Pentesting

Crypto CTFs Tricks

Online Hashes DBs

Encoders

Most of encoded data can be decoded with these 2 ressources:

Substitution Autosolvers

Caesar - ROTx Autosolvers

Atbash Cipher

Similar to BASE64

Check all bases with: https://github.com/mufeedvh/basecrack

  • Base32 [A-Z2-7=]

    • NBXWYYLDMFZGCY3PNRQQ====

  • Base58 [123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz]

    • 2yJiRg5BF9gmsU6AC

  • Base62 [0-9A-Za-z]

    • g2AextRZpBKRBzQ9

  • Base64 [A-Za-z0-9+/=]

    • aG9sYWNhcmFjb2xh

  • Base85 --> Like Ascii85

  • ATOM-128 [/128GhIoPQROSTeUbADfgHijKLM+n0pFWXY456xyzB7=39VaqrstJklmNuZvwcdEC]

    • MIc3KiXa+Ihz+lrXMIc3KbCC

  • HAZZ15 [HNO4klm6ij9n+J2hyf0gzA8uvwDEq3X1Q7ZKeFrWcVTts/MRGYbdxSo=ILaUpPBC5]

    • DmPsv8J7qrlKEoY7

  • MEGAN35 [3GHIJKLMNOPQRSTUb=cdefghijklmnopWXYZ/12+406789VaqrstuvwxyzABCDEF5]

    • kLD8iwKsigSalLJ5

  • ZONG22 [ZKj9n+yf0wDVX1s/5YbdxSo=ILaUpPBCHg8uvNO4klm6iJGhQ7eFrWczAMEq3RTt2]

    • ayRiIo1gpO+uUc7g

  • ESAB46 []

    • 3sHcL2NR8WrT7mhR

  • MEGAN45 []

    • kLD8igSXm2KZlwrX

  • TIGO3FX []

    • 7AP9mIzdmltYmIP9mWXX

  • TRIPO5 []

    • UE9vSbnBW6psVzxB

  • FERON74 []

    • PbGkNudxCzaKBm0x

  • GILA7 []

    • D+nkv8C1qIKMErY1

  • Citrix CTX1 []

    • MNGIKCAHMOGLKPAKMMGJKNAINPHKLOBLNNHILCBHNOHLLPBK

http://k4.cba.pl/dw/crypo/tools/eng_atom128c.html - 404 Dead: https://web.archive.org/web/20190228181208/http://k4.cba.pl/dw/crypo/tools/eng_hackerize.html

HackerizeXS [╫Λ↻├☰┏]

╫☐↑Λ↻Λ┏Λ↻☐↑Λ

Morse

.... --- .-.. -.-. .- .-. .- -.-. --- .-.. .-

UUencoder

begin 644 webutils_pl
M2$],04A/3$%(3TQ!2$],04A/3$%(3TQ!2$],04A/3$%(3TQ!2$],04A/3$%(
M3TQ!2$],04A/3$%(3TQ!2$],04A/3$%(3TQ!2$],04A/3$%(3TQ!2$],04A/
F3$%(3TQ!2$],04A/3$%(3TQ!2$],04A/3$%(3TQ!2$],04A/3$$`
`
end

XXEncoder

begin 644 webutils_pl
hG2xAEIVDH236Hol-G2xAEIVDH236Hol-G2xAEIVDH236Hol-G2xAEIVDH236
5Hol-G2xAEE++
end

YEncoder

=ybegin line=128 size=28 name=webutils_pl
ryvkryvkryvkryvkryvkryvkryvk
=yend size=28 crc32=35834c86

BinHex

(This file must be converted with BinHex 4.0)
:#hGPBR9dD@acAh"X!$mr2cmr2cmr!!!!!!!8!!!!!-ka5%p-38K26%&)6da"5%p
-38K26%'d9J!!:

ASCII85

<~85DoF85DoF85DoF85DoF85DoF85DoF~>

Dvorak keyboard

drnajapajrna

A1Z26

Letters to their numerical value

8 15 12 1 3 1 18 1 3 15 12 1

Affine Cipher Encode

Letter to num (ax+b)%26 (a and b are the keys and x is the letter) and the result back to letter

krodfdudfrod

Bacon Code

Substitude each letter for 4 As or Bs (or 1s and 0s)

00111 01101 01010 00000 00010 00000 10000 00000 00010 01101 01010 00000
AABBB ABBAB ABABA AAAAA AAABA AAAAA BAAAA AAAAA AAABA ABBAB ABABA AAAAA

Runes

Compression

Raw Deflate and Raw Inflate (you can find both in Cyberchef) can compress and decompress data without headers.

Easy Crypto

XOR - Autosolver

Bifid

A keywork is needed

fgaargaamnlunesuneoa

Vigenere

A keywork is needed

wodsyoidrods

Strong Crypto

Fernet

2 base64 strings (token and key)

Token:
gAAAAABWC9P7-9RsxTz_dwxh9-O2VUB7Ih8UCQL1_Zk4suxnkCvb26Ie4i8HSUJ4caHZuiNtjLl3qfmCv_fS3_VpjL7HxCz7_Q==
Key:
-s6eI5hyNh8liH7Gq0urPC-vzPgNnxauKvRO4g03oYI=

Samir Secret Sharing

A secret is splitted in X parts and to recover it you need Y parts (Y <=X).

8019f8fa5879aa3e07858d08308dc1a8b45
80223035713295bddf0b0bd1b10a5340b89
803bc8cf294b3f83d88e86d9818792e80cd

http://christian.gen.co/secrets/

OpenSSL brute-force

Tools