Comments on: Tools/Scripts

By: Scripto

Scripto — Sun, 06 Dec 2009 09:32:10 +0000

Nice post..Keep them coming Thanks for sharing.

By: ChrisJohnRiley

ChrisJohnRiley — Sun, 19 Jul 2009 08:44:21 +0000

Ok, I’ve not tested the script under Windows. Shoot me the test string (hide the domain as in your above posts) and I’ll take a look and see if it runs on my test rig.

contact [AT] c22 [DOT] cc

By: jim

jim — Sun, 19 Jul 2009 01:22:00 +0000

now I had used a double quote. IT seems to work better on XP

Data extracted from URL .:

——————————————————————————–

Attempting to find a matching MD5
——————————————————————————–

Test string | uploads/tx_mmdamfilelist/temp_63662056a4.jpg|400||||| | ||
——————————————————————————–

Desired MD5 | 0602930af0dd42d6d998080e120a848e
——————————————————————————–

Traceback (most recent call last):
File “TYPO3EncKeyTool.py”, line 238, in
main()
File “TYPO3EncKeyTool.py”, line 88, in main
if default == True: # Attempt to check default Typo3 Encryption keys
NameError: global name ‘default’ is not defined

By: Jim

Jim — Sat, 18 Jul 2009 19:22:41 +0000

no, i had tried this at the beginning of testing. When i use the single quotes I get the Message in the script:

Data extracted from URL .:

Base URL | http://’http://mydomain.de/index.php?eID=tx_cms_showpic

——————————————-

Attempting to find a matching MD5
——————————————-

Test string | ||||||||
——————————————-

Desired MD5 |
——————————————-

Beginning default Encryption Key attack

The http:// seems to be double….

By: ChrisJohnRiley

ChrisJohnRiley — Sat, 18 Jul 2009 17:35:06 +0000

Ok, I think the issue is that you need to put the URL between single quotes ‘ ‘ to get it fully into the script. If you don’t then it will get splitup into seperate commands due to the pipe and ampersand symbols.

By: Jim

Jim — Sat, 18 Jul 2009 17:19:50 +0000

Hi Chris,

thank for your answer! I have alrady looked in this script, and I see what it is doing. But I’m not able to find the mistake…
Now I tried it with 2.5 on WinXP. I used the command: python TYPO3EncKeyTool.py –default –url http://mydomain.de/index.php?eID=tx_cms_showpic&file=uploads%2Ftx_mmdamfilelist%2Ftemp_63662056a4.jpg&width=400&wrap=%3CA%20href%3D%22javascript%3Aclose%28%29%3B%22%3E%20%7C%20%3C%2FA%3E&md5=0602930af0dd42d6d998080e120a848e

He splits the first part of the url right (“http://mydomain.de/index.php?eID=tx_cms_showpic”
then he writes: “Test string: <… BRUTE FORCE …."
the "Desired MD5: "
"Beginning defaul Entcryton Key attack
Default Hash not found.

The Command "file" is worng or could not be found.
The Command "width" is worng or could not be found.
The Command "warp" is worng or could not be found.
The Command "md5" is worng or could not be found.

By: ChrisJohnRiley

ChrisJohnRiley — Thu, 16 Jul 2009 14:54:17 +0000

Hi Jim,

Glad you liked the demo/tool. It was developed using Python 2.5.1 and tested on Debian / SuSE and Backtrack 3. Can you give me details of the error message and I’ll see if I can troubleshoot.

The URL should look something like this .:

http://localhost:8503/index.php?eID=tx_cms_showpic&file=uploads%2Fpics%2Fjonathan.jpg&width=800m&height=600m&bodyTag=%3Cbody%20bgcolor%3D%22black%22%3E&wrap=%3Ca%20href%3D%22javascript%3Aclose%28%29%3B%22%3E%20%7C%20%3C%2Fa%3E&md5=78f4d21442cb4dc8281f6585adaee960

If you take a look into the script it’s pretty easy to see what it’s doing.

Checkout http://storage.c22.cc/TYPO3-InsecureRandomness.txt for a breakdown of the problem if you’ve not already seen it.

By: Jim

Jim — Wed, 15 Jul 2009 19:13:45 +0000

Thx for the demonstration! But what version of Python is requiered for the script? I tried 2.5,2.6 and 3.1…. I always get some error, it seems that that the script could not split the string. The best version with the less errors was 2.5. greetings jim

By: Typo3 Weak Encryption Key « Ramblings of the änal security guy

Typo3 Weak Encryption Key « Ramblings of the änal security guy — Tue, 20 Jan 2009 17:22:37 +0000

[...] Tools/Scripts [...]