https://github.com/netspi/dekrypto
https://github.com/netspi/dekrypto
Last synced: 11 months ago
JSON representation
- Host: GitHub
- URL: https://github.com/netspi/dekrypto
- Owner: NetSPI
- License: other
- Created: 2014-02-17T21:31:07.000Z (about 12 years ago)
- Default Branch: master
- Last Pushed: 2014-03-03T23:22:23.000Z (about 12 years ago)
- Last Synced: 2025-04-04T12:04:26.927Z (12 months ago)
- Language: Ruby
- Size: 240 KB
- Stars: 8
- Watchers: 59
- Forks: 6
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE.txt
Awesome Lists containing this project
README
# Dekrypto
A script to perform padding oracle attack against IBM Websphere Commerce (CVE-2013-05230) - written by Khai Tran [https://twitter.com/ktranfosec](https://twitter.com/ktranfosec "@ktranfosec")
### External libraries used:
- Ron Bowes' poracle framework: https://github.com/iagox86/poracle
- Meh's threadpool library: https://github.com/meh/ruby-thread thread
- Florian Pilz's micro-optparse: https://github.com/florianpilz/micro-optparse
- John Nunemaker's Httparty https://github.com/jnunemaker/httparty
### Installation
``bundle install``
On Kali Linux you may want to run `apt-get install ruby-dev` first when encounter this error:
/usr/bin/ruby1.9.1 extconf.rb
/usr/lib/ruby/1.9.1/rubygems/custom_require.rb:36:in `require': cannot load such file -- mkmf (LoadError)
from /usr/lib/ruby/1.9.1/rubygems/custom_require.rb:36:in `require'
from extconf.rb:4:in `'
### Usage: Dekrypto.rb [options]
```
-s, --sort Sort temporary results
-v, --verboseShow debug messages
-t, --threads SIZE Set threadpool size
-f, --file FILE Save temporary results to file
-h, --help Show this message
```
#### Example: run krypto test server
ruby KryptoTestServer.rb
#### Example: run Dekrypto script with 10 threads, verbose, saving progress to text file
ruby DeKryptoDemo.rb -v -f decrypted.txt –t 10
#### Note: to change target URL and Success/Fail condition, edit following methods in Dekrypto.rb
- `initialize()` -> change target URL
- `attempt_decrypt()` -> Success/Fail condition