Cryptography Basics

Cryptography is an art of hiding important or valuable information in a form which general users can’t understand. It’s a process of securing data and information.

There are three types of cryptography.

  1. Symmetric cryptography: When we will solve CTF problems , we will get this types of cryptography a large numbers. Symmetric cryptography where always has a common key for encryption and decryption. We have to use the common key to decrypt the encrypted message.

     Common types of symmetric cryptography which we face in CTF challenges are:

  1. Caesar Cipher 

  2. Rot13 

  3. Vigenere Cipher 



  4. Morse Code

  5. Bacon Cipher

  6. Alphabetical Substitution

    The tools we use for decryption are:

  1. CyberChef (website)

  2. Caesar cipher(website)

vigenere solver (website)
    
      2. Hash Function Cryptography: There is no common key value like as symmetric cryptography. But in this cryptography, there has the equal length of the plain text and cipher text.

Common types of hash function cryptography which we face in CTF challenges are:

  1. MD5 

  2. SHA-1
  3. SHA-256
  4. Whirephool
  5. Shake

  6. HAS-160

Tools:

  1. CyberChef

  2. Hashcat(Default on Kali Linux OS)

  3. John the ripper (Default on Kali Linux OS)

  4. Online tools (Search Google)

    3.Asymmetric Cryptography: In this cryptography, there are two key, private and public key. For decryption, these two key are used. Public key is known by everyone but private key is only known by the receiver who wants to decrypt the encryption.

The common asymmetric cryptography example is RSA algorithm.

Tools:

  1. Openssl (Default on Kali Linux OS)
  2. Online tools (Search Google)
Happy Hacking H4ck3r😇

Comments

Post a Comment

Popular posts from this blog

My Starting 001

Image
When i started my journey, i was too much confused. I was waiting for a long time to get a proper guideline. Today i am sharing with you two the most impressive websites that you start you cyber security journey.   1. Try Hack Me (THM)   2. Hack The Box (HTB)  Hack The Box website Link Try Hack Me website Link THM or HTM , which one is best ?   Actually both are best for the beginners. If anyone likes to read blogs and comfortable with blogs , THM is best for him/her. THM comes with full concept of the topics then hands on with practical knowledge. On the other hand, HTM comes with practical hands on. You can hands dirty with practice and write-up as well.    My suggestion  I was starting with both. When i was getting bored with blogs or reading ,then i was going to the hack the box. My most of the rooms were practicing with try hack me . I like reading and comfortable with blogs. But hack the box pawn-boxes come with walk through, which is...
Read more

SQL injection attack, querying the database type and version on Oracle(Portswigger Lab 07)

Image
Path: Product Category filter Goal: display the database version string Step1: Determine the number of columns after the category name, we run a query Query: ‘ order by 1 - - then, select all and press Cntrl+U for URL encoding Response 200 OK It shows that the status HTTP/2 200 OK. It means the server responds to the malicious query. It also means that the server has 1 column. step 2: Then, we check the same query for the 2 columns. Query: ‘ order by 2 - -   then, select all and press Cntrl+U for URL encoding It shows that the status HTTP/2 200 OK. It means the server responds to the malicious query. It also means that the server has 2 columns. Step 3: Then, we check the same query for the 3 columns. Query: ‘ order by 3 - - select all and press Cntrl+U for URL encoding 'It shows that the status HTTP/2 500 Internal Server Error. It means the server doesn’t respond to the query. It also means that the server doesn’t have 3 columns. Step 4: Determine the datatype...
Read more

SQL Based on Portswigger Lab 3

This type of UNION attack is done using the UNION keyword, which lets you execute an additional SELECT query and append the results to the original query. For example , if an application executes the following query containing the user input "Gifts": SELECT name, description FROM products WHERE category = 'Gifts' Then an attacker can submit the input: ' UNION SELECT username, password FROM users-- Blind SQL : This means that the application does not return the results of the SQL query or the details of any database errors within its responses. First-order SQL injection:   It arises when the application takes user input in an unsafe way. Second-Order SQL injection:  It arises when the application takes user input from an HTTP request and stores it for future use. Later when handling a different HTTP request, the application retrieves the stored data and incorporates it into a SQL query in an unsafe way. Second-order SQL injection often arises in situation...
Read more