Simple OpenSSL Decryption Bruteforcer (HTB - Hawk)

openssl_decrypter.sh

#!/bin/bash
### 0xc4s OpenSSL bruter for HTB's 'Hawk'

# Declare wordlists
wordlist = '/usr/share/wordlists/rockyou.txt'

# Declare array of possible ciphers (based on common ones from 'openssl help')
ciphers=(
    -aes-256-cbc
    -aes-128-cbc
    -aes-256-ecb
    -aes-128-ecb
)

# Loop through ciphers
for cipher in "${ciphers[@]}"; do
  echo "TRYING CIPHER: $cipher"
  
  # Loop through wordlist
  while read passTry; do
    openssl enc -d -a $cipher -k $passTry -in drupal.txt.enc -out tmp &>/dev/null

    if [ $? -eq 0 ]; then
      echo "PASSWORD FOUND!"
      echo "Pass is: $passTry"
      echo "===DECRYPTED TEXT BELOW==="
      cat tmp
      echo "===END DECRYPTED TEXT==="
      # For Hawk, it gets the correct password on first try
      # However, a 0-exit code doesn't always mean getting the key right
      # As such, don't exit (spam alert!)
      #exit 0
    fi
  rm tmp
  done < $wordlist
done

rm tmp