skyf0l/rsacracker

Powerful RSA cracker for CTFs. Supports RSA, X509, OPENSSH in PEM and DER formats.

Programming and cybersecurity enthusiast

Currently playing VS Code:

Find me on:

• CodinGame: Ranked 3500th, top 0.5%
• HackTheBox: Ranked Hacker, 450th
• Root-Me: Ranked 1345th with 4000 points

You can contact me on [email protected].

rsacracker's Issues

Feature Request: Ability to use a dump as the input

Hey there!

First of all, thank you for creating this powerful tool. I've used this program quite a bit now and it has worked very well :)

One feature I wish rsacracker had is the ability to use a dump as the input. I often see in CTF challenges that they provide data like shown below:

c: 78394077185972242522366494812194999029111007804513916081388100744678077142246684573709463174914072230588766938274935729449697899122556506361108922139286130431073819269477944903949010409297739704373353086560177410340042335176831160010922826152074048460889509110907225759217407138633733239524781798190577093673
n: 93596195645610503452177719837666902345047461004926714393186384188598288812343005592124086521572864457489909063543756427769917131437307447863586528928496194559057760628385975297585140789577911616474493538014622500120560643072265673362843715324209056486085041020831625385434745566998218712055519575753745124619
e: 1595235523996321655798747471789583440185208568327862733680046250799766370193739982702940394656406146131440688831932739213253542820322450207724280220533900355744553772981019201731036379810734890063829650829319133004906034534031330743611288482822751674556919861911431941749713177767003275664528498846275096193

Source: PicoCTF2019 b00tl3gRSA2

I usually copy each value and add it to rsacracker using -c, -n, and -e. This may be a tedious process at times, and it would be amazing if there were the ability to give rsacracker a file containing data as shown above.

In the code snippet shown above, the key and values are separated using a colon (:), but I've also seen in many challenges that the equal sign (=) is used instead. This is something we also see when we execute rsacracker using the --dump flag.

Read partial or corrupted public / private keys

All in the title, see:

RsaCracker/tests/0ctf_2016.rs

Line 11 in 7dfd961

/* // TODO: Recover exponent from partial private key as in the challenge

Windows building without rug

It's annoying to build rsacracker on windows because of the rug crate :(

Support multi keys attacks

E.g. https://ctftime.org/task/3973

Prioritize attacks according to known values

No need to launch costly attacks when you know phi or private exponents

Allow partial value as inputs

Msb / Lsb of a prime or exponent known?

Support oracle inputs

Progress reporting

See https://crates.io/crates/indicatif

Run attacks in parallel / multithread

Speep-up tests

The CI and build workflow takes 10 to 20 minutes, which is a bit too long :D