First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

pcap file containing cryptcat conversation

  • retag add tags

I have a pcap file of a cryptcat conversation and also i have the key, but whatever i try i have no success decrypt the conversation. Can u help me?

3RO's avatar
1
3RO
asked 2020-04-28 06:34:55 +0000
edit flag offensive 0 remove flag close merge delete

Comments

What have you tried so far?

Jaap's avatar Jaap (2020-04-28 06:55:26 +0000) edit

Taking the tcp stream (as hexdump) and trying to decrypt it, but it's really the twofish encryption of the msg, it seems like it has another layer of encryption.

Twofish encryption results in a nice string (similar to base 64..)

3RO's avatar 3RO (2020-04-28 07:48:09 +0000) edit

Thank you very much, I think it'll do

3RO's avatar 3RO (2020-04-28 08:38:22 +0000) edit
add a comment see more comments

1 Answer

0

You'll have to have a look at the cryptcat source code (to be found on SourceForge) to see how they bolted on encryption to the netcat stream. If you want to do it the hard way you're looking at cryptanalysis, which is somewhat out of scope for this Q&A site.

Jaap's avatar
13.7k
Jaap
answered 2020-04-28 08:30:02 +0000
edit flag offensive 0 remove flag delete link

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer