2023-09-27 21:41:54 +00:00
# Utils
2023-11-03 22:10:13 +00:00
todo (add the missing encrypted endpoints)
2023-09-27 21:41:54 +00:00
---
# Encryption testing with curl and openssl
### `/basicinfo` request
2023-11-04 22:19:29 +00:00
`curl -X POST http://localhost/basicinfo -o encrypted_data.bin`
2023-11-03 22:10:13 +00:00
2023-09-27 21:41:54 +00:00
Decrypt:
2023-11-03 22:10:13 +00:00
`openssl rsautl -inkey public_key.pem -pubin -in encrypted_data.bin -raw`
2023-09-27 21:41:54 +00:00
(it decrypts with public key and encrypts with private)
2023-11-03 22:10:13 +00:00
Oneliner:
2023-11-04 22:19:29 +00:00
`curl -X POST http://localhost/basicinfo | openssl rsautl -inkey public_key.pem -pubin`
2023-11-03 22:10:13 +00:00
2023-09-27 21:41:54 +00:00
### `/game/*` request
2023-11-04 22:19:29 +00:00
`curl -X POST http://localhost/game -o aes.bin`
2023-11-03 22:10:13 +00:00
2023-09-27 21:41:54 +00:00
Decrypt:
2023-11-03 22:10:13 +00:00
2023-09-27 21:41:54 +00:00
(key and iv are `0123456789012345` in hex format for openssl)
2023-11-03 22:10:13 +00:00
2024-02-11 19:16:55 +00:00
`openssl enc -d -aes-128-cfb -in aes.bin -out lol.txt -K '30313233343536373839303132333435' -iv '30313233343536373839303132333435'`
2023-11-03 22:10:13 +00:00
Oneliner:
2024-02-11 19:16:55 +00:00
`curl -X POST http://localhost/game | openssl enc -d -aes-128-cfb -K '30313233343536373839303132333435' -iv '30313233343536373839303132333435'`
### Test a game command:
The python file pads the given protocol string, then openssl encrypts it for the server to then decrypt and respond. With the response we get, we are able to decrypt that using the same method.
`python pad_plaintext.py '{"game":{"eventcode":"000","version":"2.4.1"},"param":{},"protocol":"unlock"}' | openssl enc -e -aes-128-cfb -K '30313233343536373839303132333435' -iv '30313233343536373839303132333435' | curl -X POST -H "Content-Type: application/octet-stream" --data-binary @- http://10.3.0.141/game | openssl enc -d -aes-128-cfb -K '30313233343536373839303132333435' -iv '30313233343536373839303132333435'`
`python pad_plaintext.py '{"game":{"eventcode":"000","version":"2.4.1"},"param":{},"protocol":"unlock","terminal":{"tenpo_id":"1337","tenpo_index":1337,"terminal_attrib":0,"terminal_id":"1C1B0D07CDBB"}}' | openssl enc -e -aes-128-cfb -K '30313233343536373839303132333435' -iv '30313233343536373839303132333435' | curl -X POST -H "Content-Type: application/octet-stream" --data-binary @- http://localhost/game | openssl enc -d -aes-128-cfb -K '30313233343536373839303132333435' -iv '30313233343536373839303132333435'`
