UnSHc icon indicating copy to clipboard operation
UnSHc copied to clipboard

Hello, I can't decrypt arc4. I tried two versions of decryption script with almost the same tips. How can I solve this problem?

Open xiaowei58148 opened this issue 5 years ago • 5 comments


| | | | / | | | |
| | | |
__ \ --.| |_| | ___ | | | | '_ \ --. \ _ |/ __| | |
| | | | /_
/ / | | | (__ _/|| |_/_| |/___|

--- UnSHc - The shc decrypter. --- Version: 0.8

UnSHc is used to decrypt script encrypted with SHc Original idea from Luiz Octavio Duarte (LOD) Updated and modernized by Yann CAM

  • SHc : [http://www.datsi.fi.upm.es/~frosal/]
  • UnSHc : [https://www.asafety.fr/unshc-the-shc-decrypter/]

[*] Input file name to decrypt [0x41c2d0] [+] Output file name specified [a.sh] [-] Error, File [0x41c2d0] not found. [root@localhost ~]# ./unshc.sh a.sh


| | | | / | | | |
| | | |
__ \ --.| |_| | ___ | | | | '_ \ --. \ _ |/ __| | |
| | | | /_
/ / | | | (__ _/|| |_/_| |/___|

--- UnSHc - The shc decrypter. --- Version: 0.7

UnSHc is used to decrypt script encrypted with SHc Original idea from Luiz Octavio Duarte (LOD) Updated and modernized by Yann CAM

  • SHc : [http://www.datsi.fi.upm.es/~frosal/]
  • UnSHc : [https://www.asafety.fr/unshc-the-shc-decrypter/]

[*] Input file name to decrypt [a.sh] [-] Unable to define arc4() call address... [root@localhost ~]# ^C [root@localhost ~]# ./unshc1.sh a.sh


| | | | / | | | |
| | | |
__ \ --.| |_| | ___ | | | | '_ \ --. \ _ |/ __| | |
| | | | /_
/ / | | | (__ _/|| |_/_| |/___|

--- UnSHc - The shc decrypter. --- Version: 0.8

UnSHc is used to decrypt script encrypted with SHc Original idea from Luiz Octavio Duarte (LOD) Updated and modernized by Yann CAM

  • SHc : [http://www.datsi.fi.upm.es/~frosal/]
  • UnSHc : [https://www.asafety.fr/unshc-the-shc-decrypter/]

[*] Input file name to decrypt [a.sh] [-] Unable to define arc4() call address...

xiaowei58148 avatar Jun 09 '19 21:06 xiaowei58148

Same here, were you able to fix this?

Wqrld avatar Jul 04 '19 06:07 Wqrld

From your UnSHc execution shown behind, you have tried to run UnSHc on a file a.sh and not a.sh.x.

Try again with the right enrcrypted file.

yanncam avatar Jul 04 '19 06:07 yanncam

I had the same arc4() error with i.sh.x: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=f6faf4df13eeaf8681bce8c1a5c29d90aa5865, stripped

Wqrld avatar Jul 04 '19 06:07 Wqrld

Hello,

Which version of shc do you use ? UnSHc need the *.sh.x file as argument, not the *.sh. Please read : https://github.com/yanncam/UnSHc/issues/31

Sincerely,

yanncam avatar Oct 15 '20 08:10 yanncam

I have the same issue could you help me!

phreaker56 avatar Apr 06 '22 22:04 phreaker56