Нашел в твиттерах интересную тулзу для анализа криптолокеров, и криптографии в целом. Может, кому-то еще пригодится.



--> твиттор автора <--
--> скачать <--

| Сообщение посчитали полезным: Hugo Chaves, Orlyonok, mak, hors, plutos, f13nd, Bronco

1.4.0.1

+ Added embedded Chrysanthemum.jpg and Desert.jpg (Windows 7 sample pictures) as input options
+ Added copy/paste for hex boxes in Compare tab
+ Added Ctrl+F (find) shortcut for all hex views
+ Added Ctrl+G (goto) shortcut for all hex views
+ Added Ctrl+O (Open File) and Ctrl+S (Save Output) shortcuts
+ Added selection length display to hex views
+ Added auto WORD/DWORD/QWORD conversion when selecting in hex views
+ Added some menu icons!
+ Enabled Compress button on Compress tab (note some algorithms are buggy, work in progress)
+ Enabled input menu for Compare tab (fills as Original)
+ Fixes with Swap button in Compare tab
+ Fixed block mode, padding mode, and IV for Serpent algorithm
+ Removed Input -> Raw Bytes (superceded by Paste option)

and I fixed the Serpent algorithm.

-----
ds

| Сообщение посчитали полезным:

_ttps://download.bleepingcomputer.com/demonslay335/CryptoTester.zip

[1.4.0.2]
+ Fixed Desert.jpg resource
+ Hex views:
______+ Added Esc (cancel selection) shortcut
______+ Added Home (go to beginning of current row) shortcut
______+ Added End (go to end of current row) shortcut
______+ Added auto ASCII/UTF-16 conversion when selecting
______+ Changed shortcuts to go to very beginning (Ctrl+Home) and very end of file (Ctrl+End)
______+ Fixed moving selection when start of selection is last byte
______+ Fixed page up when exactly one page down from byte 0
______+ Fixed clearing selection when pressing shift+up and start of selection is byte 0
______+ Fixed clearing selection when pressing shift+down and start of selection is last byte
______+ Fixed shift+up deselecting two rows
______+ Fixed release selection when pressing Home on byte 0 and End on last byte
+ Added support for finding cryptoblobs as ASCII strings in Key Finder
+ Added Esc (close) shortcut for all dialogs
+ Added "Flip Endian" tool to Blob Analyzer and RSA Calculator
+ Added drag-n-drop file support to IV textbox
+ Added "Custom Constant" (Advanced) to manually set the constant bytes used in Salsa20 (overrides default sigma/tau)
+ Added explicit OAEP padding to dropdown for RSA to be more clear (previously used OAEP if anything but None)
+ Added AES XTS block mode
+ Added HMAC-SHA1, HMAC-SHA256, and HMAC-SHA512 derive functions
+ Added RSA (Raw) algorithm - provide d or e as Key, n as IV
+ Grouped algorithms by cipher type to make long dropdown easier to find an algorithm, now also shows full proper names for algorithms
+ Fixed detection of PEM keys without newlines in Key Finder
+ Fixed RC2, RC5, and RC6 algorithms to actually act like block ciphers - accept block mode, padding mode, and IV
+ Fixed RC4 keysize for CryptDeriveKey
+ Fixed RSA Calculator to parse hex like other inputs (ignore spaces, colons, commas, etc.)
+ Fixed progress bar of Bruteforce Keys tool
+ Redesigned Bruteforce Keys tool to accept a byte count (e.g. key file with raw byte keys appended)

-----
ds

| Сообщение посчитали полезным: plutos, Bronco, mak