这是什么编程语言/混淆?

时间:2013-09-20 06:45:58

标签: xml encryption obfuscation reverse-engineering

我有一个程序将其键盘绑定存储为一个大的混淆或加密文件。我试图找出它是什么类型的加密,但我不确定从这里探索的其他地方。它包含在XML文件中,没有任何注释或提示(字段名称为DeviceIO.Config.Controller)

The whole line is: 
Entry Name="DeviceIO.Config.Controller" Type="3"         Value="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         (edited for brevity...)

向右滚动以查看示例。我在哪里可以开始?或者失败了,我有什么资源可以理解如何解决这样的问题?

1 个答案:

答案 0 :(得分:2)

查看text-blob的结尾。它以=(等号)结束吗?如果是这样的话,很可能是Base64-encoded string,不是加密,因为它是以文本兼容的方式存储二进制数据的方式,尽管我已经看到它被用作(非常)的地方当您存储的内容不是安全时,基本形式的混淆,就像不直接在聚光灯下一样。

由于这似乎是一个XML属性值,因此数据可能包含非XML友好的字符(例如“,<,&或其他),开发人员认为更容易使用Base64 -encode all,而不是专门转义无效的XML字符。

反转非常容易,大多数编程框架都有内置的实用工具。例如,.NET具有Convert.FromBase64String()方法。我猜它在其他语言中也很容易。