#1
  1. No Profile Picture
    Registered User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Jun 2011
    Posts
    1
    Rep Power
    0

    I need some help decrypting this...


    Hello! I am new to these forums so I am really sorry if this is the wrong section to be posting this. The thing is that I have this code and I really need help decrypting it. I have asked in several other forums the same question, but couldnt get enough help to decrypt it. I have tried every single single method I could think off and Base64 is the one that makes the most sence when decrypted, but along with that, it gives out symbols between the text and in the start and end of it. I got two suggestions from the other forums I posted this in. One was that it's encrypted in javascript and I need the key in order to decrypt it. And the other one was that there is a problem with the encryption encoding and to be more specific that it was trying to decrypt a utf-8 in cp1251. For the second suggestion I checked the place where I got this code from and it says the encoding is in utf-8. But I dont really understand that, so I could do more. Aaand yea, that's about it. I really hope someone here can help me decrypt it and here's the code itself:

    Code:
    
    /wEPDwULLTE4OTkyODgzOTUPZBYCZg9kFgRmD2QWBAIEDxYCHgRocmVmBTAvQ1NTL0Jhc2UvQ1NTL0FsbENTUy5hc2h4P3Y9MjAxMTA1MTZxcndlZiZ0PVJCWDJkAgUPFgQfAAUXfi9UZXN0aW5nL1JCWDJTdHlsZS5jc3MeB1Zpc2libGVoZAIBEBYCHgZhY3Rpb24FRS9Mb2dpbi9SZXNldFBhc3N3b3JkLmFzcHg/VGlja2V0PTE2MGUzMTFiLTAzYTQtNDQ3Ni04MDRiLTg3YWU3OTUyMWIzNmQWBAICDw8WAh8BaGRkAg4PZBYCAgEPDxYCHgRUZXh0BQd6b21ieTY1ZGQYBQUjY3RsMDAkcmJ4R29vZ2xlQW5hbHl0aWNzJE11bHRpVmlldzEPD2QCAWQFI2N0bDAwJExlZnRHdXR0ZXJBZCRBc3luY0FkTXVsdGlWaWV3Dw9kZmQFImN0bDAwJENsaWVudEluc3RhbGxlciRNdWx0aVZpZXdSdW4PD2QCBGQFJGN0bDAwJFJpZ2h0R3V0dGVyQWQkQXN5bmNBZE11bHRpVmlldw8PZGZkBSxjdGwwMCRjcGhCYW5uZXJBZCRCYW5uZXJBZHMkQXN5bmNBZE11bHRpVmlldw8PZGZkdsU2TqAGvdwc fitYMRaYcyc1Iw=
    
    Oh, and if it really turns out to be a javascript encryption, is it possible this to be the key ? :

    Code:
    
    160e311b-03a4-4476-804b-87ae79521b36
    
    Thanx in advance! =)
  2. #2
  3. No Profile Picture
    Contributing User
    Devshed Novice (500 - 999 posts)

    Join Date
    May 2007
    Posts
    765
    Rep Power
    929
    A decode_base64 and an xxd later...
    Code:
    0000000: ff01 0f0f 050b 2d31 3839 3932 3838 3339  ......-189928839
    0000010: 350f 6416 0266 0f64 1604 660f 6416 0402  5.d..f.d..f.d...
    0000020: 040f 1602 1e04 6872 6566 0530 2f43 5353  ......href.0/CSS
    0000030: 2f42 6173 652f 4353 532f 416c 6c43 5353  /Base/CSS/AllCSS
    0000040: 2e61 7368 783f 763d 3230 3131 3035 3136  .ashx?v=20110516
    0000050: 7172 7765 6626 743d 5242 5832 6402 050f  qrwef&t=RBX2d...
    0000060: 1604 1f00 0517 7e2f 5465 7374 696e 672f  ......~/Testing/
    0000070: 5242 5832 5374 796c 652e 6373 731e 0756  RBX2Style.css..V
    0000080: 6973 6962 6c65 6864 0201 1016 021e 0661  isiblehd.......a
    0000090: 6374 696f 6e05 452f 4c6f 6769 6e2f 5265  ction.E/Login/Re
    00000a0: 7365 7450 6173 7377 6f72 642e 6173 7078  setPassword.aspx
    00000b0: 3f54 6963 6b65 743d 3136 3065 3331 3162  ?Ticket=160e311b
    00000c0: 2d30 3361 342d 3434 3736 2d38 3034 622d  -03a4-4476-804b-
    00000d0: 3837 6165 3739 3532 3162 3336 6416 0402  87ae79521b36d...
    00000e0: 020f 0f16 021f 0168 6464 020e 0f64 1602  .......hdd...d..
    00000f0: 0201 0f0f 1602 1e04 5465 7874 0507 7a6f  ........Text..zo
    0000100: 6d62 7936 3564 6418 0505 2363 746c 3030  mby65dd...#ctl00
    0000110: 2472 6278 476f 6f67 6c65 416e 616c 7974  $rbxGoogleAnalyt
    0000120: 6963 7324 4d75 6c74 6956 6965 7731 0f0f  ics$MultiView1..
    0000130: 6402 0164 0523 6374 6c30 3024 4c65 6674  d..d.#ctl00$Left
    0000140: 4775 7474 6572 4164 2441 7379 6e63 4164  GutterAd$AsyncAd
    0000150: 4d75 6c74 6956 6965 770f 0f64 6664 0522  MultiView..dfd."
    0000160: 6374 6c30 3024 436c 6965 6e74 496e 7374  ctl00$ClientInst
    0000170: 616c 6c65 7224 4d75 6c74 6956 6965 7752  aller$MultiViewR
    0000180: 756e 0f0f 6402 0464 0524 6374 6c30 3024  un..d..d.$ctl00$
    0000190: 5269 6768 7447 7574 7465 7241 6424 4173  RightGutterAd$As
    00001a0: 796e 6341 644d 756c 7469 5669 6577 0f0f  yncAdMultiView..
    00001b0: 6466 6405 2c63 746c 3030 2463 7068 4261  dfd.,ctl00$cphBa
    00001c0: 6e6e 6572 4164 2442 616e 6e65 7241 6473  nnerAd$BannerAds
    00001d0: 2441 7379 6e63 4164 4d75 6c74 6956 6965  $AsyncAdMultiVie
    00001e0: 770f 0f64 6664 76c5 364e a006 bddc 1c7e  w..dfdv.6N.....~
    00001f0: 2b58 3116 9873 2735 23                   +X1..s'5#
    Doesn't look like it's encrypted at all. If I had to guess it's a JSON object that's been serialized and those symbols are delimiting keys and values (for example, I notice that every string is preceded by a length byte). If it's a common serialization format, someone with javascript experience might recognize it. Otherwise you'll have to extract what you can or reverse engineer the format.
    sub{*{$::{$_}}{CODE}==$_[0]&& print for(%:: )}->(\&Meh);

IMN logo majestic logo threadwatch logo seochat tools logo