opensslLOLBIN
Crypto operations: decryption, key extraction from .pfx.
Legitimate system binary (LOLBIN): not an offensive tool as such, but an attacker leverages it because it is usually already installed and raises fewer suspicions than dropping a dedicated tool.
The crypto and TLS swiss-army knife. In pentesting it is used to talk to encrypted services (IMAPS, POP3S, FTPS), inspect certificates, decrypt files and generate hashes or certificates.
Family Cracking & wordlists
Flags pkcs12 -in -nocerts -nodes
Concepts Cracking protected files (.zip, .pfx, .kdbx), WinRM over SSL/TLS with certificate authentication
Cheatsheet Encrypted containers & files
Installation
sudo apt install openssl
# suele venir preinstaladoUseful commands
Appears in
Some machines where its use is documented; not an exhaustive list.
- CascadeHackTheBox
- LaboratoryHackTheBox
- PermXHackTheBox
- TimelapseHackTheBox
- Vulnerable Lab (1 · 4 · 5)VulnHub