Skip to content

Instantly share code, notes, and snippets.

@nurpabuccu
nurpabuccu / rc4_dec.py
Created June 4, 2021 14:44
Cerberus payload base64+rc4 decrypt
# This script can be used for malware samples that used Base64+RC4.
# python3 rc4_decrypt.py <key> <base64-ciphertext>
import codecs
import base64
import sys
key = sys.argv[1]
c = base64.b64decode(sys.argv[2])
def KSA(key):