Nexus: Tools

Devploit v3.6 - Information Gathering Tool

By 0x000216

Read

0 Comments

Read More Add comment

GARUDA TERSAKTI 72 SHELL

By 0x000216

Read

0 Comments

Read More Add comment

Install Th3Inspector - Best Tools for Information Gathering

By 0x000216

Read

0 Comments

Read More Add comment

Install OWASP OpenDoor Scanner File dan Folder (Termux)

By 0x000216

Read

0 Comments

Read More Add comment

Install Wordpresscan Termux on Android

By 0x000216

Read

0 Comments

Read More Add comment

Cara Install ReconDog di Termux

By 0x000216

Read

0 Comments

Read More Add comment

Cara Install Breacher di Termux

By 0x000216

Read

0 Comments

Read More Add comment

Cara Install Dirsearch di Termux

By 0x000216

Read

0 Comments

Read More Add comment

Cara Install WPSeku with Termux

By 0x000216

Read

0 Comments

Read More Add comment

Install Admin Finder With Termux

By 0x000216

Read

0 Comments

Read More Add comment

MD5 Hash Cracker With Termux

By 0x000216

Read

0 Comments

Read More Add comment

Cara Install SQLMap On Android With Termux

By 0x000216

Read

0 Comments

Read More Add comment

Tutorial Install D-TECT Pentesting Tools

By 0x000216

Read

0 Comments

Read More Add comment

Cara Install Red Hawk di Termux

By 0x000216

Read

0 Comments

Read More Add comment

MobiSec - Công cụ Thâm nhập Điện thoại di động

By 0x000216

Read

0 Comments

Read More Add comment

XSS Shell - Công cụ kiểm soát Zombie tuyệt vời

By 0x000216

Read

0 Comments

Read More Add comment

Total Proxy Leecher v0.1

By 0x000216

Read

0 Comments

Read More Add comment

XSSF - Cross-Site Scripting Framework

By 0x000216

Read

0 Comments

Read More Add comment

WannaCry Ransomware Decryption Tool - WanaKiwi

By 0x000216

Read

0 Comments

If your PC has been infected by WannaCry – the ransomware that wreaked havoc across the world last Friday – you might be lucky to get your locked files back without paying the ransom of $300 to the cyber criminals.

Adrien Guinet, a French security researcher from Quarkslab, has discovered a way to retrieve the secret encryption keys used by the WannaCry ransomware for free, which works on Windows XP, Windows 7, Windows Vista, Windows Server 2003 and 2008 operating systems.

WannaCry Ransomware Decryption Keys

The WannaCry's encryption scheme works by generating a pair of keys on the victim's computer that rely on prime numbers, a "public" key and a "private" key for encrypting and decrypting the system’s files respectively.
To prevent the victim from accessing the private key and decrypting locked files himself, WannaCry erases the key from the system, leaving no choice for the victims to retrieve the decryption key except paying the ransom to the attacker.

But here's the kicker: WannaCry "does not erase the prime numbers from memory before freeing the associated memory," says Guinet.

Based on this finding, Guinet released a WannaCry ransomware decryption tool, named WannaKey, that basically tries to retrieve the two prime numbers, used in the formula to generate encryption keys from memory, and works on Windows XP only.

Note: Below I have also mentioned another tool, dubbed WanaKiwi, that works for Windows XP to Windows 7.

"It does so by searching for them in the wcry.exe process. This is the process that generates the RSA private key. The main issue is that the CryptDestroyKey and CryptReleaseContext does not erase the prime numbers from memory before freeing the associated memory." says Guinet

So, that means, this method will work only if:

The affected computer has not been rebooted after being infected.
The associated memory has not been allocated and erased by some other process.

"In order to work, your computer must not have been rebooted after being infected. Please also note that you need some luck for this to work (see below), and so it might not work in every case!," Guinet says.

"This is not really a mistake from the ransomware authors, as they properly use the Windows Crypto API."
While WannaKey only pulls prime numbers from the memory of the affected computer, the tool can only be used by those who can use those prime numbers to generate the decryption key manually to decrypt their WannaCry-infected PC’s files.

WanaKiwi: WannaCry Ransomware Decryption Tool

Good news is that another security researcher, Benjamin Delpy, developed an easy-to-use tool called "WanaKiwi," based on Guinet's finding, which simplifies the whole process of the WannaCry-infected file decryption.

All victims have to do is download WanaKiwi tool from Github and run it on their affected Windows computer using the command line (cmd).

WanaKiwi works on Windows XP, Windows 7, Windows Vista, Windows Server 2003 and 2008, confirmed Matt Suiche from security firm Comae Technologies, who has also provided some demonstrations showing how to use WanaKiwi to decrypt your files.

Although the tool won't work for every user due to its dependencies, still it gives some hope to WannaCry's victims of getting their locked files back for free even from Windows XP, the aging, largely unsupported version of Microsoft's operating system.

Source:The Hacker News

Nexus

Devploit v3.6 - Information Gathering Tool

GARUDA TERSAKTI 72 SHELL

Install Th3Inspector - Best Tools for Information Gathering

Install OWASP OpenDoor Scanner File dan Folder (Termux)

Install Wordpresscan Termux on Android

Cara Install ReconDog di Termux

Cara Install Breacher di Termux

Cara Install Dirsearch di Termux

Cara Install WPSeku with Termux

Install Admin Finder With Termux

MD5 Hash Cracker With Termux

Cara Install SQLMap On Android With Termux

Tutorial Install D-TECT Pentesting Tools

Cara Install Red Hawk di Termux

MobiSec - Công cụ Thâm nhập Điện thoại di động

XSS Shell - Công cụ kiểm soát Zombie tuyệt vời

Total Proxy Leecher v0.1

XSSF - Cross-Site Scripting Framework

hướng dẫn cài đặt

WannaCry Ransomware Decryption Tool - WanaKiwi

WannaCry Ransomware Decryption Keys

WanaKiwi: WannaCry Ransomware Decryption Tool

FaceBook Blaster Pro 11 Final DOWNLOAD FREE

Recent Posts

Facebook