PragCypher has quit [Read error: No route to host]
alexgordon has joined #elliottcable
<elliottcable>
hi.
<elliottcable>
working my way through natas
<elliottcable>
on natas8
<elliottcable>
easy so far
<elliottcable>
don't have a PHP evaluator around, so that's retarding my progress right now
<elliottcable>
natas10
<elliottcable>
ugh
<elliottcable>
this one is hard, because I suck at PHP
<elliottcable>
don't know what I'm doing wrong )'=
<Aria>
Well, ask yourself what Guido Van Rossum would do.
<Aria>
It'll be the opposite of that.
<whitequark>
this also has nothing to do with PHP
<elliottcable>
no, it absolutely does
<whitequark>
natas10?
<elliottcable>
get to natas11; and I've got to reverse-engineer their code
<elliottcable>
I know exactly what to do; just not how to do it in PHP
<whitequark>
ooooh I see.
<elliottcable>
I'm base64-encoding a variable I've got, having un-XOR-encoded their data; and even if I change the variable, my base64-encoding is exactly the same
<elliottcable>
which implies I'm doing something wrong in the fucking PHP code. ಠ_ಠ
<whitequark>
elliottcable: do it in Ruby.
<whitequark>
there's nothing PHP-specific in the encoding.
<elliottcable>
lol I might do it in JS if I have to
<purr>
lol
<whitequark>
from what I can tell.
<elliottcable>
yeah, but I can't be arsed to re-write their XOR-encoding function
<elliottcable>
anwyay, think I got it now
<elliottcable>
DO MY DANCE ON YOUR DICK, OOO I KNOW YOU LOVE DAT SHIT
<elliottcable>
(fuckin' fuckin' right, boy)
<elliottcable>
(fuck it right, boy)
* elliottcable
starts over from scratch and writes it *well*
<elliottcable>
somebody tell me how I'm an idiot; at that stage, it should be printing the original key. Instead, I get some obviously-wrong gibberish.
<whitequark>
elliottcable: order of stuff in json?
<whitequark>
showpassword,bgcolor vs the reverse
<elliottcable>
copy-pasted from the attackee's code
<whitequark>
maybe it's not preserved in PHP?
<elliottcable>
makes no sense, same problem if I manually type in the JSON as a string
alexgordon has quit [Ping timeout: 252 seconds]
<Aria>
... What's $encrypted_data used for?
<elliottcable>
oh.
<elliottcable>
well, that's one thing that makes me an idiot.
<elliottcable>
Ugh. Fixed it, but now I get divisions by zero. awoirharuoawhtuar