Posts by Mikle0x


Views: 1,614,682	Main \| Rules/FAQ \| Memberlist \| Active users \| Last posts \| Calendar \| Stats \| Online users \| Search	12-21-24 02:53 PM
Guest:

Main - Posts by Mikle0x

Mikle0x

Posted on 12-06-15 09:02 PM, in What is this file's format? (rev. 4 of 12-06-15 09:21 PM)

Link | #811

Newcomer
Normal user

Level: 5

Posts: 1/4
EXP: 459
Next: 70

Since: 12-06-15

Last post: 3302 days ago
Last view: 3171 days ago

Someone found this file (.plugin extension) , where there is supposedly interesting stuff. Most of the file's contents are encrypted, and I don't know how to decrypt it (the decryption process is probably related to the dev keys, which I have).

Mikle0x

Posted on 12-06-15 09:26 PM, in What is this file's format?

Link | #816

Newcomer
Normal user

Level: 5

Posts: 2/4
EXP: 459
Next: 70

Since: 12-06-15

Last post: 3302 days ago
Last view: 3171 days ago

Yeah sorry, someone who wants to stay anon., got this file I-don't-know-where, and had no clue about it either. Thus the "I".

Anyways there were another file that came with it, a .debugger file, containing some function-name-related symbols, such as "update_firmware()", "note_new()", "//DevMenuCTR"

Mikle0x

Posted on 12-06-15 09:42 PM, in What is this file's format?

Link | #818

Newcomer
Normal user

Level: 5

Posts: 3/4
EXP: 459
Next: 70

Since: 12-06-15

Last post: 3302 days ago
Last view: 3171 days ago

http://s000.tinyupload.com/index.php?file_id=49063689152813464337

Mikle0x

Posted on 12-06-15 09:53 PM, in What is this file's format?

Link | #820

Newcomer
Normal user

Level: 5

Posts: 4/4
EXP: 459
Next: 70

Since: 12-06-15

Last post: 3302 days ago
Last view: 3171 days ago

Posted by plutoo
Looks like it contains some form of bytecode, maybe Lua or something. Edit: Or maybe it's just some encryption throwing me off.

I believe there is too few zeroes for it to be bytecode. Moreover, I think signature-like data is located just after "PROCESS" (compare UiT.plugin with UiT (1).plugin; the encrypted data is EXACTLY the same between the two files, but the signature is totally different due to a modification in the header)

Main - Posts by Mikle0x

Page rendered in 0.008 seconds. (2048KB of memory used)
MySQL - queries: 22, rows: 68/68, time: 0.005 seconds.
[powered by Acmlm]