[Event Scripter] Scripts and requests
Code:
//Filecrypt CNL-Test in JS
//disablePermissionChecks();
//setNotifyOnException(false);
require("https" + "://gist.githubusercontent.com/gabrysiak/3dedf160fd2ee719c2b6/raw/1052dfbc0989b8e444df6098ce253d42fa1e6bb7");//base64 en- and decode in js
var myBr = getBrowser();
var html = myBr.getPage("**External links are only visible to Support Staff**);//testlink with CNL and without captcha
var res = html.match(/CNLPOP\('([^']+)', '([^']+)', '([^']+)'/i);
var jk = res[2];
var crypted = res[3];
var crypted_nobase64 = base64_decode(crypted);
var jk_decoded = "";
for (var i = 0; i < jk.length; i += 2) {
var tmp = jk.substr(i, 2);
jk_decoded += String.fromCharCode(parseInt(tmp, 16));
}
function bin2string(array) {
var result = "";
for (var i = 0; i < array.length; ++i) {
result += (String.fromCharCode(array[i]));
}
return result;
}
//source github.com/kraynel/js-rijndael
//mcrypt/cbc/rijndael-128
var mcrypt = mcrypt ? mcrypt : new function() {
var ciphers = {
"rijndael-128": [16, 32]
}
var blockCipherCalls = {};
blockCipherCalls['rijndael-128'] = function(cipher, block, key, encrypt) {
if (encrypt)
Rijndael.Encrypt(block, key);
else
Rijndael.Decrypt(block, key);
return block;
};
var pub = {};
pub.Encrypt = function(message, IV, key, cipher, mode) {
return pub.Crypt(true, message, IV, key, cipher, mode);
};
pub.Decrypt = function(ctext, IV, key, cipher, mode) {
return pub.Crypt(false, ctext, IV, key, cipher, mode);
};
pub.Crypt = function(encrypt, text, IV, key, cipher, mode) {
if (key) cKey = key;
else key = cKey;
if (cipher) cCipher = cipher;
else cipher = cCipher;
if (mode) cMode = mode;
else mode = cMode;
if (!text)
return true;
if (blockCipherCalls[cipher].init)
blockCipherCalls[cipher].init(cipher, key, encrypt);
var blockS = ciphers[cipher][0];
var chunkS = blockS;
var iv = new Array(blockS);
switch (mode) {
case 'cfb':
chunkS = 1;
case 'cbc':
case 'ncfb':
case 'nofb':
case 'ctr':
if (!IV)
throw "mcrypt.Crypt: IV Required for mode " + mode;
if (IV.length != blockS)
throw "mcrypt.Crypt: IV must be " + blockS + " characters long for " + cipher;
for (var i = blockS - 1; i >= 0; i--)
iv[i] = IV.charCodeAt(i);
break;
case 'ecb':
break;
default:
throw "mcrypt.Crypt: Unsupported mode of opperation" + cMode;
}
var chunks = Math.ceil(text.length / chunkS);
var orig = text.length;
text += Array(chunks * chunkS - orig + 1).join(String.fromCharCode(0));
var out = '';
switch (mode) {
case 'ecb':
for (var i = 0; i < chunks; i++) {
for (var j = 0; j < chunkS; j++)
iv[j] = text.charCodeAt((i * chunkS) + j);
blockCipherCalls[cipher](cipher, iv, cKey, encrypt);
for (var j = 0; j < chunkS; j++)
out += String.fromCharCode(iv[j]);
}
break;
case 'cbc':
if (encrypt) {
for (var i = 0; i < chunks; i++) {
for (var j = 0; j < chunkS; j++)
iv[j] = text.charCodeAt((i * chunkS) + j) ^ iv[j];
blockCipherCalls[cipher](cipher, iv, cKey, true);
for (var j = 0; j < chunkS; j++)
out += String.fromCharCode(iv[j]);
}
} else {
for (var i = 0; i < chunks; i++) {
var temp = iv;
iv = new Array(chunkS);
for (var j = 0; j < chunkS; j++)
iv[j] = text.charCodeAt((i * chunkS) + j);
var decr = iv.slice(0);
blockCipherCalls[cipher](cipher, decr, cKey, false);
for (var j = 0; j < chunkS; j++)
out += String.fromCharCode(temp[j] ^ decr[j]);
}
}
break;
case 'cfb':
for (var i = 0; i < chunks; i++) {
var temp = iv.slice(0);
blockCipherCalls[cipher](cipher, temp, cKey, true);
temp = temp[0] ^ text.charCodeAt(i);
iv.push(encrypt ? temp : text.charCodeAt(i));
iv.shift();
out += String.fromCharCode(temp);
}
out = out.substr(0, orig);
break;
case 'ncfb':
for (var i = 0; i < chunks; i++) {
blockCipherCalls[cipher](cipher, iv, cKey, true);
for (var j = 0; j < chunkS; j++) {
var temp = text.charCodeAt((i * chunkS) + j);
iv[j] = temp ^ iv[j];
out += String.fromCharCode(iv[j]);
if (!encrypt)
iv[j] = temp;
}
}
out = out.substr(0, orig);
break;
case 'nofb':
for (var i = 0; i < chunks; i++) {
blockCipherCalls[cipher](cipher, iv, cKey, true);
for (var j = 0; j < chunkS; j++)
out += String.fromCharCode(text.charCodeAt((i * chunkS) + j) ^ iv[j]);
}
out = out.substr(0, orig);
break;
case 'ctr':
for (var i = 0; i < chunks; i++) {
temp = iv.slice(0);
blockCipherCalls[cipher](cipher, temp, cKey, true);
for (var j = 0; j < chunkS; j++)
out += String.fromCharCode(text.charCodeAt((i * chunkS) + j) ^ temp[j]);
var carry = 1;
var index = chunkS;
do {
index--;
iv[index] += 1;
carry = iv[index] >> 8;
iv[index] &= 255;
} while (carry)
}
out = out.substr(0, orig);
break;
}
if (blockCipherCalls[cipher].deinit)
blockCipherCalls[cipher].deinit(cipher, key, encrypt);
return out;
};
pub.get_block_size = function(cipher, mode) {
if (!cipher) cipher = cCipher;
if (!ciphers[cipher])
return false;
return ciphers[cipher][0];
}
pub.get_cipher_name = function(cipher) {
if (!cipher) cipher = cCipher;
if (!ciphers[cipher])
return false;
return cipher;
}
pub.get_iv_size = function(cipher, mode) {
if (!cipher) cipher = cCipher;
if (!ciphers[cipher])
return false;
return ciphers[cipher][0];
}
pub.get_key_size = function(cipher, mode) {
if (!cipher) cipher = cCipher;
if (!ciphers[cipher])
return false;
return ciphers[cipher][1];
}
pub.list_algorithms = function() {
var ret = [];
for (var i in ciphers)
ret.push(i);
return ret;
}
pub.list_modes = function() {
return ['ecb', 'cbc', 'cfb', 'ncfb', 'nofb', 'ctr'];
}
var cMode = 'cbc';
var cCipher = 'rijndael-128';
var cKey = '12345678911234567892123456789312';
return pub;
};
var Rijndael = Rijndael ? Rijndael : new function() {
var pub = {};
pub.Encrypt = function(block, key) {
crypt(block, key, true);
}
pub.Decrypt = function(block, key) {
crypt(block, key, false);
}
var sizes = [16, 24, 32];
var rounds = [
[10, 12, 14], // 16
[12, 12, 14], // 24
[14, 14, 14]
]; // 32
var expandedKeys = {};
var ExpandKey = function(key) {
if (!expandedKeys[key]) {
var kl = key.length,
ks, Rcon = 1;
ks = 15 << 5;
keyA = new Array(ks);
for (var i = 0; i < kl; i++)
keyA[i] = key.charCodeAt(i);
for (var i = kl; i < ks; i += 4) {
var temp = keyA.slice(i - 4, i);
if (i % kl == 0) {
temp = [Sbox[temp[1]] ^ Rcon, Sbox[temp[2]],
Sbox[temp[3]], Sbox[temp[0]]
];
if ((Rcon <<= 1) >= 256)
Rcon ^= 0x11b;
} else if ((kl > 24) && (i % kl == 16))
temp = [Sbox[temp[0]], Sbox[temp[1]],
Sbox[temp[2]], Sbox[temp[3]]
];
for (var j = 0; j < 4; j++)
keyA[i + j] = keyA[i + j - kl] ^ temp[j];
}
expandedKeys[key] = keyA;
}
return expandedKeys[key];
}
var crypt = function(block, key, encrypt) {
var bB = block.length;
var kB = key.length;
var bBi = 0;
var kBi = 0;
switch (bB) {
case 32:
bBi++;
case 24:
bBi++;
case 16:
break;
default:
throw 'rijndael: Unsupported block size: ' + block.length;
}
switch (kB) {
case 32:
kBi++;
case 24:
kBi++;
case 16:
break;
default:
throw 'rijndael: Unsupported key size: ' + key.length;
}
var r = rounds[bBi][kBi];
key = ExpandKey(key);
var end = r * bB;
if (encrypt) {
AddRoundKey(block, key.slice(0, bB));
var SRT = ShiftRowTab[bBi];
for (var i = bB; i < end; i += bB) {
SubBytes(block, Sbox);
ShiftRows(block, SRT);
MixColumns(block);
AddRoundKey(block, key.slice(i, i + bB));
}
SubBytes(block, Sbox);
ShiftRows(block, SRT);
AddRoundKey(block, key.slice(i, i + bB));
} else {
AddRoundKey(block, key.slice(end, end + bB));
var SRT = ShiftRowTab_Inv[bBi];
ShiftRows(block, SRT);
SubBytes(block, Sbox_Inv);
for (var i = end - bB; i >= bB; i -= bB) {
AddRoundKey(block, key.slice(i, i + bB));
MixColumns_Inv(block);
ShiftRows(block, SRT);
SubBytes(block, Sbox_Inv);
}
AddRoundKey(block, key.slice(0, bB));
}
}
var Sbox = new Array(99, 124, 119, 123, 242, 107, 111, 197, 48, 1, 103, 43, 254, 215, 171,
118, 202, 130, 201, 125, 250, 89, 71, 240, 173, 212, 162, 175, 156, 164, 114, 192, 183, 253,
147, 38, 54, 63, 247, 204, 52, 165, 229, 241, 113, 216, 49, 21, 4, 199, 35, 195, 24, 150, 5, 154,
7, 18, 128, 226, 235, 39, 178, 117, 9, 131, 44, 26, 27, 110, 90, 160, 82, 59, 214, 179, 41, 227,
47, 132, 83, 209, 0, 237, 32, 252, 177, 91, 106, 203, 190, 57, 74, 76, 88, 207, 208, 239, 170,
251, 67, 77, 51, 133, 69, 249, 2, 127, 80, 60, 159, 168, 81, 163, 64, 143, 146, 157, 56, 245,
188, 182, 218, 33, 16, 255, 243, 210, 205, 12, 19, 236, 95, 151, 68, 23, 196, 167, 126, 61,
100, 93, 25, 115, 96, 129, 79, 220, 34, 42, 144, 136, 70, 238, 184, 20, 222, 94, 11, 219, 224,
50, 58, 10, 73, 6, 36, 92, 194, 211, 172, 98, 145, 149, 228, 121, 231, 200, 55, 109, 141, 213,
78, 169, 108, 86, 244, 234, 101, 122, 174, 8, 186, 120, 37, 46, 28, 166, 180, 198, 232, 221,
116, 31, 75, 189, 139, 138, 112, 62, 181, 102, 72, 3, 246, 14, 97, 53, 87, 185, 134, 193, 29,
158, 225, 248, 152, 17, 105, 217, 142, 148, 155, 30, 135, 233, 206, 85, 40, 223, 140, 161,
137, 13, 191, 230, 66, 104, 65, 153, 45, 15, 176, 84, 187, 22);
//row 0 1 2 3 block Bytes
var rowshifts = [
[0, 1, 2, 3], //16
[0, 1, 2, 3], //24
[0, 1, 3, 4]
]; //32
var ShiftRowTab = Array(3);
for (var i = 0; i < 3; i++) {
ShiftRowTab[i] = Array(sizes[i]);
for (var j = sizes[i]; j >= 0; j--)
ShiftRowTab[i][j] = (j + (rowshifts[i][j & 3] << 2)) % sizes[i];
}
var Sbox_Inv = new Array(256);
for (var i = 0; i < 256; i++)
Sbox_Inv[Sbox[i]] = i;
var ShiftRowTab_Inv = Array(3);
for (var i = 0; i < 3; i++) {
ShiftRowTab_Inv[i] = Array(sizes[i]);
for (var j = sizes[i]; j >= 0; j--)
ShiftRowTab_Inv[i][ShiftRowTab[i][j]] = j;
}
var xtime = new Array(256);
for (var i = 0; i < 128; i++) {
xtime[i] = i << 1;
xtime[128 + i] = (i << 1) ^ 0x1b;
}
var SubBytes = function(state, sbox) {
for (var i = state.length - 1; i >= 0; i--)
state[i] = sbox[state[i]];
}
var AddRoundKey = function(state, rkey) {
for (var i = state.length - 1; i >= 0; i--)
state[i] ^= rkey[i];
}
var ShiftRows = function(state, shifttab) {
var h = state.slice(0);
for (var i = state.length - 1; i >= 0; i--)
state[i] = h[shifttab[i]];
}
var MixColumns = function(state) {
for (var i = state.length - 4; i >= 0; i -= 4) {
var s0 = state[i + 0],
s1 = state[i + 1];
var s2 = state[i + 2],
s3 = state[i + 3];
var h = s0 ^ s1 ^ s2 ^ s3;
state[i + 0] ^= h ^ xtime[s0 ^ s1];
state[i + 1] ^= h ^ xtime[s1 ^ s2];
state[i + 2] ^= h ^ xtime[s2 ^ s3];
state[i + 3] ^= h ^ xtime[s3 ^ s0];
}
}
var MixColumns_Inv = function(state) {
for (var i = state.length - 4; i >= 0; i -= 4) {
var s0 = state[i + 0],
s1 = state[i + 1];
var s2 = state[i + 2],
s3 = state[i + 3];
var h = s0 ^ s1 ^ s2 ^ s3;
var xh = xtime[h];
var h1 = xtime[xtime[xh ^ s0 ^ s2]] ^ h;
var h2 = xtime[xtime[xh ^ s1 ^ s3]] ^ h;
state[i + 0] ^= h1 ^ xtime[s0 ^ s1];
state[i + 1] ^= h2 ^ xtime[s1 ^ s2];
state[i + 2] ^= h1 ^ xtime[s2 ^ s3];
state[i + 3] ^= h2 ^ xtime[s3 ^ s0];
}
}
return pub;
};
alert(mcrypt.Decrypt(crypted_nobase64, jk_decoded, jk_decoded, 'rijndael-128', 'cbc').replace(/\x00+$/g, '') + "\n\n");
Hybrid Mode
