Replace pycrypto XOR function by code sample provided in kevthehermit#50

cccs-sgaron · Nov 10, 2022 · 78a8651 · 78a8651
1 parent d675ba1
commit 78a8651
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/malwareconfig/crypto.py b/malwareconfig/crypto.py
@@ -1,5 +1,6 @@
+import itertools
 import struct
-from Crypto.Cipher import ARC4, DES, DES3, AES, Blowfish, XOR
+from Crypto.Cipher import ARC4, DES, DES3, AES, Blowfish
 from Crypto.PublicKey import RSA
 
 from pbkdf2 import PBKDF2
@@ -13,8 +14,7 @@ def decrypt_rsa(key, data):
 
 # XOR
 def decrypt_xor(key, data):
- cipher = XOR.new(key)
- return cipher.decrypt(data)
+ return bytes([a ^ b for a, b in zip(itertools.cycle(key), data)])
 
 
 # RC4