https://github.com/rdner/x509bf
Brute-force for x509 private keys with DEK headers
https://github.com/rdner/x509bf
Last synced: about 1 year ago
JSON representation
Brute-force for x509 private keys with DEK headers
- Host: GitHub
- URL: https://github.com/rdner/x509bf
- Owner: rdner
- License: mit
- Created: 2019-11-24T19:22:05.000Z (over 6 years ago)
- Default Branch: master
- Last Pushed: 2021-12-12T18:04:30.000Z (over 4 years ago)
- Last Synced: 2025-02-08T23:46:04.996Z (over 1 year ago)
- Language: Go
- Homepage:
- Size: 7.81 KB
- Stars: 1
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# CLI tool for brute-forcing private keys with DEK headers
This is a CLI tool that tries to use multiple passphrases from a given wordlist to decrypt an encrypted private key that has a DEK header.
## What is DEK header?
In some encrypted private keys you can see a special header that indicates the encryption algorithm, like so:
```
-----BEGIN RSA PRIVATE KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: DES-EDE3-CBC,FD9831D6BE43C1FA
```
If a private key starts with a similar header it's likely supported by this tool.
## Usage
```bash
Usage of ./x509bf:
-c uint level of concurrency, number of cores is the default (default 8)
-k string path to the encrypted PEM file
-l string path to the wordlist to try, e.g. /usr/share/wordlists/rockyou.txt
-v verbose logging (slower)
```
## Disclaimer
This tool is supposed to be used for research purposes only and must be NOT used for illegal actions.