Re: Xor decode from pcap file

[AnomalousMonk]

in reply to Xor decode from pcap file

Maybe something like this:

>perl -wMstrict -le
"my $binary = pack 'H*', '03762cefa7ffe5';
 printf '%02x ', $_ for unpack 'C*', $binary;  print '';
 ;;
 my ($p, $q) = unpack 'xCC', $binary;
 my $pairs   = (length($binary) - 3) / 2;
 my $k       = pack 'C*', 0, 0, 0, ($p, $q) x $pairs;
 printf '%02x ', $_ for unpack 'C*', $k;  print '';
 ;;
 my $decode = $binary ^ $k;
 printf '%02x ', $_ for unpack 'C*', $decode;
"
03 76 2c ef a7 ff e5
00 00 00 76 2c 76 2c
03 76 2c 99 8b 89 c9

[mabossert]

Sweet! That seems to have done the trick...Thank you so much. I have a huge headache from banging my head on the wall trying to figure out how to accomplish this. Now all I have to do is figure out what the heck the decoded data means...Thanks again!!!!

[Anonymous Monk]

Would you mind posting the completed code?

[mabossert]

my apologies...I didn't notice the request to post the completed code. Unfortunately, I moved to a new job and no longer have access to the code...sorry.