Finding the s-boxes (isoldr/appldr) ida pro

« Older   Newer »
 
  Share  
.
  1. doctor_m
        +2   Like  
     
    .

    User deleted


    Have found an new way to find the sboxes in varius files.

    Maybe of use to some

    the script locate 2 sboxes in each file

    dont wanna give to much info away but.
    here is an script to locate the sboxes in isoldr.elf and appldr.elf

    www.mediafire.com/?9rs8555dls7gj5p

    Instructions

    open ida pro
    load isoldr.elf or appldr.elf as bin files.

    then load script.

    example appldr.elf
    CODE
    seg000:0001AF20                 db  63h ; c             ; RIJNDAEL [S] [char]
    seg000:0001AF20                                         ; RIJNDAEL (AES): SBOX (also used in other ciphers).


    hex

    CODE
    63 7C 77 7B F2 6B 6F C5  30 01 67 2B FE D7 AB 76  c|w{=ko+0.g+¦Î½v
    CA 82 C9 7D FA 59 47 F0  AD D4 A2 AF 9C A4 72 C0  -é+}·YG¡Èó»£ñr+
    B7 FD 93 26 36 3F F7 CC  34 A5 E5 F1 71 D8 31 15  À²ô&6?¸¦4ÑÕ±qÏ1.
    04 C7 23 C3 18 96 05 9A  07 12 80 E2 EB 27 B2 75  .Ã#+.û.Ü..ÇÔÙ'¦u
    09 83 2C 1A 1B 6E 5A A0  52 3B D6 B3 29 E3 2F 84  .â,..nZáR;ͦ)Ò/ä
    53 D1 00 ED 20 FC B1 5B  6A CB BE 39 4A 4C 58 CF  SÐ.Ý ³¦[j-¥9JLX¤
    D0 EF AA FB 43 4D 33 85  45 F9 02 7F 50 3C 9F A8  ð´¬¹CM3àE¨.P<ƒ¿
    51 A3 40 8F 92 9D 38 F5  BC B6 DA 21 10 FF F3 D2  Qú@ÅÆØ8§+Â+!. ¾Ê
    CD 0C 13 EC 5F 97 44 17  C4 A7 7E 3D 64 5D 19 73  -..ý_ùD.-º~=d].s
    60 81 4F DC 22 2A 90 88  46 EE B8 14 DE 5E 0B DB  `üO_"*ÉêF¯©.Ì^.¦
    E0 32 3A 0A 49 06 24 5C  C2 D3 AC 62 91 95 E4 79  Ó2:.I.$\-˼bæòõy
    E7 C8 37 6D 8D D5 4E A9  6C 56 F4 EA 65 7A AE 08  þ+7mìiN®lV¶Ûez«.
    BA 78 25 2E 1C A6 B4 C6  E8 DD 74 1F 4B BD 8B 8A  ¦x%..ª¦ãÞ¦t.K¢ïè
    70 3E B5 66 48 03 F6 0E  61 35 57 B9 86 C1 1D 9E  p>ÁfH.÷.a5W¦å-.×
    E1 F8 98 11 69 D9 8E 94  9B 1E 87 E9 CE 55 28 DF  ß°ÿ.i+Äöø.çÚ+U(¯


    recards to zadow ;)

    Edited by doctor_m - 12/5/2012, 18:24
     
    .
  2.     +1   Like  
     
    .
    Avatar

    Lo que empiezo, lo termino.

    Group
    FUNDaDoR
    Posts
    12,533
    Location
    En algún lugar del Espacio

    Status
    Offline
    that a good idea, perhaps we can get something. ;)
     
    .
  3. doctor_m
        +1   Like  
     
    .

    User deleted


    well would be great if you need to play the trubluebackups on any cfw.
    if you calculate the sboxes out you could run any eboot on any cfw.
     
    .
  4.     Like  
     
    .
    Avatar

    Lo que empiezo, lo termino.

    Group
    FUNDaDoR
    Posts
    12,533
    Location
    En algún lugar del Espacio

    Status
    Offline
    That would be great trueblue on CFW,

    YOU THINK YOU OPEN THE BACKUPS RUNNING POSIVILIDAD TB cfw?
     
    .
3 replies since 12/5/2012, 12:43   155 views
  Share  
.