2024-07-18 18:17:16 +00:00
# Trucchi Crypto CTFs
2024-04-06 18:35:30 +00:00
2024-07-18 18:17:16 +00:00
{% hint style="success" %}
Impara e pratica l'Hacking AWS: < img src = "/.gitbook/assets/arte.png" alt = "" data-size = "line" > [**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)< img src = "/.gitbook/assets/arte.png" alt = "" data-size = "line" > \
Impara e pratica l'Hacking GCP: < img src = "/.gitbook/assets/grte.png" alt = "" data-size = "line" > [**HackTricks Training GCP Red Team Expert (GRTE)**< img src = "/.gitbook/assets/grte.png" alt = "" data-size = "line" > ](https://training.hacktricks.xyz/courses/grte)
2024-04-06 18:35:30 +00:00
2024-07-18 18:17:16 +00:00
< details >
2024-04-06 18:35:30 +00:00
2024-07-18 18:17:16 +00:00
< summary > Sostieni HackTricks< / summary >
2024-04-06 18:35:30 +00:00
2024-07-18 18:17:16 +00:00
* Controlla i [**piani di abbonamento** ](https://github.com/sponsors/carlospolop )!
* **Unisciti al** 💬 [**gruppo Discord** ](https://discord.gg/hRep4RUj7f ) o al [**gruppo telegram** ](https://t.me/peass ) o **seguici** su **Twitter** 🐦 [**@hacktricks\_live** ](https://twitter.com/hacktricks\_live )**.**
* **Condividi trucchi di hacking inviando PR a** [**HackTricks** ](https://github.com/carlospolop/hacktricks ) e [**HackTricks Cloud** ](https://github.com/carlospolop/hacktricks-cloud ) repos di Github.
2024-04-06 18:35:30 +00:00
< / details >
2024-07-18 18:17:16 +00:00
{% endhint %}
2024-04-06 18:35:30 +00:00
2024-07-18 18:17:16 +00:00
## Database Hash Online
2024-04-06 18:35:30 +00:00
* _**Cercalo su Google**_
* [http://hashtoolkit.com/reverse-hash?hash=4d186321c1a7f0f354b297e8914ab240 ](http://hashtoolkit.com/reverse-hash?hash=4d186321c1a7f0f354b297e8914ab240 )
* [https://www.onlinehashcrack.com/ ](https://www.onlinehashcrack.com )
* [https://crackstation.net/ ](https://crackstation.net )
* [https://md5decrypt.net/ ](https://md5decrypt.net )
* [https://www.onlinehashcrack.com ](https://www.onlinehashcrack.com )
* [https://gpuhash.me/ ](https://gpuhash.me )
* [https://hashes.org/search.php ](https://hashes.org/search.php )
* [https://www.cmd5.org/ ](https://www.cmd5.org )
* [https://hashkiller.co.uk/Cracker/MD5 ](https://hashkiller.co.uk/Cracker/MD5 )
* [https://www.md5online.org/md5-decrypt.html ](https://www.md5online.org/md5-decrypt.html )
2024-07-18 18:17:16 +00:00
## Magic Autosolvers
2024-04-06 18:35:30 +00:00
* [**https://github.com/Ciphey/Ciphey** ](https://github.com/Ciphey/Ciphey )
2024-07-18 18:17:16 +00:00
* [https://gchq.github.io/CyberChef/ ](https://gchq.github.io/CyberChef/ ) (modulo Magic)
2024-04-06 18:35:30 +00:00
* [https://github.com/dhondta/python-codext ](https://github.com/dhondta/python-codext )
* [https://www.boxentriq.com/code-breaking ](https://www.boxentriq.com/code-breaking )
2024-07-18 18:17:16 +00:00
## Codificatori
2024-04-06 18:35:30 +00:00
La maggior parte dei dati codificati può essere decodificata con queste 2 risorse:
* [https://www.dcode.fr/tools-list ](https://www.dcode.fr/tools-list )
* [https://gchq.github.io/CyberChef/ ](https://gchq.github.io/CyberChef/ )
2024-07-18 18:17:16 +00:00
### Substitution Autosolvers
2024-04-06 18:35:30 +00:00
* [https://www.boxentriq.com/code-breaking/cryptogram ](https://www.boxentriq.com/code-breaking/cryptogram )
2024-07-18 18:17:16 +00:00
* [https://quipqiup.com/ ](https://quipqiup.com ) - Molto buono !
2024-04-06 18:35:30 +00:00
2024-07-18 18:17:16 +00:00
#### Caesar - ROTx Autosolvers
2024-04-06 18:35:30 +00:00
* [https://www.nayuki.io/page/automatic-caesar-cipher-breaker-javascript ](https://www.nayuki.io/page/automatic-caesar-cipher-breaker-javascript )
2024-07-18 18:17:16 +00:00
#### Cifratura Atbash
2024-04-06 18:35:30 +00:00
* [http://rumkin.com/tools/cipher/atbash.php ](http://rumkin.com/tools/cipher/atbash.php )
2024-07-18 18:17:16 +00:00
### Base Encodings Autosolver
2024-04-06 18:35:30 +00:00
Controlla tutte queste basi con: [https://github.com/dhondta/python-codext ](https://github.com/dhondta/python-codext )
* **Ascii85**
* `BQ%]q@psCd@rH0l`
* **Base26** \[_A-Z_]
* `BQEKGAHRJKHQMVZGKUXNT`
* **Base32** \[_A-Z2-7=_]
* `NBXWYYLDMFZGCY3PNRQQ====`
* **Zbase32** \[_ybndrfg8ejkmcpqxot1uwisza345h769_]
* `pbzsaamdcf3gna5xptoo====`
* **Base32 Geohash** \[_0-9b-hjkmnp-z_]
* `e1rqssc3d5t62svgejhh====`
* **Base32 Crockford** \[_0-9A-HJKMNP-TV-Z_]
* `D1QPRRB3C5S62RVFDHGG====`
* **Base32 Extended Hexadecimal** \[_0-9A-V_]
* `D1NMOOB3C5P62ORFDHGG====`
* **Base45** \[_0-9A-Z $%\*+-./:_]
* `59DPVDGPCVKEUPCPVD`
* **Base58 (bitcoin)** \[_1-9A-HJ-NP-Za-km-z_]
* `2yJiRg5BF9gmsU6AC`
* **Base58 (flickr)** \[_1-9a-km-zA-HJ-NP-Z_]
* `2YiHqF5bf9FLSt6ac`
* **Base58 (ripple)** \[_rpshnaf39wBUDNEGHJKLM4PQ-T7V-Z2b-eCg65jkm8oFqi1tuvAxyz_]
* `pyJ5RgnBE9gm17awU`
* **Base62** \[_0-9A-Za-z_]
* `g2AextRZpBKRBzQ9`
* **Base64** \[_A-Za-z0-9+/=_]
* `aG9sYWNhcmFjb2xh`
* **Base67** \[_A-Za-z0-9-_.!\~\_]
* `NI9JKX0cSUdqhr!p`
* **Base85 (Ascii85)** \[_!"#$%&'() \*+,-./0-9:; < =>?@A-Z\[\\]^\_\`a-u_]
* `BQ%]q@psCd@rH0l`
* **Base85 (Adobe)** \[_!"#$%&'() \*+,-./0-9:; < =>?@A-Z\[\\]^\_\`a-u_]
* `<~BQ%]q@psCd@rH0l~>`
* **Base85 (IPv6 o RFC1924)** \[_0-9A-Za-z!#$%&() \*+-; < =>?@^_\`{|}\~\_]
* `Xm4y` V\_|Y(V{dF>\`
* **Base85 (xbtoa)** \[_!"#$%&'() \*+,-./0-9:; < =>?@A-Z\[\\]^\_\`a-u_]
* `xbtoa Begin\nBQ%]q@psCd@rH0l\nxbtoa End N 12 c E 1a S 4e6 R 6991d`
* **Base85 (XML)** \[_0-9A-Za-y!#$()\*+,-./:;=?@^\`{|}\~z\__]
* `Xm4y|V{~Y+V}dF?`
* **Base91** \[_A-Za-z0-9!#$%&() \*+,./:; < =>?@\[]^\_\`{|}\~"_]
* `frDg[*jNN!7&BQM`
* **Base100** \[]
* `👟👦👣👘👚👘👩👘👚👦👣👘`
* **Base122** \[]
2024-07-18 18:17:16 +00:00
* `4F ˂ r0Xmvc`
* **ATOM-128** \[_/128GhIoPQROSTeUbADfgHijKLM+n0pFWXY456xyzB7=39VaqrstJklmNuZvwcdEC_]
* `MIc3KiXa+Ihz+lrXMIc3KbCC`
* **HAZZ15** \[_HNO4klm6ij9n+J2hyf0gzA8uvwDEq3X1Q7ZKeFrWcVTts/MRGYbdxSo=ILaUpPBC5_]
2024-04-06 18:35:30 +00:00
* `DmPsv8J7qrlKEoY7`
* **MEGAN35** \[_3G-Ub=c-pW-Z/12+406-9Vaq-zA-F5_]
* `kLD8iwKsigSalLJ5`
* **ZONG22** \[_ZKj9n+yf0wDVX1s/5YbdxSo=ILaUpPBCHg8uvNO4klm6iJGhQ7eFrWczAMEq3RTt2_]
* `ayRiIo1gpO+uUc7g`
* **ESAB46** \[]
* `3sHcL2NR8WrT7mhR`
* **MEGAN45** \[]
* `kLD8igSXm2KZlwrX`
* **TIGO3FX** \[]
* `7AP9mIzdmltYmIP9mWXX`
* **TRIPO5** \[]
* `UE9vSbnBW6psVzxB`
* **FERON74** \[]
* `PbGkNudxCzaKBm0x`
* **GILA7** \[]
* `D+nkv8C1qIKMErY1`
* **Citrix CTX1** \[]
* `MNGIKCAHMOGLKPAKMMGJKNAINPHKLOBLNNHILCBHNOHLLPBK`
[http://k4.cba.pl/dw/crypo/tools/eng\_atom128c.html ](http://k4.cba.pl/dw/crypo/tools/eng\_atom128c.html ) - 404 Dead: [https://web.archive.org/web/20190228181208/http://k4.cba.pl/dw/crypo/tools/eng\_hackerize.html ](https://web.archive.org/web/20190228181208/http://k4.cba.pl/dw/crypo/tools/eng\_hackerize.html )
### HackerizeXS \[_╫Λ↻├☰┏_]
```
╫☐↑Λ↻Λ┏Λ↻☐↑Λ
```
* [http://k4.cba.pl/dw/crypo/tools/eng\_hackerize.html ](http://k4.cba.pl/dw/crypo/tools/eng\_hackerize.html ) - 404 Non trovato: [https://web.archive.org/web/20190228181208/http://k4.cba.pl/dw/crypo/tools/eng\_hackerize.html ](https://web.archive.org/web/20190228181208/http://k4.cba.pl/dw/crypo/tools/eng\_hackerize.html )
### Morse
```
.... --- .-.. -.-. .- .-. .- -.-. --- .-.. .-
```
* [http://k4.cba.pl/dw/crypo/tools/eng\_morse-encode.html ](http://k4.cba.pl/dw/crypo/tools/eng\_morse-encode.html ) - 404 Non trovato: [https://gchq.github.io/CyberChef/ ](https://gchq.github.io/CyberChef/ )
### UUencoder
```
begin 644 webutils_pl
M2$],04A/3$%(3TQ!2$],04A/3$%(3TQ!2$],04A/3$%(3TQ!2$],04A/3$%(
M3TQ!2$],04A/3$%(3TQ!2$],04A/3$%(3TQ!2$],04A/3$%(3TQ!2$],04A/
F3$%(3TQ!2$],04A/3$%(3TQ!2$],04A/3$%(3TQ!2$],04A/3$$`
`
end
```
* [http://www.webutils.pl/index.php?idx=uu ](http://www.webutils.pl/index.php?idx=uu )
### XXEncoder
```
begin 644 webutils_pl
hG2xAEIVDH236Hol-G2xAEIVDH236Hol-G2xAEIVDH236Hol-G2xAEIVDH236
5Hol-G2xAEE++
end
```
* [www.webutils.pl/index.php?idx=xx ](https://github.com/carlospolop/hacktricks/tree/bf578e4c5a955b4f6cdbe67eb4a543e16a3f848d/crypto/www.webutils.pl/index.php?idx=xx )
### YEncoder
```
=ybegin line=128 size=28 name=webutils_pl
ryvkryvkryvkryvkryvkryvkryvk
=yend size=28 crc32=35834c86
```
* [http://www.webutils.pl/index.php?idx=yenc ](http://www.webutils.pl/index.php?idx=yenc )
### BinHex
```
(This file must be converted with BinHex 4.0)
:#hGPBR9dD@acAh"X!$mr2cmr2cmr!!!!!!!8!!!!!-ka5%p-38K26%& )6da"5%p
-38K26%'d9J!!:
```
* [http://www.webutils.pl/index.php?idx=binhex ](http://www.webutils.pl/index.php?idx=binhex )
### ASCII85
```
< ~85DoF85DoF85DoF85DoF85DoF85DoF~>
```
* [http://www.webutils.pl/index.php?idx=ascii85 ](http://www.webutils.pl/index.php?idx=ascii85 )
### Tastiera Dvorak
```
drnajapajrna
```
2024-07-18 18:17:16 +00:00
* [https://www.geocachingtoolbox.com/index.php?lang=en\&page=dvorakKeyboard ](https://www.geocachingtoolbox.com/index.php?lang=en\&page=dvorakKeyboard )
2024-04-06 18:35:30 +00:00
### A1Z26
Lettere al loro valore numerico
```
8 15 12 1 3 1 18 1 3 15 12 1
```
2024-07-18 18:17:16 +00:00
### Codifica Cifrario Affine
2024-04-06 18:35:30 +00:00
2024-07-18 18:17:16 +00:00
Lettera a num `(ax+b)%26` (_a_ e _b_ sono le chiavi e _x_ è la lettera) e il risultato ritorna a lettera
2024-04-06 18:35:30 +00:00
```
krodfdudfrod
```
### Codice SMS
2024-07-18 18:17:16 +00:00
**Multitap** [sostituisce una lettera ](https://www.dcode.fr/word-letter-change ) con cifre ripetute definite dal codice chiave corrispondente su una [tastiera del telefono ](https://www.dcode.fr/phone-keypad-cipher ) mobile (Questo modo è utilizzato nella scrittura di SMS).\
Per esempio: 2=A, 22=B, 222=C, 3=D...\
2024-04-06 18:35:30 +00:00
Puoi identificare questo codice perché vedrai\*\* diversi numeri ripetuti\*\*.
Puoi decodificare questo codice su: [https://www.dcode.fr/multitap-abc-cipher ](https://www.dcode.fr/multitap-abc-cipher )
### Codice Bacon
2024-07-18 18:17:16 +00:00
Sostituisci ogni lettera con 4 A o B (o 1 e 0)
2024-04-06 18:35:30 +00:00
```
00111 01101 01010 00000 00010 00000 10000 00000 00010 01101 01010 00000
AABBB ABBAB ABABA AAAAA AAABA AAAAA BAAAA AAAAA AAABA ABBAB ABABA AAAAA
```
### Rune
![](../.gitbook/assets/runes.jpg)
2024-07-18 18:17:16 +00:00
## Compression
2024-04-06 18:35:30 +00:00
**Raw Deflate** e **Raw Inflate** (puoi trovarli entrambi in Cyberchef) possono comprimere e decomprimere dati senza intestazioni.
2024-07-18 18:17:16 +00:00
## Crittografia Semplice
2024-04-06 18:35:30 +00:00
2024-07-18 18:17:16 +00:00
### XOR - Risolutore automatico
2024-04-06 18:35:30 +00:00
* [https://wiremask.eu/tools/xor-cracker/ ](https://wiremask.eu/tools/xor-cracker/ )
### Bifid
È necessaria una parola chiave
```
fgaargaamnlunesuneoa
```
### Vigenere
È necessaria una parola chiave
```
wodsyoidrods
```
* [https://www.guballa.de/vigenere-solver ](https://www.guballa.de/vigenere-solver )
* [https://www.dcode.fr/vigenere-cipher ](https://www.dcode.fr/vigenere-cipher )
* [https://www.mygeocachingprofile.com/codebreaker.vigenerecipher.aspx ](https://www.mygeocachingprofile.com/codebreaker.vigenerecipher.aspx )
## Crittografia Forte
### Fernet
2 stringhe base64 (token e chiave)
```
Token:
gAAAAABWC9P7-9RsxTz_dwxh9-O2VUB7Ih8UCQL1_Zk4suxnkCvb26Ie4i8HSUJ4caHZuiNtjLl3qfmCv_fS3_VpjL7HxCz7_Q==
Key:
-s6eI5hyNh8liH7Gq0urPC-vzPgNnxauKvRO4g03oYI=
```
* [https://asecuritysite.com/encryption/ferdecode ](https://asecuritysite.com/encryption/ferdecode )
### Condivisione segreta di Samir
Un segreto viene diviso in X parti e per recuperarlo sono necessarie Y parti (_Y < =X_).
```
8019f8fa5879aa3e07858d08308dc1a8b45
80223035713295bddf0b0bd1b10a5340b89
803bc8cf294b3f83d88e86d9818792e80cd
```
[http://christian.gen.co/secrets/ ](http://christian.gen.co/secrets/ )
2024-07-18 18:17:16 +00:00
### Forza bruta con OpenSSL
2024-04-06 18:35:30 +00:00
* [https://github.com/glv2/bruteforce-salted-openssl ](https://github.com/glv2/bruteforce-salted-openssl )
* [https://github.com/carlospolop/easy\_BFopensslCTF ](https://github.com/carlospolop/easy\_BFopensslCTF )
## Strumenti
* [https://github.com/Ganapati/RsaCtfTool ](https://github.com/Ganapati/RsaCtfTool )
* [https://github.com/lockedbyte/cryptovenom ](https://github.com/lockedbyte/cryptovenom )
* [https://github.com/nccgroup/featherduster ](https://github.com/nccgroup/featherduster )
2024-07-18 18:17:16 +00:00
{% hint style="success" %}
Impara e pratica l'hacking su AWS:< img src = "/.gitbook/assets/arte.png" alt = "" data-size = "line" > [**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)< img src = "/.gitbook/assets/arte.png" alt = "" data-size = "line" > \
Impara e pratica l'hacking su GCP: < img src = "/.gitbook/assets/grte.png" alt = "" data-size = "line" > [**HackTricks Training GCP Red Team Expert (GRTE)**< img src = "/.gitbook/assets/grte.png" alt = "" data-size = "line" > ](https://training.hacktricks.xyz/courses/grte)
2024-04-06 18:35:30 +00:00
2024-07-18 18:17:16 +00:00
< details >
2024-04-06 18:35:30 +00:00
2024-07-18 18:17:16 +00:00
< summary > Sostieni HackTricks< / summary >
2024-04-06 18:35:30 +00:00
2024-07-18 18:17:16 +00:00
* Controlla i [**piani di abbonamento** ](https://github.com/sponsors/carlospolop )!
* **Unisciti al** 💬 [**gruppo Discord** ](https://discord.gg/hRep4RUj7f ) o al [**gruppo telegram** ](https://t.me/peass ) o **seguici** su **Twitter** 🐦 [**@hacktricks\_live** ](https://twitter.com/hacktricks\_live )**.**
* **Condividi trucchi di hacking inviando PR ai** [**HackTricks** ](https://github.com/carlospolop/hacktricks ) e [**HackTricks Cloud** ](https://github.com/carlospolop/hacktricks-cloud ) repository di Github.
2024-04-06 18:35:30 +00:00
< / details >
2024-07-18 18:17:16 +00:00
{% endhint %}