Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Hello, I can't decrypt arc4. I tried two versions of decryption script with almost the same tips. How can I solve this problem? #21

Open
xiaowei58148 opened this issue Jun 9, 2019 · 5 comments

Comments

@xiaowei58148
Copy link


| | | | / | | | |
| | | |
__ \ --.| |_| | ___ | | | | '_ \ --. \ _ |/ __|
| |
| | | | /_
/ / | | | (__
_/|| |_/_| |/___|

--- UnSHc - The shc decrypter.
--- Version: 0.8

UnSHc is used to decrypt script encrypted with SHc
Original idea from Luiz Octavio Duarte (LOD)
Updated and modernized by Yann CAM

  • SHc : [http://www.datsi.fi.upm.es/~frosal/]
  • UnSHc : [https://www.asafety.fr/unshc-the-shc-decrypter/]

[*] Input file name to decrypt [0x41c2d0]
[+] Output file name specified [a.sh]
[-] Error, File [0x41c2d0] not found.
[root@localhost ~]# ./unshc.sh a.sh


| | | | / | | | |
| | | |
__ \ --.| |_| | ___ | | | | '_ \ --. \ _ |/ __|
| |
| | | | /_
/ / | | | (__
_/|| |_/_| |/___|

--- UnSHc - The shc decrypter.
--- Version: 0.7

UnSHc is used to decrypt script encrypted with SHc
Original idea from Luiz Octavio Duarte (LOD)
Updated and modernized by Yann CAM

  • SHc : [http://www.datsi.fi.upm.es/~frosal/]
  • UnSHc : [https://www.asafety.fr/unshc-the-shc-decrypter/]

[*] Input file name to decrypt [a.sh]
[-] Unable to define arc4() call address...
[root@localhost ~]# ^C
[root@localhost ~]# ./unshc1.sh a.sh


| | | | / | | | |
| | | |
__ \ --.| |_| | ___ | | | | '_ \ --. \ _ |/ __|
| |
| | | | /_
/ / | | | (__
_/|| |_/_| |/___|

--- UnSHc - The shc decrypter.
--- Version: 0.8

UnSHc is used to decrypt script encrypted with SHc
Original idea from Luiz Octavio Duarte (LOD)
Updated and modernized by Yann CAM

  • SHc : [http://www.datsi.fi.upm.es/~frosal/]
  • UnSHc : [https://www.asafety.fr/unshc-the-shc-decrypter/]

[*] Input file name to decrypt [a.sh]
[-] Unable to define arc4() call address...

@Wqrld
Copy link

Wqrld commented Jul 4, 2019

Same here, were you able to fix this?

@yanncam
Copy link
Owner

yanncam commented Jul 4, 2019

From your UnSHc execution shown behind, you have tried to run UnSHc on a file a.sh and not a.sh.x.

Try again with the right enrcrypted file.

@Wqrld
Copy link

Wqrld commented Jul 4, 2019

I had the same arc4() error with
i.sh.x: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=f6faf4df13eeaf8681bce8c1a5c29d90aa5865, stripped

@yanncam
Copy link
Owner

yanncam commented Oct 15, 2020

Hello,

Which version of shc do you use ?
UnSHc need the *.sh.x file as argument, not the *.sh.
Please read : #31

Sincerely,

@phreaker56
Copy link

I have the same issue could you help me!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants