forked from RsaCtfTool/RsaCtfTool
-
Notifications
You must be signed in to change notification settings - Fork 0
/
RsaCtfTool.py
executable file
·262 lines (229 loc) · 8.83 KB
/
RsaCtfTool.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
#!/usr/bin/env python3
# -*- coding: utf-8 -*-
"""
----------------------------------------------------------------------------
"THE BEER-WARE LICENSE" (Revision 42):
ganapati (@G4N4P4T1) wrote this file. As long as you retain this notice you
can do whatever you want with this stuff. If we meet some day, and you think
this stuff is worth it, you can buy me a beer in return.
----------------------------------------------------------------------------
"""
import sys
import logging
import argparse
import requests
import urllib3
import tempfile
from glob import glob
from Crypto.PublicKey import RSA
from lib.rsa_attack import RSAAttack
from lib.rsalibnum import n2s, invmod
from lib.utils import get_numeric_value, print_results
from os.path import dirname, basename, isfile, join
from urllib3.exceptions import InsecureRequestWarning
from lib.keys_wrapper import (
generate_pq_from_n_and_p_or_q,
generate_keys_from_p_q_e_n,
PrivateKey,
)
# Remove insecure warning for factordb.com
urllib3.disable_warnings(InsecureRequestWarning)
# Change recursion limit for... you know, factorizing stuff...
sys.setrecursionlimit(5000)
# Set logger levels for argparse
logger_levels = {
"CRITICAL": logging.CRITICAL,
"ERROR": logging.ERROR,
"WARNING": logging.WARNING,
"DEBUG": logging.DEBUG,
"INFO": logging.INFO,
}
if __name__ == "__main__":
logger = logging.getLogger("global_logger")
parser = argparse.ArgumentParser(description="RSA CTF Tool")
parser.add_argument(
"--publickey", help="public key file. You can use wildcards for multiple keys."
)
parser.add_argument(
"--output", help="output file for results (privates keys, plaintext data)."
)
parser.add_argument(
"--timeout", help="Timeout for long attacks.", default=30, type=int
)
parser.add_argument(
"--createpub",
help="Take n and e from cli and just print a public key then exit",
action="store_true",
)
parser.add_argument(
"--dumpkey",
help="Just dump the RSA variables from a key - n,e,d,p,q",
action="store_true",
)
parser.add_argument(
"--ext",
help="Extended dump of RSA private variables in --dumpkey mode - dp,dq,pinv,qinv).",
action="store_true",
)
parser.add_argument("--uncipherfile", help="uncipher a file", default=None)
parser.add_argument("--uncipher", help="uncipher a cipher", default=None)
parser.add_argument(
"--verbosity", help="verbose mode", choices=logger_levels.keys(), default="INFO"
)
parser.add_argument(
"--private", help="Display private key if recovered", action="store_true"
)
parser.add_argument(
"--ecmdigits",
type=int,
help="Optionally an estimate as to how long one of the primes is for ECM method",
default=None,
)
parser.add_argument("-n", help="Specify the modulus. format : int or 0xhex")
parser.add_argument(
"-p", help="Specify the first prime number. format : int or 0xhex"
)
parser.add_argument(
"-q", help="Specify the second prime number. format : int or 0xhex"
)
parser.add_argument("-e", help="Specify the public exponent. format : int or 0xhex")
parser.add_argument("--key", help="Specify the private key file.")
parser.add_argument("--password", help="Private key password if needed.")
# Dynamic load all attacks for choices in argparse
attacks = glob(join(dirname(__file__), "attacks", "single_key", "*.py"))
attacks += glob(join(dirname(__file__), "attacks", "multi_keys", "*.py"))
attacks_filtered = [
basename(f)[:-3] for f in attacks if isfile(f) and not f.endswith("__init__.py")
]
attacks_list = [_ for _ in attacks_filtered if _ != "nullattack"] + ["all"]
parser.add_argument(
"--attack", help="Specify the attack mode.", default="all", choices=attacks_list
)
args = parser.parse_args()
unciphers = []
# Set logger level
logging.basicConfig(level=logger_levels[args.verbosity], format="%(message)s")
# If no arguments, diplay help and exit
if len(sys.argv) == 1:
parser.print_help()
sys.exit(1)
# Parse longs if exists
if args.p is not None:
args.p = get_numeric_value(args.p)
if args.q is not None:
args.q = get_numeric_value(args.q)
if args.e is not None:
args.e = get_numeric_value(args.e)
# get n if we can
if args.n is not None:
args.n = get_numeric_value(args.n)
elif args.p is not None and args.q is not None:
args.n = args.p * args.q
# if we have uncipher but no uncipherfile
if args.uncipher is not None:
uncipher_array = []
for uncipher in args.uncipher.split(","):
uncipher = get_numeric_value(uncipher)
uncipher_array.append(n2s(uncipher))
args.uncipher = uncipher_array
# if we have uncipherfile
if args.uncipherfile is not None:
uncipher_array = []
for uncipher in args.uncipherfile.split(","):
try:
with open(uncipher, "rb") as cipherfile_fd:
uncipher_array.append(cipherfile_fd.read())
except OSError as e:
print("--uncipherfile : file not found or not readable.")
exit(1)
args.uncipher = uncipher_array
# If we have a private key in input and uncipher in args (or uncipherfile)
if args.key and args.uncipher:
priv_key = PrivateKey(filename=args.key, password=args.password)
for u in args.uncipher:
unciphers.append(priv_key.decrypt(args.u))
print_results(args, None, priv_key, unciphers)
exit(0)
# If we have n and one of p and q, calculated the other
if args.n and (args.p or args.q):
args.p, args.q = generate_pq_from_n_and_p_or_q(args.n, args.p, args.q)
# Create pubkey if requested
if args.createpub:
pub_key, priv_key = generate_keys_from_p_q_e_n(args.p, args.q, args.e, args.n)
print(pub_key.decode("utf-8"))
exit(0)
# Load keys
tmpfile = None
if args.publickey is None and args.e is not None and args.n is not None:
tmpfile = tempfile.NamedTemporaryFile()
with open(tmpfile.name, "wb") as tmpfd:
tmpfd.write(RSA.construct((args.n, args.e)).publickey().exportKey())
args.publickey = [tmpfile.name]
elif args.publickey is not None:
if "*" in args.publickey or "?" in args.publickey:
pubkeyfilelist = glob(args.publickey)
args.publickey = pubkeyfilelist
elif "," in args.publickey:
args.publickey = args.publickey.split(",")
else:
args.publickey = [args.publickey]
# If we already have all informations
if (
args.p is not None
and args.q is not None
and args.e is not None
and args.n is not None
):
pub_key, priv_key = generate_keys_from_p_q_e_n(args.p, args.q, args.e, args.n)
if args.createpub:
print(pub_key)
for u in args.uncipher:
unciphers.append(priv_key.decrypt(args.uncipher))
print_results(args, args.publickey[0], priv_key, unciphers)
exit(0)
# Dump public key informations
if (
args.dumpkey
and not args.private
and args.uncipher is None
and args.uncipherfile is None
and args.publickey is not None
):
for publickey in args.publickey:
logger.info("Details for %s:" % publickey)
with open(publickey, "rb") as key_data_fd:
key = RSA.importKey(key_data_fd.read())
print("n: " + str(key.n))
print("e: " + str(key.e))
exit(0)
# if dumpkey mode dump the key components then quit
if args.key is not None and args.dumpkey:
key_data = open(args.key, "rb").read()
key = RSA.importKey(key_data)
print("n: " + str(key.n))
print("e: " + str(key.e))
if key.has_private():
print("d: " + str(key.d))
print("p: " + str(key.p))
print("q: " + str(key.q))
if args.ext:
dp = key.d % (key.p - 1)
dq = key.d % (key.q - 1)
pinv = invmod(key.p, key.q)
qinv = invmod(key.q, key.p)
print("dp: " + str(dp))
print("dq: " + str(dq))
print("pinv: " + str(pinv))
print("qinv: " + str(qinv))
exit(0)
# Run attacks
found = False
attackobj = RSAAttack(args)
if len(args.publickey) > 1:
found = attackobj.attack_multiple_keys(args.publickey, attacks_list)
if not found:
for publickey in args.publickey:
attackobj.implemented_attacks = []
logger.info("\n[*] Testing key %s." % publickey)
attackobj.attack_single_key(publickey, attacks_list)
attackobj.unciphered = []