Skip to content

Use stack size when finding decryption routine and seed#2

Open
PeterGabaldon wants to merge 1 commit intorandorisec:mainfrom
PeterGabaldon:locate_fgt_verify_initrd_with_stack_size
Open

Use stack size when finding decryption routine and seed#2
PeterGabaldon wants to merge 1 commit intorandorisec:mainfrom
PeterGabaldon:locate_fgt_verify_initrd_with_stack_size

Conversation

@PeterGabaldon
Copy link

Hello,

This is related to the issue I posted some hours ago #1.

Instead of relaying in the symbol rsa_parse_pub_key the scripts now looks for the stack size of the decryption routine. Using that the address of that function is found and then the SEED and so on can be calculated.

Again, thank you for you amazing work researching the new encryption method of FortiOS in later versions of 7.4.3.

@PeterGabaldon
Copy link
Author

Also, I tested it in 7.4.6 and can confirm that works well

@PeterGabaldon PeterGabaldon changed the title Use stack size when finding decryption routine and SEED Use stack size when finding decryption routine and seed Apr 26, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant