hacktricks/cryptography/crypto-ctfs-tricks.md

Mbinu za Crypto CTFs

Jifunze kuhusu kudukua AWS kutoka sifuri hadi shujaa na htARTE (HackTricks AWS Red Team Expert)!

Njia nyingine za kusaidia HackTricks:

• Ikiwa unataka kuona kampuni yako inatangazwa kwenye HackTricks au kupakua HackTricks kwa PDF Angalia MPANGO WA KUJIUNGA!
• Pata swag rasmi ya PEASS & HackTricks
• Gundua The PEASS Family, mkusanyiko wetu wa kipekee wa NFTs
• Jiunge na 💬 Kikundi cha Discord au kikundi cha telegram au tufuate kwenye Twitter 🐦 @hacktricks_live.
• Shiriki mbinu zako za kudukua kwa kuwasilisha PR kwa HackTricks na HackTricks Cloud repos za github.

Online Hashes DBs

• Tafuta kwenye Google
• http://hashtoolkit.com/reverse-hash?hash=4d186321c1a7f0f354b297e8914ab240
• https://www.onlinehashcrack.com/
• https://crackstation.net/
• https://md5decrypt.net/
• https://www.onlinehashcrack.com
• https://gpuhash.me/
• https://hashes.org/search.php
• https://www.cmd5.org/
• https://hashkiller.co.uk/Cracker/MD5
• https://www.md5online.org/md5-decrypt.html

Magic Autosolvers

• https://github.com/Ciphey/Ciphey
• https://gchq.github.io/CyberChef/ (Moduli ya Magic)
• https://github.com/dhondta/python-codext
• https://www.boxentriq.com/code-breaking

Encoders

Kwa kawaida, data iliyofichwa inaweza kubadilishwa na rasilimali hizi 2:

• https://www.dcode.fr/tools-list
• https://gchq.github.io/CyberChef/

Substitution Autosolvers

• https://www.boxentriq.com/code-breaking/cryptogram
• https://quipqiup.com/ - Nzuri sana!

Caesar - ROTx Autosolvers

• https://www.nayuki.io/page/automatic-caesar-cipher-breaker-javascript

Atbash Cipher

• http://rumkin.com/tools/cipher/atbash.php

Base Encodings Autosolver

Angalia misingi yote hii na: https://github.com/dhondta/python-codext

• Ascii85
• BQ%]q@psCd@rH0l
• Base26 [A-Z]
• BQEKGAHRJKHQMVZGKUXNT
• Base32 [A-Z2-7=]
• NBXWYYLDMFZGCY3PNRQQ====
• Zbase32 [ybndrfg8ejkmcpqxot1uwisza345h769]
• pbzsaamdcf3gna5xptoo====
• Base32 Geohash [0-9b-hjkmnp-z]
• e1rqssc3d5t62svgejhh====
• Base32 Crockford [0-9A-HJKMNP-TV-Z]
• D1QPRRB3C5S62RVFDHGG====
• Base32 Extended Hexadecimal [0-9A-V]
• D1NMOOB3C5P62ORFDHGG====
• Base45 [0-9A-Z $%*+-./:]
• 59DPVDGPCVKEUPCPVD
• Base58 (bitcoin) [1-9A-HJ-NP-Za-km-z]
• 2yJiRg5BF9gmsU6AC
• Base58 (flickr) [1-9a-km-zA-HJ-NP-Z]
• 2YiHqF5bf9FLSt6ac
• Base58 (ripple) [rpshnaf39wBUDNEGHJKLM4PQ-T7V-Z2b-eCg65jkm8oFqi1tuvAxyz]
• pyJ5RgnBE9gm17awU
• Base62 [0-9A-Za-z]
• g2AextRZpBKRBzQ9
• Base64 [A-Za-z0-9+/=]
• aG9sYWNhcmFjb2xh
• Base67 [A-Za-z0-9-.!~_]
• NI9JKX0cSUdqhr!p
• Base85 (Ascii85) [!"#$%&'()*+,-./0-9:;<=>?@A-Z[\]^_`a-u]
• BQ%]q@psCd@rH0l
• Base85 (Adobe) [!"#$%&'()*+,-./0-9:;<=>?@A-Z[\]^_`a-u]
• <~BQ%]q@psCd@rH0l~>
• Base85 (IPv6 or RFC1924) [0-9A-Za-z!#$%&()*+-;<=>?@^`{|}~_]
• Xm4yV_|Y(V{dF>`
• Base85 (xbtoa) [!"#$%&'()*+,-./0-9:;<=>?@A-Z[\]^_`a-u]
• xbtoa Begin\nBQ%]q@psCd@rH0l\nxbtoa End N 12 c E 1a S 4e6 R 6991d
• Base85 (XML) [0-9A-Za-y!#$()*+,-./:;=?@^`{|}~z_]
• Xm4y|V{~Y+V}dF?
• Base91 [A-Za-z0-9!#$%&()*+,./:;<=>?@[]^_`{|}~"]
• frDg[*jNN!7&BQM
• Base100 []
• `👟👦👣👘👚👘👩
• DmPsv8J7qrlKEoY7
• MEGAN35 [3G-Ub=c-pW-Z/12+406-9Vaq-zA-F5]
• kLD8iwKsigSalLJ5
• ZONG22 [ZKj9n+yf0wDVX1s/5YbdxSo=ILaUpPBCHg8uvNO4klm6iJGhQ7eFrWczAMEq3RTt2]
• ayRiIo1gpO+uUc7g
• ESAB46 []
• 3sHcL2NR8WrT7mhR
• MEGAN45 []
• kLD8igSXm2KZlwrX
• TIGO3FX []
• 7AP9mIzdmltYmIP9mWXX
• TRIPO5 []
• UE9vSbnBW6psVzxB
• FERON74 []
• PbGkNudxCzaKBm0x
• GILA7 []
• D+nkv8C1qIKMErY1
• Citrix CTX1 []
• MNGIKCAHMOGLKPAKMMGJKNAINPHKLOBLNNHILCBHNOHLLPBK

http://k4.cba.pl/dw/crypo/tools/eng_atom128c.html - 404 Dead: https://web.archive.org/web/20190228181208/http://k4.cba.pl/dw/crypo/tools/eng_hackerize.html

HackerizeXS [╫Λ↻├☰┏]

╫☐↑Λ↻Λ┏Λ↻☐↑Λ

• http://k4.cba.pl/dw/crypo/tools/eng_hackerize.html - 404 Dead: https://web.archive.org/web/20190228181208/http://k4.cba.pl/dw/crypo/tools/eng_hackerize.html

Morse

• http://k4.cba.pl/dw/crypo/tools/eng_hackerize.html - 404 Mfu: https://web.archive.org/web/20190228181208/http://k4.cba.pl/dw/crypo/tools/eng_hackerize.html

.... --- .-.. -.-. .- .-. .- -.-. --- .-.. .-

• http://k4.cba.pl/dw/crypo/tools/eng_morse-encode.html - 404 Dead: https://gchq.github.io/CyberChef/

UUencoder

• http://k4.cba.pl/dw/crypo/tools/eng_morse-encode.html - 404 Mfu: https://gchq.github.io/CyberChef/

UUencoder

begin 644 webutils_pl
M2$],04A/3$%(3TQ!2$],04A/3$%(3TQ!2$],04A/3$%(3TQ!2$],04A/3$%(
M3TQ!2$],04A/3$%(3TQ!2$],04A/3$%(3TQ!2$],04A/3$%(3TQ!2$],04A/
F3$%(3TQ!2$],04A/3$%(3TQ!2$],04A/3$%(3TQ!2$],04A/3$$`
`
end

• http://www.webutils.pl/index.php?idx=uu

XXEncoder

XXEncoder ni kifaa kinachotumiwa kubadilisha data kuwa muundo mwingine ambao ni vigumu kusoma. Inaweza kutumika kuficha habari nyeti au kubadilisha data ili kuepuka uchunguzi. Kwa mfano, inaweza kutumika kubadilisha faili ya maandishi kuwa muundo wa Base64 ili kuficha maudhui yake halisi. Kwa kawaida, XXEncoder hutumiwa katika mazingira ya usalama na uchunguzi wa kina.

begin 644 webutils_pl
hG2xAEIVDH236Hol-G2xAEIVDH236Hol-G2xAEIVDH236Hol-G2xAEIVDH236
5Hol-G2xAEE++
end

• www.webutils.pl/index.php?idx=xx

YEncoder

YEncoder ni njia ya kubadilisha data kuwa muundo wa ASCII. Inatumika mara nyingi katika ujumbe wa barua pepe na kwenye mitandao ya zamani ya Usenet. YEncoder inachukua data ya binary na kuiweka katika muundo wa ASCII ili iweze kutumwa kwa urahisi kupitia njia za mawasiliano ambazo zinaweza kuharibu data ya binary.

YEncoder inafanya hivyo kwa kuchukua kila byte ya data ya binary na kuiweka katika muundo wa ASCII kwa kutumia kanuni maalum. Kanuni hii inahusisha kubadilisha kila byte kuwa kifungu cha ASCII kinachowakilisha thamani ya byte hiyo. Kwa mfano, byte ya 0x41 itabadilishwa kuwa kifungu cha ASCII kinachowakilisha herufi "A".

Kwa kubadilisha data ya binary kuwa muundo wa ASCII, YEncoder inaruhusu data hiyo kutumwa kupitia njia za mawasiliano ambazo zinaweza kuharibu data ya binary, kama vile barua pepe au mitandao ya zamani ya Usenet. Wakati data inapokelewa upande wa pili, YDecoder hutumiwa kubadilisha tena muundo wa ASCII kuwa data ya binary ya awali.

=ybegin line=128 size=28 name=webutils_pl
ryvkryvkryvkryvkryvkryvkryvk
=yend size=28 crc32=35834c86

• http://www.webutils.pl/index.php?idx=yenc

BinHex

BinHex ni mfumo wa uandishi wa faili ambao hutumiwa kubadilisha data ya binary kuwa maandishi yanayoweza kusomwa. Inatumika sana katika uhamishaji wa faili kwenye mitandao ya zamani. Mfumo huu unatumia msimbo wa hexadecimal kuwakilisha data ya binary. Kwa kawaida, faili za BinHex zina ugani wa ".hqx".

(This file must be converted with BinHex 4.0)
:#hGPBR9dD@acAh"X!$mr2cmr2cmr!!!!!!!8!!!!!-ka5%p-38K26%&)6da"5%p
-38K26%'d9J!!:

• http://www.webutils.pl/index.php?idx=binhex

ASCII85

ASCII85 ni mbinu ya kubadilisha data ya binary kuwa maandishi ya ASCII. Mbinu hii inatumika katika uwanja wa usalama wa mtandao na uhandisi wa nyuma. Inaweza kutumika kuficha data au kubadilisha data ya binary kuwa muundo unaoweza kusomwa na binadamu. Mbinu hii inatumika mara nyingi katika CTFs na shughuli za udukuzi.

<~85DoF85DoF85DoF85DoF85DoF85DoF~>

• http://www.webutils.pl/index.php?idx=ascii85

Kibodi ya Dvorak

drnajapajrna

• https://www.geocachingtoolbox.com/index.php?lang=sw&page=dvorakKeyboard

A1Z26

Barua kwa thamani zao za nambari

8 15 12 1 3 1 18 1 3 15 12 1

Ufungaji wa Chanzo cha Affine

Barua hadi nambari (ax+b)%26 (a na b ni funguo na x ni barua) na matokeo kurudi kwa barua

krodfdudfrod

Msimbo wa SMS

Multitap inabadilisha herufi kwa nambari zinazorudiwa zilizofafanuliwa na nambari ya ufunguo inayolingana kwenye kibodi ya simu (Hali hii hutumiwa wakati wa kuandika SMS).
Kwa mfano: 2=A, 22=B, 222=C, 3=D...
Unaweza kutambua msimbo huu kwa sababu utaona** nambari kadhaa zinazorudiwa**.

Unaweza kufichua msimbo huu kwa kutumia: https://www.dcode.fr/multitap-abc-cipher

Msimbo wa Bacon

Badilisha kila herufi kwa As au Bs nne (au 1s na 0s)

00111 01101 01010 00000 00010 00000 10000 00000 00010 01101 01010 00000
AABBB ABBAB ABABA AAAAA AAABA AAAAA BAAAA AAAAA AAABA ABBAB ABABA AAAAA

Alama za Kukimbia

Ufupishaji

Raw Deflate na Raw Inflate (unaweza kupata zote mbili katika Cyberchef) zinaweza kufupisha na kurejesha data bila vichwa.

Crypto Rahisi

XOR - Autosolver

• https://wiremask.eu/tools/xor-cracker/

Bifid

Inahitajika neno muhimu

fgaargaamnlunesuneoa

Vigenere

Inahitajika neno muhimu

wodsyoidrods

• https://www.guballa.de/vigenere-solver
• https://www.dcode.fr/vigenere-cipher
• https://www.mygeocachingprofile.com/codebreaker.vigenerecipher.aspx

Crypto Imara

Fernet

2 herufi za msingi 64 (ishara na ufunguo)

Token:
gAAAAABWC9P7-9RsxTz_dwxh9-O2VUB7Ih8UCQL1_Zk4suxnkCvb26Ie4i8HSUJ4caHZuiNtjLl3qfmCv_fS3_VpjL7HxCz7_Q==

Key:
-s6eI5hyNh8liH7Gq0urPC-vzPgNnxauKvRO4g03oYI=

• https://asecuritysite.com/encryption/ferdecode

Kugawanya Siri ya Samir

Siri inagawanywa katika sehemu X na ili kuirejesha unahitaji sehemu Y (Y <=X).

8019f8fa5879aa3e07858d08308dc1a8b45
80223035713295bddf0b0bd1b10a5340b89
803bc8cf294b3f83d88e86d9818792e80cd

http://christian.gen.co/secrets/

Kuvunja nguvu ya OpenSSL

• https://github.com/glv2/bruteforce-salted-openssl
• https://github.com/carlospolop/easy_BFopensslCTF

Zana

• https://github.com/Ganapati/RsaCtfTool
• https://github.com/lockedbyte/cryptovenom
• https://github.com/nccgroup/featherduster

Jifunze kuhusu kudukua AWS kutoka sifuri hadi shujaa na htARTE (HackTricks AWS Red Team Expert)!

Njia nyingine za kusaidia HackTricks:

• Ikiwa unataka kuona kampuni yako inatangazwa kwenye HackTricks au kupakua HackTricks kwa muundo wa PDF Angalia MPANGO WA KUJIUNGA!
• Pata swag rasmi wa PEASS & HackTricks
• Gundua The PEASS Family, mkusanyiko wetu wa NFTs za kipekee
• Jiunge na 💬 Kikundi cha Discord au kikundi cha telegram au tufuate kwenye Twitter 🐦 @hacktricks_live.
• Shiriki mbinu zako za kudukua kwa kuwasilisha PRs kwenye HackTricks na HackTricks Cloud github repos.