  • 119
0 votes
1 answer
234 views

Feedback wanted regarding my functions to Encrypt/Decrypt data using PHP (Openssl) [closed]

I am creating a web app (HTML, CSS, JavaScript, PHP & MySQL) where the users register, and only logged users can create and save personal Notes (encrypted) in a MySQL Server database I have for ...
Manuel's user avatar
  • 9
1 vote
0 answers
152 views

Can you decrypt storage from an Android phone directly from the flash?

I have an old phone that I am trying to recover the data from. I was hoping to desolder the chip and buy an expensive reader for NAND flash chips but then it occurred to me that the contents of the ...
yemista's user avatar
  • 111
0 votes
0 answers
16 views

which encryption method is it? [duplicate]

i have a file and i want to edit it to do some changes but i think the file is encrypted anybody knows the encryption method? thanks ELF > @æ@ @ F¾ @ 8 @ 0 / @ @ @ @ @ ...
devlearner's user avatar
1 vote
0 answers
67 views

Symmetric key importance During encrypt and decrypt [closed]

I am performing a small command line operation the goal is to generate a symmetric key using openssl and store the key in TPM FAPI keystore. After modifying the symmetric key, the decryption should ...
chandu's user avatar
  • 161
2 votes
1 answer
224 views

Decrypting files given a sample encrypted file and original

One of my friends was hacked, all of his disk was encrypted. The hackers are requesting money, that obviously we don't want to pay. I am wondering if it's possible to decrypt everything, given that I ...
daringSoul84's user avatar
1 vote
1 answer
197 views

Decrypt TLS record layer using OpenSSL

I am trying to decrypt a given TLS record layer sent by a client using OpenSSL. The TLS version is TLS 1.2 and the cipher suite is TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA. The encrypted record layer is ...
NeverEver's user avatar
0 votes
2 answers
283 views

Ransomware public key: can I find the respective private key?

I got a ransomware called StopDjvu. On my PC, I have found the public key that is used by the malware (maybe RSA hardcoded). Is it possible to extract the private key from the public key?
ransomhate's user avatar
1 vote
1 answer
74 views

Non-interactive multi key encryption and decryption

I need some serious suggestions on my protocol, specifically for decryption. So the scenario is Organizations A and B encrypt their employees' records with their respective public keys and store them ...
Laila Tul Badar's user avatar
0 votes
2 answers
147 views

Encryption method for file that can only be read by program

I have a Python 3 program, and I’m having trouble finding an encryption method that will suit my needs. Suppose the program is on a thumb drive. I would give the thumb drive to someone else, and they ...
Cannabijoy's user avatar
2 votes
1 answer
482 views

How to decrypt Blowfish Advanced CS encrypted file

Cleaning up my disk space, I found an encrypted file (*.bfa), which I encrypted with Blowfish Advanced CS (Version 2.13.00.002) about 15 years ago. I still have a copy of the original version of Bfacs,...
BEsmart's user avatar
  • 21
0 votes
0 answers
37 views

How to encrypt an e-mail to many recipients in an effective way? [duplicate]

Let's say we have an e-mail of 10MB, and we want to distribute this to 1000 users. Before sending the e-mail, I encrypt it. And all users have my public key to decrypt it. What encryption method can I ...
wasilikoslow's user avatar
0 votes
0 answers
52 views

In asymmetric encryption, is there a meaningful difference between the public and the private key? [duplicate]

Is it possible to swap them, so that the public key is kept secret while the private key is public? Or do they actually function differently? Thinking specifically about DSA though I'm interested if ...
brentonstrine's user avatar
0 votes
1 answer
116 views

Decrypting with multiple keys

I have a PHP application which calls third party api with username and password embedded in the XML API call from my side. I would like to encrypt and store the username and password embedded in the ...
user2861783's user avatar
0 votes
2 answers
336 views

Ensuring an encrypted file can be decrypted in the future

What is a suggested way to: Encrypt a file Put file on USB Give USB to a 3rd party who is not that tech savvy Someday in the future, somehow provide them with the password Ensure that if #4 happens a ...
MrBob2022's user avatar
2 votes
1 answer
2k views

CryptoJS AES encryption/decryption problem

A simple encryption/decryption using CryptoJS gives me a weird output. Can anyone point me to where the code is wrong? (I'm looking for the output in the console) var code = "Testcode"; var ...
newbie's user avatar
  • 23
0 votes
1 answer
286 views

deleted a subkey and can now no longer decrypt

My public key had expired so I tried to edit the expiry date with gpg --edit-key It seemed to be too much trouble somehow to modify the correct subkey so I deleted the subkey instead with the ...
cardamom's user avatar
  • 379
-2 votes
1 answer
167 views

Trying to decrypt my home network

I've put my wireless card in monitor mode following this tutorial. After that, I started monitor my wifi home and, after a few seconds, I stop it. Every packet was crypted (obviously), so I follow ...
Pablo D's user avatar
  • 99
0 votes
0 answers
3k views

How to decrypt an OpenVPN EasyRSA Encrypted Private Key?

I want to copy my OpenVPN configuration from a client configuration file to my pfSense firewall. pfSense requires me to provide certificate and key. This is how they look like in the .ovpn ...
Aileron79's user avatar
  • 101
1 vote
0 answers
99 views

How does Tor's second node know the key to decrypt the second layer?

I was watching this video explaining how tor works: https://youtu.be/QRYzre4bf7I It explains it with the example of 3 intermediate nodes between client and server. It says that each of the nodes can ...
RenatoRenatoRenato's user avatar
0 votes
1 answer
206 views

How to Find Encryption when knowing Input Plain Text and Output Encrypted Text? [duplicate]

When I submit an Customer Reference ID in an Android Application it POSTs an Encrypted String to an API Endpoint. For example, if I enter the following CR ID : "CR-13261150" it POSTs the ...
Cruzer Blade's user avatar
0 votes
0 answers
67 views

PubKey decrypted differences when Sending an encrypted email via a bash script and when sending it via Thunderbird

This is a 2-part question. When GnuPG is used externally in Thunderbird 91.7.x, i tested email encryption from Account A to Account A, the message was received perfectly encrypted and in the "...
user923841's user avatar
0 votes
1 answer
56 views

Is there anything that can be deduced from a ciphertext?

Given some strong cipher (like TLS uses), what can be deduced from its ciphertext? For example, is the length of the ciphertext the same as original text? Are spaces preserved? Or some letter ...
sitems's user avatar
  • 205
-2 votes
2 answers
2k views

How to Find Encryption Type by Seeing Encrypted Text? [closed]

When I submit an Customer Reference ID in an Android Application it POSTs an Encrypted String to an API Endpoint. For example, if I enter the following CR ID : "CR-13261150" it POSTs the ...
Rohith's user avatar
  • 7
1 vote
1 answer
803 views

Decrypting WhatsApp traffic and blocking file uploads possible using a firewall ssl decryption policy?

So we want to block file uploads on WhatsApp but since it's encrypted, I doubt this can be done, however, can PANOS decrypt WhatsApp?? I ask because WhatsApp doesn't exactly use SSL right, it's more ...
wannabemssp's user avatar
0 votes
1 answer
87 views

Which is the preferred way of encrypting Personal Identifiable Information?

What is the preferred way to implement personal information encryption / decryption? After some reading, the main options appear to be: Encrypt/Decrypt it at the database level Encrypt/Decrypt it at ...
Jan Vladimir Mostert's user avatar
0 votes
0 answers
118 views

decryption of message using private key [duplicate]

I don't why we can decrypt the message using our private key if it's encrypted using our public key. If a message is encrypted using my public key, then how can I decrypt it using my private key? It ...
navid's user avatar
  • 1
3 votes
1 answer
239 views

Same network steal data?

Say my home network has a wifi-password and my friends are connected to it (since I gave them my wifi-password). Is it possible for me to read their data transfer? If yes, then it would also be ...
ZPlaya7's user avatar
  • 33
-1 votes
1 answer
199 views

Prevent server MITM attack

I want to create a secure messaging application such that you don't have to trust the server. Register with username and password. -> Generate a pair of PGP keys (RSA). -> Encrypt the private ...
LemN82's user avatar
  • 1
8 votes
3 answers
1k views

What makes a symmetric encryption algorithm cryptographically secure?

I'm trying to learn a bit more about symmetric encryption and found out that basically every symmetric encryption and decryption is (somehow) in the end based on a simple XOR-Byte-Toggle with using a ...
YoungFlyme's user avatar
0 votes
0 answers
44 views

About password ciphertext [duplicate]

I need to decrypt a password. I have the ciphertext for this however, I have many plain text and encrypted equivalents. This device can only be given passwords with a maximum of 8 characters from the ...
furkan's user avatar
  • 1
0 votes
0 answers
84 views

Step-by-step file encryption/decryption using user-supplied password

Let's say I want to build a dropbox clone. When users upload files they need to be encrypted. Later on, when the user needs to access their files, the application should be able to decrypt them using ...
teeparty's user avatar
  • 101
11 votes
1 answer
2k views

If a WAF is compromised, can the adversary view all the traffic in clear text provided WAF uses SSL cert to decrypt it?

I understand Web Application Layer Firewall (WAF) uses an SSL cert to decrypt and inspect the traffic before passing to the backend server. If an attacker could gain admin access to both the WAF ...
sxmad's user avatar
  • 115

1
2 3 4 5
8