pen-test
[Top] [All Lists]

Re: pent-test a container file

To: Julien <prospi@gmail.com>
Subject: Re: pent-test a container file
From: Tim <tim-pentest@sentinelchicken.org>
Date: Fri, 19 Jan 2007 15:11:05 -0500
Cc: pen-test@securityfocus.com
Delivered-to: sp-com-lists@consult.net
Delivered-to: pentest-list2@consult.net
Delivered-to: mailing list pen-test@securityfocus.com
Delivered-to: moderator for pen-test@securityfocus.com
In-reply-to: <f04913100701190228s7f309869v8f9f644bd58d2eb0@mail.gmail.com>
List-help: <mailto:pen-test-help@securityfocus.com>
List-id: <pen-test.list-id.securityfocus.com>
List-post: <mailto:pen-test@securityfocus.com>
List-subscribe: <mailto:pen-test-subscribe@securityfocus.com>
List-unsubscribe: <mailto:pen-test-unsubscribe@securityfocus.com>
Mailing-list: contact pen-test-help@securityfocus.com; run by ezmlm
References: <45AFE40A.7070605@web.de> <f04913100701190228s7f309869v8f9f644bd58d2eb0@mail.gmail.com>
Resent-date: Fri, 19 Jan 2007 19:36:13 -0700 (MST)
Resent-from: pen-test-return-1078483443@securityfocus.com
Resent-message-id: <20070120023613.F28101C0413@outgoing2.securityfocus.com>
Resent-sender: listbounce@securityfocus.com
Sender: listbounce@securityfocus.com
User-agent: Mutt/1.5.13 (2006-08-11)
> I actually know that the used algo is AES... no more.
> The minimum password length to use is 6 characters (including numbers
> and special characters..)

Um, if you knew it was AES, why did you not mention this earlier?
You're not going to get much from the list if you don't give much.

If you know it's AES, do you know what key size (e.g.: 128, 192, 256)?
Once you know key size, you need to know how the 6+ character password
is converted to a key.  Is it just NULL padded, or are they using
something more intelligent?  There are published standards for this.

Do you know what mode it was encrypted with (e.g.: ECB, CBC, OFB, CFB,
or CTR)?  You could check for repeating blocks.  If you find any, it's
an indication it may be ECB.  Otherwise, who knows...

There, have a bone.  It ain't much, but it's kinda a pointless exercise
anyway.

tim

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.

http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------


<Prev in Thread] Current Thread [Next in Thread>