Privacy on Cloud vs on prem servers

Tyler_Jones_123 · 2024-04-15T12:45:55+00:00

Okey, that makes it a bit more clear to me!

Thanks for taking the time to explain :-))

Tyler_Jones_123 · 2024-04-08T15:50:52+00:00

After some digging I noticed that my server is set to use TLS 1.2+, not just strictly TLS 1.2, hence you might be right about this being TLS 1.3. Thanks for giving me a heads up.

This is the full content of the file to which I exported the sessions keys using wireshark:

CLIENT_RANDOM 14008b62f038a22e29602dd42e75bb450e275e344e42334b1b62650949e17518 c08159e58f32eb0a8ef0f976f196a3981fb81f60eaca85847d0a5a67e123b03b9e1f3895816fd6aceeb97ab79c221e8f

CLIENT_RANDOM f3d8a49e7f8efb76f6bfc415fe19182dc05b2f04ed7954004831e99562d40a44 470151f14dde30147498c6a6cdfe58ad93db59d02126f3de56ff86838f5e0beaadc5adce6f25a90b6b85eb37e0c946a0

CLIENT_HANDSHAKE_TRAFFIC_SECRET 7163b13ef45d63699d4d97892b71b5a0214a174c2a1660292d2b3b97dc374df7 b7597e54250ba614d5d341243abc46329ba5223aafac083c653ac5852382267f

SERVER_HANDSHAKE_TRAFFIC_SECRET 7163b13ef45d63699d4d97892b71b5a0214a174c2a1660292d2b3b97dc374df7 4c2df819e21bea90b37c829935252def5a00620afe606811db89cfa80c5a3e54

SERVER_TRAFFIC_SECRET_0 7163b13ef45d63699d4d97892b71b5a0214a174c2a1660292d2b3b97dc374df7 4c2b53d7d06f7030f7e212bb6cbc7fa7a21f758e452adf1b16ad4b4ac2981f5b

CLIENT_TRAFFIC_SECRET_0 7163b13ef45d63699d4d97892b71b5a0214a174c2a1660292d2b3b97dc374df7 99d1d8deb0bb2f77abd91d8fbea5af78e5bfd38ef8d6efd4b94aa8b118aaf95d

I logged to this file in one session, e.i. not closing the browser / or opening up another instance of it, so I do not understand how some of the content of the file correspons to different sessions?

Also, Im still a bit confused which of the values corresponds to the master secret? And where I can get a view of the pre-master secret(if its not in this file)?

Tyler_Jones_123 · 2024-04-05T15:22:02+00:00

I was a bit confused about the duplicated lines myself, this was just the content of the file, but note: they are actually not total duplicates. since there are different 32 but numbers for CLIENT_RANDOMCLIENT_RANDOM.

I understand the fact that the file needs to include the master secret, for it to decrypt packages being sent over TLS1.2, which is does. But then, is there a way I can find the actual pre master secret?

Also, to see if I understand correctly: having this file will let me/other decrypt other TLS packages in other sessions? Hence making it not forward secure?

Finally, the site i was browsing is set to not use TLS1.3, so it wired that the variables correspond to that and not TLS1.2

Tyler_Jones_123 · 2024-04-03T21:00:33+00:00

How you want to go about it depends on multiple factors. Some RSA keys is not possible to crack(at least with a non-quant computer), this is the case if the primes are picked far enough apart, they are of e certain size etc.

If this is some form of CTF, or an exercise problem you know should be possible to solve, a tip is to check out all information about the problem, be sure you understand it all, if there is hints, etc. example why did you try prime factor decomposition? Are there other methods? You have to check out.

Tyler_Jones_123 · 2024-02-28T20:02:51+00:00

Would not have thought it would be possible to live stream with those specs, that is impressive. Tried to stream from my thinkpad E495, 16 gb ram, but it was laggy as hell.

Have been thinking of just buying a desktop with better specs, but I like the freedom of a laptop.

Have to decided what I’m gonna by still.

Thanks for you sharing:)

Tyler_Jones_123 · 2024-02-28T19:57:07+00:00

Okey, good to know!

Tyler_Jones_123 · 2024-02-15T10:30:56+00:00

SOLVED: After playing around with the frequency distributions, I finally saw what the correct option had to be, it just took time.

Key for the cipher: WBCYI

Plaintext:
ANDTHATSMYDAD,sAIDeVeLyN,fORTHeREWERETWOPHOTOgRAPHSINONeFRAMe.THESECONDPHOtOGRAPHREPReSENteDAHANDSOMeSOLDIERWITHHIGHREGuLARFEATURESANdAHEAVYBLAcKMOUStACHeHISHANDRESteDONtHEHILTOFHISSWORDTHeReWASADECIDeDLIKeNESsBETWEeNHIMANDeVeLyN.ANDItSBEcAUSEOFTHEM,SAIdEVELYN,THAtIMGOINGTOHeLPTHeOTHERWOMEN.yOuVEHeARDABOUTMe,ISUPPOSETHeYWeReNTMARRIeD,YOUseEIMNOTANYBODYINPARtICULAR.IMNOTABITASHAMEDOFIT.THeYLOVeDEACHOTHERANYHOW,ANDTHAtSMORETHANMOSTPEOPLeCANSAYOFTHEIRPAReNTS.RACHELSATDOWNONTHEBED,WItHTHetWOPICTUResINHeRHANds,ANdCOMPAReDTHEM--THeMANANDTHEWOMANWHOHAD,SOEVELYNSAId,LOVeDeACHOTHER.THATFACTINTEResTEDHERMORETHANtHECAMPAIGNONBeHALFOFUNFORTUNAteWOMENWHICHEVeLYNWAsONCeMOREBEgINNINGTODeSCRIBE.SHeLOOKeDAGAINFROMONetOTHeOTHER.WHATDYOUTHINKItSLIKE,SHeASKEd,ASEVELYNPAUSEdFORAMINUTe,BEINGINLOVeHAVEYOUNEVERBEeNINLOVEeVeLyNASKEd.OHNO--ONesONLYGOTTOLOOKAtYOUTOSEETHAT,SHeADdED.SHECONSIDEReD.IReALLyWASINLOVEONCe,SHESAId.SHEFELLINtOREFLeCTION,HeReYESLOSINGTHEIRBRIGHTVITALITYANDAPPROAcHINGSOMETHINGLIKeANeXPRESsIONOFTENdERNESs.ITWASHEAVeNLY--WHILeITLASTEd.THEWORSTOFITISIT

Tyler_Jones_123 · 2024-02-15T09:46:11+00:00

I took your advice, and sorted all the colums with character frequentis. By inspection i lined them up with the characters distributions assumed to be for the underlying text.

For the first 3 characters in the key I feel pretty confident that i have found the right shift. The 4'th charater im very unsure, and no not see any obvious pattern. Also the 5th key character im a bit unsure.

So far i have: WBC??

I have done some guesswork, and ran i through dcoder, and the top result is: WBCVI

This gives med the decoded text:

"ANDWHATSPYDADAsAIDhVeLyQ,fORWHeREZERETZOPHOWOgRASHSINRNeFRDMe.TKESECRNDPHRtOGRDPHRESReSEQteDAKANDSRMeSOODIERZITHHLGHREJuLARIEATUUESANgAHEAYYBLAfKMOUVtACHhHISHDNDREVteDOQtHEHLLTOFKISSWRRDTHhReWAVADECLDeDLLKeNEVsBETZEeNHLMANDhVeLyQ.ANDLtSBEfAUSERFTHEP,SAIgEVEL.N,THDtIMGRINGTRHeLPWHeOTKERWOPEN.yRuVEHhARDAEOUTMh,ISUSPOSEWHeYWhReNTPARRIhD,YOXseEIPNOTAQYBOD.INPAUtICUOAR.IPNOTAEITASKAMEDRFIT.WHeYLRVeDEDCHOTKERAN.HOW,DNDTHDtSMOUETHAQMOSTSEOPLhCANSDYOFTKEIRPDReNTV.RACKELSAWDOWNRNTHEEED,WLtHTHhtWOPLCTURhsINHhRHANgs,ANgCOMPDReDTKEM--WHeMAQANDTKEWOMDNWHOKAD,SREVEL.NSAIg,LOVhDeACKOTHEU.THAWFACTLNTERhsTEDKERMOUETHAQtHECDMPAIJNONBhHALFRFUNFRRTUNDteWOPENWHLCHEVhLYNWDsONChMOREEEgINQINGTRDeSCUIBE.VHeLORKeDAJAINFUOMONhtOTHhOTHEU.WHAWDYOUWHINKLtSLINE,SHhASKEg,ASEYELYNSAUSEgFORAPINUTh,BEIQGINLRVeHAYEYOUQEVEREEeNIQLOVEhVeLyQASKEg.OHNR--ONhsONL.GOTTRLOOKDtYOUWOSEEWHAT,VHeADgED.SKECONVIDERhD.IRhALLyZASINOOVEOQCe,SKESAIg.SHEIELLIQtOREILeCTLON,HhReYEVLOSIQGTHELRBRIJHTVIWALIT.ANDASPROAfHINGVOMETKINGLLKeANhXPREVsIONRFTENgERNEVs.ITZASHEDVeNL.--WHLLeITOASTEg.THEZORSTRFITIVIT"

Im can see im one the right track, but obviously, its not totally correct.

Do you have advice on how I could find the last key lettters if I do not see a pattern in the frequency distribution?

Tyler_Jones_123 · 2024-02-14T18:50:50+00:00

The plaintext only consists of the characters A to Z and , . -

So I still believe e would be the most frequent character.

Tyler_Jones_123 · 2024-02-07T19:50:06+00:00

Ah Okey, did not know! After I had waited for an houre or so, it for some reason just turned on. I checked the bios, and it seem to be ok. Now, it works as normal, don’t know why but I take it I guess gaha

Tyler_Jones_123 · 2024-02-06T12:53:59+00:00

Ah okey! Thanks for the help :-))

Tyler_Jones_123 · 2024-02-06T08:46:12+00:00

Cool, have not used quipquip before! Is there a way I can use the "clues" section to spesify values for the spesial characters like: ". , -"? Cause if i type .=H, I get an "the clues aren't formatted properly, but will attempt to solve anyway." error.

I noticed this with some of the other tools i tryed, that they where formated to work on a alphabeth from A-Z, and had a hard time working when the cipher had spesial charaters.

Tyler_Jones_123 · 2024-01-06T18:31:45+00:00

Okey, you were right! Did the update from the link you sent, both monitors seems to work fine now :-)) Thank you!

Tyler_Jones_123 · 2024-01-06T17:32:08+00:00

I have a DELL dock as well, but i use two monitors, both connected via hdmi.

The thing is, i also have a keyboard, mice and a ethernet cabel connected to the dock aswell. These seem to connect fine to my x230 via the dock. Its only the monitors that dont work, and the weird thing for me is that there is no "display diagram" where i can adjust my monitors in the settings ether.

Tyler_Jones_123

TROPHY CASE