HTB:CA2023 Forensics Interstellar python decrypt for phase 1

decrypt_phase1.py

from Crypto.Cipher import AES
from Crypto.Util.Padding import pad, unpad

### borrowed from https://gist.github.com/lopes/168c9d74b988391e702aac5f4aa69e41
def decrypt(data, key, iv):
    cipher = AES.new(key, AES.MODE_CBC, iv)
    return unpad(cipher.decrypt(data[0:]), AES.block_size)

key = [0,1,1,0,0,1,1,0,0,1,1,0,1,1,0,0]
iv = [0,1,1,0,0,0,0,1,0,1,1,0,0,1,1,1]

### get the encrypted bytes
with open('./destdir/94974f08-5853-41ab-938a-ae1bd86d8e51','rb') as f:
    bytes = f.read()

with open('./phase1.dec','wb') as f:
    f.write(decrypt(bytes, bytearray(key),bytearray(iv)))