Skip to main content
Share Your Experience: Take the 2024 Developer Survey
310 votes
Accepted

I am a victim of the Petya ransomware. Is there a solution to decrypt my disk?

Fortunately, yes, there is a solution - I've written an application that would help with this. Petya encryption has been reversed, analyzed and there is a solution to get the decryption key, just ...
leostone's user avatar
  • 1,759
39 votes

Retrieve/decrypt Windows 7 product key from Linux

There is a great tool available for Linux called chntpw. You can get it easily on Debian/Ubuntu via: sudo apt install chntpw To look into the relevant registry file mount the Windows disk and open ...
Thomas's user avatar
  • 1,191
18 votes

PGP file decryption from Linux cmd line

Import your private key: cat mykey.asc # should start with -----BEGIN PGP PRIVATE KEY BLOCK----- gpg --import mykey.asc Check if it shows up: gpg --list-secret-keys Decrypt a message: gpg --...
Michael D.'s user avatar
18 votes
Accepted

How can I encrypt / decrypt AES-256 CBC with OpenSSL?

Prepare input text: echo "We're blown. Run" >input.txt Encrypt: openssl enc -aes-256-cbc -nosalt -e \ -in input.txt -out input.txt.enc \ -K '2222233333232323' -iv '...
SergA's user avatar
  • 336
8 votes

I turned off BitLocker encryption on my 5TB drive and now it continues to decrypt for days!

According to the FAQs, you should be fine to turn off your computer during the decryption process, including a power failure. What happens if the computer is turned off during encryption or ...
ajsmith's user avatar
  • 81
6 votes

Print (decrypt) a vim encrypted file

This is not an elegant solution---it is quick and dirty---but it does work on single files and you can use it as a shell script. It's a sequence of three commands which perform the following: Open ...
Achilleas's user avatar
  • 344
6 votes

How do I crack a double encrypted Hash

This composite hash has no benefit over plain bcrypt. It could be marginally weaker due to MD5 collisions, but I don't think one could actually exploit it to make this attack faster. Anyway, there's ...
gronostaj's user avatar
  • 57.2k
6 votes
Accepted

How do I crack a double encrypted Hash

As a password cracker, I encourage all of my targets to use this technique. ;) It seems like a good idea, but it turns out that against real-world attacks, wrapping an unsalted hash with bcrypt is ...
Royce Williams's user avatar
5 votes

Lost Passwords For McAfee Encrypted CDs

In general without proper credentials it is impossible to break 'modern' encryption. This is actually the purpose of encryption.
Joep van Steen's user avatar
4 votes

Retrieve/decrypt Windows 7 product key from Linux

For those who are not shy to do a little bit of coding. I found an algorithm about 10 years ago and implemented it in C# (See below) If you just want to run it on Windows I took the liberty to ...
MrPaulch's user avatar
  • 176
4 votes
Accepted

How to decrypt an S/MIME encrypted email using openssl smime?

It is in fact the case that openssl smime expects PEM format in the -recip input, but the p12 file is in PKCS12 format. This is how to convert the p12 file into a pem file: openssl pkcs12 -in myself....
not2savvy's user avatar
  • 588
3 votes

How to decrypt video using FFmpeg?

Read this post You should use -decryption_key as input option. ffmpeg -decryption_key {key} -i {file} -max_muxing_queue_size 9999 d.mp4
nico_lab's user avatar
  • 502
3 votes
Accepted

How to decrypt files after BTCWare Gryphon?

If you follow the "more information" link on the page that you linked, you will reach a forum thread where someone has posted a decrypter. However, it seems that it only works for specific variants of ...
Nnnes's user avatar
  • 216
3 votes
Accepted

Decrypt files after Petya ransomware attack in 2017

I am only interested in the decrypting approach. At this time there is no known flaw with the encryption method used by Petya, that means, there isn't an approach except to use the decryption key. ...
Ramhound's user avatar
  • 42.9k
3 votes
Accepted

How to be able to read encrypted files in the future, when the encryption tool is not available anymore?

Long Lived Programs You can start by looking at encryption tools that are already long establish & have been around for years. Being well used and supported for so long is a good indicator that ...
Xen2050's user avatar
  • 14.1k
3 votes

Retrieve/decrypt Windows 7 product key from Linux

Here is a Python port of the other answer (adapted for Windows 8.1). The advantage of this over chntpw is that it will work even with drives in read-only state. Requirements: pip install python-...
Lenar Hoyt's user avatar
3 votes

I initiated decryption of my bitlocker drive from Windows 8 recovery prompt. Any indication how long it will take?

Got tired of command line bumping to see. This shows status, progress, estimated time to complete. To exit, ctrl-c or it stops when converted # Author - Jack D. Pond # license: Available under the ...
jdpond's user avatar
  • 31
3 votes

I need to view my windows credentials password

Sorry man. You are not going to be successful. Your password is not stored like you think. Only a hash of it is stored in a SAM file. The credentials file you have doesn't contain any local ...
Señor CMasMas's user avatar
3 votes

Is it possible to remove a disk encryption?

FDE, Full Disk Encryption, is not removed by roll-back. It is removed by decrypting the disk and deactivating the encryption tool or system. It is a standard process and well documented. The ...
music2myear's user avatar
3 votes

In RSA or Assymetric Encryption, What EXACTLY is the purpose of the Private key? Do both hosts send their private key to each other?

does the private key get sent across the network to decrypt the data? if this was the case, why can't MITM who completely eavesdrops the connection stole/get/obtain the private keys? It is not the ...
grawity_u1686's user avatar
2 votes

How to be able to read encrypted files in the future, when the encryption tool is not available anymore?

Something worth considering is that any backup, or encrypted file could get corrupted at any time, and be unopenable. Software gets abandoned, OSes get EOLed, encryption becomes more and more trivial ...
Journeyman Geek's user avatar
  • 130k
2 votes

Hardware encryption on usb drive / stick

USB distinguishes between hosts (i.e. your computer) and devices (e.g. a mouse, a USB drive, a webcam). These are normally not exchangeable (for exceptions see below). Most x86 computers support only ...
Jochen Lutz's user avatar
2 votes

Decrypt PGP message with private keys but forgotten passphrase

In case you used PGP Desktop > 9.7 and you did set up security questions, according to symantec you could recover your passphrase using the following steps: https://support.symantec.com/en_US/article....
d7x's user avatar
  • 21
2 votes
Accepted

Decrypting Application Data with (Pre)-Master-Secret log file in Wireshark

No, probably not, unless the key was logged later in the same session. Each session uses its own key. Per MSDN: session An exchange of messages under the protection of a single piece of keying ...
Frank Thomas's user avatar
  • 36.3k
2 votes

Is the fastest open determined by preceeding key slots?

Test setup Create a file in ramdisk to hold the LUKS container: $ cd /dev/shm $ truncate -s 1G luksfile Prepare identical size keyfiles for testing: $ dd if=/dev/urandom of=key1 bs=1M count=1 1+0 ...
gronostaj's user avatar
  • 57.2k
2 votes
Accepted

Decrypting plain text. PEM certificate

Yes, this is a base64-encoded ASN.1 public key certificate. You can use openssl to parse the text form: openssl x509 -in certificate.pem -text assuming it has the usual PEM "-----BEGIN ...
Rup's user avatar
  • 1,012
2 votes

Do ransomware decryption tool really work and what's proper way to fix it?

Pay the ransom and hope the cybercriminals keep their word and decrypt the data. It is generally considered to be a bad idea to pay ransom. (a) No reason to believe you will get your data back. (b) ...
John's user avatar
  • 50.3k
2 votes

Decryption a token which is encrypted in lower OpenSSL version

Seeing as OpenSSL 1.0.1 has been out of support since 1st January 2017, and indeed has significant security advisories associated with it, I can only confirm that once the usage errors have been fixed ...
Chris Davies's user avatar
  • 3,974

Only top scored, non community-wiki answers of a minimum length are eligible