Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

HTTPS to api.ipify.org fails #5

Open
josuesouza opened this issue Oct 29, 2021 · 3 comments
Open

HTTPS to api.ipify.org fails #5

josuesouza opened this issue Oct 29, 2021 · 3 comments

Comments

@josuesouza
Copy link

Hello,

I figured the encryptor stopped calling the handshake.php page that inserts the victim details in the database. After investigating, I noticed the TLS handshake between encryptor and api.ipify.org was failing. Looks like the client is using TLS 1.0 and the site does not support it anymore.

TLS

I changed the code to use plain HTTP by calling http://api.ipify.org and is working fine now.

@snake9935
Copy link

I had the same problem, thanks for the solution :=)

Did you manage to make the decrypter work?

@josuesouza
Copy link
Author

Unfortunately not. I gave up after a while as I didn't need the decryption component for my use case (detecting ransomware behavior with threat hunting tools). I did try a few things but couldn't solve the issue. Probably would need someone with real skills on C#, which is not my case :)

@snake9935
Copy link

I also want to test my detection tools.

It's a pity not to go through with the test, I tried a lot of solutions but it still doesn't work :=)

I only know the Python language and powershell :=)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants