I have a string with a telephone number x and also its encrypted value (stored in the active directory).

with those two things and knowing the the encryption isnt the best, it should be possible to do some reverse engeneering.

the reason why we do this is because we discovered some mistakes in those telephone numbers and its really annoying to check those manually one by one (other department's responsebility --> going to take weeks)

do you know some freeware for this kind of reverse engeneering? have already made some experience?

everything which leads me to the result will be rewarded with 500fg.

thanks in advance.

you could write a script that browses all entries in your AD comparing phone number hashes (the one in the AD and the hash from the phone number you have)

i need the algorithm itself,

i have the telephone number and the encrypted value but i would like to automatate the whole process because of the earlier discovered 200-300 faulty entries :/

This post was edited by uglygeorge08 on Jun 27 2012 06:42am

so, the phone number consists of numbers between 0 and 9. what does the encrypted value consist off? or is it just a hash? what's the length of the encrypted value? binary or ascii? we need more information, else we can't help you.

but still I try my luck and guess the encrypted value is the md5sum. so you should google for a md5sum.exe (or if working under linux, just install md5sum). put the phone number as input value and if the outcome of the md5sum tool is the same as the encrypted value, then you know it's right.

or do you already have the 'encryption algorithm' and your problem is only the automating stuff? then you could write a script... there are hundreds of solutions, depending on your data and your OS.

nop its a string which contains letters and numbers and i've also seen the == sing at the end of it.

nop i dont have the alorithm thats my main issue and writing the script is no problem, i just struggle with the reverse engineering part

thanks anway for your help i will try out md5sum and will let you know about the outcome.

This post was edited by uglygeorge08 on Jun 27 2012 11:15pm

prolly base64

not only probable... 99.9% sure that it's base64
you don't need to reverse engineer, you just need to undo the base64 (there are a lot of webtools which you can use to check that fact)
if you need help scripting that, I could help

i will give it a try tomorrow and will let you know

can you may send me a link of a tool?

http://axcrypt.anonimosx.net/base64_ed.html

as you can see, depending on the length of your inputstring, base64 adds some padding bits (results in a "==" at the end of the string)

example1: enter "asdfasdfa" (9 chars) will result in something without "=="
example2: enter "asdf" (4 chars) will result in something with "==" at the end

however, if you use the base64 utility directly under linux, it's not exactly the same:


(if you give me one encoded string, I may be able to tell more about the coding scheme)

amazing! i will give you a feedback.

fg sent,

This post was edited by uglygeorge08 on Jun 29 2012 12:21am