(Written in Go because, you know, "write once, run anywhere.")
This is a tool to decrypt reports submitted by a hunter from the Ravro platform bug bounty.
1 - Install openssl
- Windows : https://slproweb.com/products/Win32OpenSSL.html
- Linux (Ubuntu) :
apt update && apt install build-essential checkinstall zlib1g-dev openssl libssl-dev -y
- Mac OS :
brew install openssl
2 - Install wkhtmltopdf
-
Windows : https://wkhtmltopdf.org/downloads.html and add environment variable
C:\ProgramFiles\wkhtmltopdf
-
Linux :
$ apt install libssl1.0-dev $ apt --fix-broken install $ apt install libssl1.0-dev $ cd ~ $ wget https://github.com/wkhtmltopdf/wkhtmltopdf/releases/download/0.12.3/wkhtmltox-0.12.3_linux-generic-amd64.tar.xz $ tar vxf wkhtmltox-0.12.3_linux-generic-amd64.tar.xz $ cp wkhtmltox/bin/wk* /usr/local/bin/
And you can confirm with:
$ wkhtmltopdf --version wkhtmltopdf 0.12.3 (with patched qt)
-
Mac OS :
brew install wkhtmltopdf
3 - Copy your private key to key
directory
4 - Download .zip
file report, Copy zip
file in the encrypt
directory.
5 - Run ravro_dcrpt.exe
/ ravro_dcrpt
root# chmod +x linux.sh
root# ./linux.sh
C:\Users\ravro> win64.bat
root# ./darwin.sh
.
├── decrypt
│ └── ir2020-07-16-0002
│ └── test__ir2020-07-16-0002__user3.pdf
├── encrypt
│ └── report-ir2020-07-16-0002
│ ├── judgment
│ │ └── data.ravro
│ └── report
│ └── data.ravro
├── key
│ └── key.private
Use without command line :
$ ./ravro_dcrpt -init
$ ./ravro_dcrpt
>> Current Version : ravro_dcrpt/1.0.2
>> Github : https://github.com/ravro-ir/ravro_dcrp
>> Issue : https://github.com/ravro-ir/ravro_dcrp/issues
>> Author : Ravro Development Team (RDT)
>> Help : ravro_dcrpt --help
Use the arrow keys to navigate: ↓ ↑ → ←
? Please choose a key:
▸ ravro_key2
ravro_key1
[++++] Starting for decrypting Report . . .
[++++] Starting for decrypting Judgment . . .
[++++] Starting for decrypting Amendment . . .
[++++] Decrypted successfully
[++++] Starting report to pdf . . .
[++++] PDF generated successfully
$ ./ravro_dcrpt -update
$ ./ravro_dcrpt -log
$ ./ravro_dcrpt -json
Use with command line :
$ ./ravro_dcrpt -init
$ ./ravro_dcrpt -in=<Inout path, /home/irx0xx-xx-xx-000x> -out=<Output path, Ex : /home/output/> -key=<KEY PATH DIR, Ex: key.private>
$ mkdir /home/output
$ mkdir /home/key
$ ./ravro_dcrpt -in=/home/irx0xx-xx-xx-000x -out=/home/output/ -key=/home/key/key.private
>> Current Version : ravro_dcrpt/1.0.2
>> Github : https://github.com/ravro-ir/ravro_dcrp
>> Issue : https://github.com/ravro-ir/ravro_dcrp/issues
>> Author : Ravro Development Team (RDT)
>> Help : ravro_dcrpt --help
Use the arrow keys to navigate: ↓ ↑ → ←
? Please choose a key:
▸ ravro_key2
ravro_key1
[++++] Starting for decrypting Report . . .
[++++] Starting for decrypting Judgment . . .
[++++] Starting for decrypting Amendment . . .
[++++] Decrypted successfully
[++++] Starting report to pdf . . .
[++++] PDF generated successfully
Install a Go compiler.
Run the following commands in the checked-out repository:
$ git clone https://github.com/ravro-ir/ravro_dcrpt.git
$ cd ravro_dcrpt
$ go build ravro_dcrpt
$ go run ravro_dcrpt
Building other platform:
$ GOOS=windows GOARCH=amd64 go build .
$ GOOS=darwin GOARCH=amd64 go build .
$ GOOS=linux GOARCH=amd64 go build .
(Add the appropriate .exe
extension on Windows systems)
You can use this package which compiles and installs from latest commit of main branch:
https://aur.archlinux.org/packages/ravro_dcrpt-git/
git clone https://aur.archlinux.org/ravro_dcrpt-git.git
cd ravro_dcrpt-git
makepkg -sri
Please use github issues to report bugs.
v1.0.3
- Added multi zip file for decrypting
- Change read argument of multi zip file for decrypting
- Multi select key and refactor code of paths
- Refactor code
- Error handling
- Fixed bugs
v1.0.2
- Added feature logger
- Added feature spinner load
- Added update ravro_dcrpt
- Better performance pdf result
- Project packaging
- Added convert to json
- Bug fix
GNU General Public License, version 3
Ramin Farajpour Cami <ramin.blackhat@gmail.com>, <farajpour@ravro.ir>