Skip to content

Instantly share code, notes, and snippets.

@kingm0b
kingm0b / check_intermedium_private_key_leak.sh
Created May 13, 2018 03:07 — forked from guilhermednt/check_intermedium_private_key_leak.sh
Verifying Banco Intermedium's private key leak
# Today the twitter user @ayubio said he had received the private key for a Brazillian bank's HTTPS certificate:
# - https://twitter.com/ayubio/status/994260981294469120
# - https://twitter.com/ayubio/status/994262029929246722
# - https://twitter.com/ayubio/status/994277992351391744
# To prove he actualy had the key, another user asked him to sign a message with such key and so he did:
# - http://pastebin.xyz/p?q=bXllODA
# The commands bellow will check that signature
# Store the message in a file (tweet.txt) in the same way @ayubio did:
/*
* Compila com: $ gcc xpto.c -o xpto -std=c11 -Wall
*
*/
#include <stdio.h>
#include <string.h>
int main(void)
{
/*
* Compila com: $ gcc crack_caesar_cipher.c -o xpto -std=c11 -Wall
*/
#include <stdio.h>
#include <string.h>
int main(void)
{
char crackme[] = "`iidV!a$idVa9t8:ws9p3tp";