{"id":18110735,"url":"https://github.com/secretsquirrel/bounty-encryptagit","last_synced_at":"2026-03-19T03:15:39.195Z","repository":{"id":70395838,"uuid":"494287747","full_name":"secretsquirrel/Bounty-EncryptAGit","owner":"secretsquirrel","description":"Can you crack it?","archived":false,"fork":false,"pushed_at":"2022-05-20T04:59:26.000Z","size":65,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":3,"default_branch":"main","last_synced_at":"2025-04-06T07:45:25.080Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/secretsquirrel.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null},"funding":{"github":["secretsquirrel"]}},"created_at":"2022-05-20T01:56:37.000Z","updated_at":"2023-09-08T18:34:43.000Z","dependencies_parsed_at":"2023-04-14T10:22:32.612Z","dependency_job_id":null,"html_url":"https://github.com/secretsquirrel/Bounty-EncryptAGit","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/secretsquirrel/Bounty-EncryptAGit","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/secretsquirrel%2FBounty-EncryptAGit","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/secretsquirrel%2FBounty-EncryptAGit/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/secretsquirrel%2FBounty-EncryptAGit/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/secretsquirrel%2FBounty-EncryptAGit/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/secretsquirrel","download_url":"https://codeload.github.com/secretsquirrel/Bounty-EncryptAGit/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/secretsquirrel%2FBounty-EncryptAGit/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28606139,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-20T14:45:23.139Z","status":"ssl_error","status_checked_at":"2026-01-20T14:44:16.929Z","response_time":117,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-01T00:11:17.623Z","updated_at":"2026-01-20T15:07:26.975Z","avatar_url":"https://github.com/secretsquirrel.png","language":null,"funding_links":["https://github.com/sponsors/secretsquirrel"],"categories":[],"sub_categories":[],"readme":"# EncryptAGit Bounty\n\nCan you crack it?\n\n\n## But Why?\n\n![But Why](https://media0.giphy.com/media/s239QJIh56sRW/giphy.gif)\n\nI've been dog fooding [encryptAgit](https://github.com/secretsquirrel/encryptAgit) and it's open source. \n\nSo, a bounty seemed appropriate. Yes, this is self funded.\n\n\n## Bounties\n\nEach reward is given out *only once* to the first person or team that can provide a writeup of the process to successfully decrypt each note and actually decrypt each note.\n\nExamples: If you tell me that all you need is the correct salt/password combo, then provide those two items and tell me how you derived them; whether bruce forcing or figuring out I like Star Wars movies and getting lucky. If you were able to do a padding oracle attack of sorts, provide the code used so I can verify that was the method used to decrypt the files.\n\nThe encrypted_git.json file and associated git history was created with encryptAgit==0.1.0; download [here](https://github.com/secretsquirrel/encryptAgit/tree/790b5291da8e016006ea8fb55889605506c22b31) or via `pip3 install encryptAgit==0.1.0`.\n\nThis [commit](https://github.com/secretsquirrel/Bounty-EncryptAGit/commit/954d2aa5fbad53f5ade048bb789b206a529c3d5b) is the last commit with changes to all the notes.\n\nEach note increases in size thereby potentially making the challenge harder. Or is it easier? 😉\n\nThe salt for KDF and password are the same for all of the commits. 😱\n\nHowever, the salt and password are each complex.\n\nI will consider partial decryption of the final files for a prorated reward. \n\nPartial decryption entries will not be accepted as final until the final day of submissions to ensure full decryption submissions are received. The best partial decryption entry will get the prorated reward per note. So only one reward per note, the best entry.\n\n#### Reward 1: $500\n\nDecrypt the final instance of Note1.txt\n\n#### Reward 2: $1000\n\nDecrypt the final instance of Note2.txt\n\n#### Reward 3: $1500\n\nDecrypt the final instance of Note3.txt\n\n#### Reward 4: $2000\n\nDecrypt the final instance of Note4.md\n\n\n## End of bounty\n\nFinal day for valid submissions is May 20, 2023.\n\nPayment will be made via Vemno or Paypal - whichever is still in business.\n\n\n## Submissions\n\nEmail the.midnite[.]runr[at]gmail[dot]com. Email Subject: `EncryptAGit Bounty`\n\nOnly text entries will be accepted. No PDFs, word documents, STL files, encrypted zip files, photos, etc.. \n\nAttemping to or successfully hacking me, while hilarious, is a disqualifying event. \n\nBest of Luck! I'm looking forward to seeing the outcome of this.\n\n\n## Hints\n\n* https://www.youtube.com/watch?v=v0IsYNDMV7A \n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsecretsquirrel%2Fbounty-encryptagit","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsecretsquirrel%2Fbounty-encryptagit","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsecretsquirrel%2Fbounty-encryptagit/lists"}