Remix.run Logo
mdavid626 3 hours ago

Works well. I used this tool once to disassemble and understand how key manager works on Vivotek cameras.

They create executables, which contain encrypted binary data. Then, when the executable runs, it decodes the encrypted data and pipes it into "sh".

The security is delusional here - the password is hard coded in the executable. It was something like "VIVOTEK Inc.".

Ghidra was able to create the C code and I was able to extract also the binary data to a file (which is essentially the bash script).

mickeyp 3 hours ago | parent [-]

Sounds like `strings' on the binary would've sufficed if it's just hardcoded.

mdavid626 an hour ago | parent [-]

No, that’s not enough.

The password would be visible, but the encyption algorithm and the script’s text wouldn’t.