Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ERROR decoding db definition: list index out of range #17

Open
romaleev opened this issue Jun 24, 2023 · 22 comments
Open

ERROR decoding db definition: list index out of range #17

romaleev opened this issue Jun 24, 2023 · 22 comments

Comments

@romaleev
Copy link

bin/croconvert --strucrack --csv --dbcrack test_data/DB/
WARN: expected dbinfo to start with 0x03
ERROR decoding db definition: list index out of range
This could possibly mean that you need to try with the --strucrack option
WARN: expected dbinfo to start with 0x03
ERROR decoding db definition: list index out of range
This could possibly mean that you need to try with the --strucrack option

Got the issue above, any hints how it can be fixed?
Thanks

@banderlog
Copy link

probably it is a new cronos format, like v5 or something younger, than 2 years from the last update of this software

@erdgeist
Copy link
Collaborator

Decrypting the database is a heuristic process, with the current master branch, we just take the amount of \0 bytes into account which should be the majority of the table description contents.

However, to aid the process of actually cracking the database, I prepared a PR #13 which adds a decryption helper support to strucrack.

@banderlog
Copy link

@erdgeist so, current version of cronodump can convert Cronos v5 format?

@erdgeist
Copy link
Collaborator

Definitively.

@banderlog
Copy link

Maybe you could provide some example, like on that cronos db ?

Because maybe 3/10 cronos databases which I met, have been successfully converted with croconvert

@erdgeist
Copy link
Collaborator

Did you try to decode it with this PR?

I would like to get some feedback on the interactive features to help narrowing down the database's keys.

Also do you have a direct link to the database? I can't seem to create an account.

@banderlog
Copy link

banderlog commented Jul 19, 2023

Also do you have a direct link to the database? I can't seem to create an account.

https://t.me/dbsdbsdbsdb/112
Password: "www.cronos.li"

Did you try to decode it with #13?

Yep, it throws error

Default:

$ ./cronodump/bin/croconvert -c SBERSPASIBO_www.cronos.li/
WARN: expected dbinfo to start with 0x03
ERROR decoding db definition: 'charmap' codec can't decode byte 0x98 in position 78: character maps to <undefined>
This could possibly mean that you need to try with the --strucrack option
WARN: expected dbinfo to start with 0x03
ERROR decoding db definition: 'charmap' codec can't decode byte 0x98 in position 78: character maps to <undefined>
This could possibly mean that you need to try with the --strucrack option

With --strucrack:

$ ./cronodump/bin/croconvert -c --strucrack  SBERSPASIBO_www.cronos.li/
Traceback (most recent call last):
  File "<frozen runpy>", line 198, in _run_module_as_main
  File "<frozen runpy>", line 88, in _run_code
  File "/home/qwerty/TMP/cronodump/crodump/croconvert.py", line 139, in <module>
    main()
  File "/home/qwerty/TMP/cronodump/crodump/croconvert.py", line 113, in main
    cracked = strucrack(None, cargs)
              ^^^^^^^^^^^^^^^^^^^^^^
  File "/home/qwerty/TMP/cronodump/crodump/crodump.py", line 161, in strucrack
    for fix in args.fix or []:
               ^^^^^^^^
AttributeError: 'Cls' object has no attribute 'fix'

Check for branch:

$ git branch
* erdgeist-strucrack-ambigous-kods
  master

@erdgeist
Copy link
Collaborator

Ahh, the strucrack subcommand in bin/crodump is what is recommended for non-automatic cracking. I added some comments to make that clearer.

@banderlog
Copy link

banderlog commented Jul 20, 2023

$ ./cronodump/bin/crodump strudump SBERSPASIBO_www.cronos.li/ produces error:

Error
WARN: expected dbinfo to start with 0x03
Traceback (most recent call last):
  File "<frozen runpy>", line 198, in _run_module_as_main
  File "<frozen runpy>", line 88, in _run_code
  File "/home/bkaba/TMP/cronodump/crodump/crodump.py", line 422, in <module>
    main()
  File "/home/bkaba/TMP/cronodump/crodump/crodump.py", line 418, in main
    args.handler(kod, args)
  File "/home/bkaba/TMP/cronodump/crodump/crodump.py", line 61, in stru_dump
    db.strudump(args)
  File "/home/bkaba/TMP/cronodump/crodump/Database.py", line 89, in strudump
    self.dump_db_table_defs(args)
  File "/home/bkaba/TMP/cronodump/crodump/Database.py", line 134, in dump_db_table_defs
    dbdef = self.decode_db_definition(dbinfo[1:])
            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/bkaba/TMP/cronodump/crodump/Database.py", line 99, in decode_db_definition
    keyname = rd.readname()
              ^^^^^^^^^^^^^
  File "/home/bkaba/TMP/cronodump/crodump/readers.py", line 74, in readname
    return self.readbytes(namelen).decode("cp1251")
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.11/encodings/cp1251.py", line 15, in decode
    return codecs.charmap_decode(input,errors,decoding_table)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
UnicodeDecodeError: 'charmap' codec can't decode byte 0x98 in position 78: character maps to <undefined>

$ ./cronodump/bin/croconvert -c --strucrack SBERSPASIBO_www.cronos.li/ provides some useful messages:

Messages
Processing record number 0
Found .Bb}.Nbme which looks a lot like .BankName 
Add the following switches to your command line to fix the decoder box:
    -f 836a08 -f ab6b42 -f 806c61 -f bd6d6e -f f26e6b -f e86f4e -f c47061 -f 8d716d -f 787265 

Found ..й.тж.ь.э..омер which looks a lot like .Системный номер 
Add the following switches to your command line to fix the decoder box:
    -f 36e70f -f 31e8d1 -f c4e9e8 -f bdeaf1 -f 52ebf2 -f c4ece5 -f f2edec -f bdeeed -f e4effb -f f2f0e9 -f 9df120 -f 09f2ed -f f5f3ee -f def4ec -f b3f5e5 -f 4ef6f0 

00000 ..Bank...?..К??o©ОLd?.?? : 000442616e6b0e0000??0003ca3f??6fa9ce4c64??03???? : 0a01=. 2202=. 9003=B c004=a 7b05=n e706=k 0d07=. 5408=. 8509=. e10a=? ac0b=. 630c=. 780d=К ee0e=? cd0f=? f610=o bf11=© de12=О 2713=L c914=d b015=? 3816=. fc17=? db18=?
00024 ?a.:#.?ю.nt,..Ђ<< Баиб ? : ??61053a2300??fe006e742c0017803c3c20c1e0e8e120?? : ed19=? 7d1a=a 001b=. 4a1c=: 5a1d=# 431e=. d31f=? 4320=ю b921=. ff22=n b223=t 7224=, b425=. 2426=. 2927=Ђ 8b28=< c029=< 412a=  4d2b=Б b62c=а 0d2d=и 632e=б a32f=  6730=?
00048 А??у..?б с?р?с.р.? www.c : c0????f30100??e120f1??f0??f103f001??207777772e63 : 9d31=А f432=? db33=? b134=у 8a35=. 8a36=. d037=? 3838=б 3739=  bb3a=с ed3b=? fb3c=р 303d=? 1c3e=с 103f=. 7540=р 1041=. 3042=? 4b43=  d844=w 7045=w e846=w 2f47=. 3448=c
00072 rћќos.l. >>.BankI2?..Ђ?1 : 729e9d6f732e6c98203e3e0642616e6b4932??000080??31 : d849=r 314a=ћ 314b=ќ d84c=o 0c4d=s 614e=. d84f=l 3150=. e751=  ff52=> 6b53=> 6654=. b255=B a456=a e057=n 2e58=k 2b59=I 475a=2 945b=? 735c=. f95d=. 8d5e=Ђ d35f=? 6b60=1
00096 792431890.Bb}.Nbme??.ЂTb : 3739323433313839300842627d7f4e626d65????00805462 : 3f61=7 a562=9 d463=2 3f64=4 3f65=3 b266=1 3267=8 1e68=9 c269=0 836a=. ab6b=B 806c=b bd6d=} f26e=. e86f=N c470=b 8d71=m 7872=e be73=? b874=? 2f75=. 3676=Ђ 0f77=T b378=b
00120 erTpa???o 53? << ?аза за : 6572547061??????6f203533??203c3c20??e0e7e020e7e0 : 8d79=e 4d7a=r f07b=T 4d7c=p 8d7d=a 967e=? 6d7f=? 3b80=? 6f81=o 2b82=  a083=5 a484=3 9985=? 3a86=  2e87=< 2188=< e589=  6c8a=? 608b=а 7b8c=з d78d=а 2d8e=  2c8f=з 1190=а
00144 ??ЋженЊ ? Ѓе?уCса ?’?/c? : ????8ee6e5ed8c20??2081e5??f343f1e020??92??2f63?? : b891=? 5092=? b993=Ћ ec94=ж ec95=е 2396=н 1a97=Њ a098=  e199=? bf9a=  989b=Ѓ 8e9c=е 9e9d=? 6b9e=у 199f=C 6ba0=с 8ea1=а 82a2=  fca3=? 8aa4=’ 59a5=? 88a6=/ 04a7=c fca8=?
00168 po??=?j!>>.B?s??0??..•.. : 706f????3d??6a213e3e0742??73????30????0000950000 : 38a9=p 38aa=o fcab=? 48ac=? bdad== fcae=? 38af=j 81b0=! 69b1=> 6fb2=> bfb3=. 36b4=B b0b5=? 7cb6=s 59b7=? 6db8=? 26b9=0 e4ba=? 46bb=? 70bc=. e8bd=. 45be=• 9abf=. 0cc0=.
00192 ..?....?......?зЫ???XX.. : 0300??00030101??000101010714??e7db??????58580000 : 21c1=. 82c2=. c5c3=? 21c4=. 05c5=. bcc6=. 05c7=. c5c8=? 64c9=. 0fca=. a9cb=. 35cc=. 15cd=. 19ce=. becf=? a4d0=з c1d1=Ы 2ad2=? ced3=? ddd4=? 9fd5=X fed6=X 78d7=. 1dd8=.
00216 .........?......й.тж.ь?э : 1400010000001b0000??000000000f00e900f2e600fc??fd : f2d9=. b3da=. fadb=. fadc=. 52dd=. 8dde=. 56df=. dee0=. f5e1=. 3be2=? 5de3=. 12e4=. f1e5=. 4ee6=. 36e7=. 31e8=. c4e9=й bdea=. 52eb=т c4ec=ж f2ed=. bdee=ь e4ef=? f2f0=э
00240 ..омер.....?...????..... : 0000eeece5f00100000001??000101????????0300000000 : 9df1=. 09f2=. f5f3=о def4=м b3f5=е 4ef6=р 6ef7=. 6ef8=. aff9=. 56fa=. 1ffb=. c7fc=? adfd=. 7afe=. 8cff=. ca00=? e301=? da02=? ce03=? ba04=. 9505=. 2206=. ba07=. 5408=.
00264 ....яя.?яЯяя.???.??.?"?s : 00000000ffff00??ffdfffff00??????00????1a??22??73 : 8509=. 040a=. ac0b=. b60c=. b60d=я b70e=я 630f=. 9c10=? e911=я 9d12=Я a813=я a714=я 0d15=. f416=? b017=? 6718=? 3819=. 461a=? fc1b=? 8a1c=. d01d=? 5a1e=" df1f=? 5520=s
00288 .0??.....B?se002?...?Bas : 0030????041700140742??7365303032??100000??426173 : b921=. 5722=0 d123=? d924=? 7c25=. 2426=. b127=. 3328=. 7529=. 0e2a=B d32b=? 322c=s cb2d=e c82e=0 272f=0 2530=2 3931=? 1032=. 7e33=. cc34=. 1b35=? c936=B 3f37=a 3438=s
00312 ?00N..???.ormuls+00?..Ѓ. : ??30304e0715??????1f6f726d756c732b3030??00008100 : 9139=? 283a=0 603b=0 5f3c=N 623d=. 453e=. ea3f=? c640=? 6c41=? 7142=. 0843=o a144=r 0845=m d846=u 7947=l d848=s 4949=+ ec4a=0 7d4b=0 924c=? ee4d=. 014e=. f84f=Ѓ 7250=.
00336 ..????..Fosm?m?001...Ђ.. : 0000????????000a466f736d??6d??303031080000800000 : 5351=. 5752=. d153=? 9254=? d955=? 5c56=? 5b57=. 2558=. 3259=F 645a=o 805b=s 645c=m 995d=? 0f5e=m 995f=? ff60=0 6b61=0 5562=1 6063=. 8b64=. c065=. 4e66=Ђ eb67=. 8468=.
00360 .......Formuls002?..Ђ..? : 00000000000005466f726d756c73303032??0000800000?? : 1469=. 286a=. 606b=. 0e6c=. d76d=. 066e=. 496f=. a170=F de71=o 1272=r de73=m 2674=u f575=l 2676=s 2977=0 d278=0 3479=2 507a=? 7d7b=. 617c=. ad7d=Ђ 4c7e=. f67f=. df80=?
00384 .?....G?s??l?ю03...Ѓ.... : 00??0000000a47??73????6c??fe30330800008100000000 : 8e81=. 5082=? 2383=. 7484=. 6585=. ff86=. 8087=G ef88=? 1f89=s ef8a=? ca8b=? 6e8c=l ca8d=? 478e=ю 9a8f=0 2e90=3 c291=. cb92=. 5593=. 0d94=Ѓ d495=. 6a96=. b297=. 3f98=.
00408 ...?.N?2...?.O  ?tUд?.?? : 000000??034e??32160000??024fa0a0??7455e4??1b???? : c299=. 769a=. a59b=. 039c=? e29d=. 4d9e=N 2a9f=? c4a0=2 a4a1=. 2ba2=. 20a3=. d0a4=? 29a5=. aaa6=O 97a7=  cfa8=  5ca9=? 43aa=t 8cab=U ffac=д 94ad=? 64ae=. c3af=? ceb0=?
00432 в<?яЬђU2¬i.5S?2I?FO...Ђ2 : e23c??ffdc905532ac69083553??3249??464f0700018032 : 55b1=в 13b2=< d6b3=? 79b4=я 6bb5=Ь 8fb6=ђ b6b7=U bdb8=2 c0b9=¬ 1aba=i 2ebb=. 9dbc=5 e9bd=S cebe=? 9dbf=2 85c0=I 9cc1=? 54c2=F a8c3=O 0fc4=. e0c5=. bcc6=. 97c7=Ђ 56c8=2
00456 ?0539?Ve2s?/....Ђ-.      : ??30353339??56653273??2f2e020000802d16           : c7c9=? 56ca=0 8ccb=5 7acc=3 22cd=9 c3ce=? b4cf=V 02d0=e 89d1=2 90d2=s 1bd3=? 89d4=/ 89d5=. 1dd6=. 78d7=. 1dd8=. 37d9=Ђ bada=- 9ddb=.

Processing record number 2
00000 .??@                     : 00????40                                         : 8903=. f404=? 5e05=? 8f06=@

Processing record number 3
Found ПС..т..... номер which looks a lot like .Системный номер 
Add the following switches to your command line to fix the decoder box:
    -f 89340f -f 2235d1 -f e636e8 -f 3337f1 -f d538f2 -f e639e5 -f 243aec -f 333bed -f 393cfb -f 243de9 -f c83e20 -f fb3fed -f fe40ee -f 9f41ec -f b142e5 -f 7e43f0 

00000 .............а.?.?..c... : 04000003000600040000010100e000??08??082e63030605 : 5404=. 9505=. 2206=. 0407=. 5408=. 6309=. 040a=. 630b=. b60c=. b70d=. 630e=. e90f=. e910=. 9d11=а a812=. 7713=? 9814=. d315=? 4316=. 9017=. 7d18=c 9819=. 001a=. 001b=.
00024 .s.э.?.................. : 00732efd00??010001001700040000001b00000000001000 : 981c=. ff1d=s 861e=. 981f=э 0020=. db21=? 1a22=. 1a23=. b424=. b425=. 2426=. b127=. fb28=. 7c29=. d52a=. bb2b=. 972c=. 9f2d=. fe2e=. 1c2f=. 7530=. 4031=. 1032=. 7e33=.
00048 ПС?.т?..?. номер.....3.. : cfd1??05f2??0301??0020edeeece5f00100000000330002 : 8934=П 2235=С e636=? 3337=. d538=т e639=? 243a=. 333b=. 393c=? 243d=. c83e=  fb3f=н fe40=о 9f41=м b142=е 7e43=р 9044=. 9045=. 8f46=. 9747=. cf48=. 6149=3 414a=. ee4b=.
00072 .....?phone............. : 0001000000??70686f6e6500000000010100000010000000 : 864c=. 014d=. 014e=. a34f=. 7250=. 5c51=? 8252=p d853=h 2e54=o 2e55=n d856=e 5b57=. f758=. 3759=. 665a=. 735b=. f95c=. f95d=. c85e=. 275f=. 1160=. 7161=. 2562=. 4b63=.
00096 .....................ы.. : 0d000100000000000000001b000000000000000100fb0000 : e764=. c065=. eb66=. eb67=. 8468=. 1469=. 286a=. 606b=. 0e6c=. d76d=. 066e=. 5f6f=. 1170=. e771=. 8372=. 7b73=. 4974=. 2f75=. 2c76=. c977=. c978=. 4979=ы ec7a=. 7d7b=.
00120 ..4.......?b?suhdayS...? : 00003400040002000000??62??73756864617953000000?? : 617c=. b57d=. 087e=4 f67f=. 7480=. 8e81=. 7482=. 2383=. 7484=. 6585=. 9e86=? 2687=b 9688=? 1f89=s 7a8a=u 878b=h 6f8c=d 138d=a ba8e=y 198f=S ff90=. 6b91=. cb92=. 7f93=?
00144 ....?................... : 02000000??0000000d000100000000000000000000000000 : 6a94=. d495=. 6a96=. b297=. 1798=? c299=. 769a=. a59b=. e59c=. 449d=. 329e=. 329f=. e2a0=. 1ea1=. 2ba2=. 20a3=. 3da4=. f3a5=. 3aa6=. 29a7=. d2a8=. e5a9=. 07aa=. 34ab=.
00168 ...??...?..../...?m?il.. : 0000003f??010001??000200032f000005??6d??696c0000 : c1ac=. abad=. 2dae=. 13af=? d0b0=? 08b1=. 08b2=. 0bb3=. dcb4=? 16b5=. a0b6=. a4b7=. d8b8=. 31b9=/ bfba=. d8bb=. 3ebc=. 30bd=? bbbe=m 77bf=? 7cc0=i 9fc1=l 82c2=. 2ec3=.
00192 ....?...'....??..??..... : 00000204??00011f2701010d01????0101????000014000f : 21c4=. e0c5=. 05c6=. 0fc7=. c5c8=? 64c9=. 0fca=. bdcb=. 87cc=' 80cd=. f0ce=. facf=. 81d0=. 99d1=? 99d2=? 15d3=. 88d4=. c3d5=? ddd6=? 78d7=. 1dd8=. f2d9=. b3da=. bddb=.
00216 .......F...??.?..?...... : 0000000500000046010000????00??0000??000000030300 : fadc=. 52dd=. 8dde=. 12df=. dee0=. f5e1=. 19e2=. 7ce3=F f1e4=. f1e5=. 4ee6=. dce7=? 6de8=? 26e9=. e4ea=? 3ceb=. 4dec=. fded=? 13ee=. 69ef=. 6ff0=. a2f1=. aaf2=. 87f3=.
00240 ...?..яя.?я..????ьяяяя   : 000000??0000ffff00??ff0000????????fcffffffff     : a2f4=. aaf5=. 36f6=. eff7=? 6ef8=. aff9=. affa=я 56fb=я 1ffc=. c7fd=? adfe=я 7aff=. 8c00=. ca01=? e302=? da03=? ce04=? 0a05=ь 9506=я 2207=я ba08=я 5409=я

Processing record number 4
00000 @??.?л.@.ш.А             : 40????00??eb004000f800c0                         : 9005=@ 6706=? 4807=? 5408=. 4209=? aa0a=л ac0b=. 860c=@ b70d=. 220e=ш 630f=. f810=А

Processing record number 5
Found .С.ст..н.э.номер which looks a lot like .Системный номер 
Add the following switches to your command line to fix the decoder box:
    -f 90360f -f 5437d1 -f 7738e8 -f d539f1 -f fb3af2 -f 773be5 -f 333cec -f d53ded -f 183efb -f 333fe9 -f 5a4020 -f fe41ed -f 7542ee -f 1c43ec -f 7c44e5 -f 0245f0 

00000 .........?.....?.?К.c..я : 040000030005000501??0002000001??08??ca2e630300ff : 0406=. ba07=. 5408=. b609=. 040a=. e90b=. b60c=. a80d=. 630e=. 9c0f=? e910=. a711=. a812=. a713=. 0d14=. 3015=? 4316=. 9e17=? 1918=К 9719=. b51a=c 431b=. 981c=. 981d=я
00024 .s.эъ.OO................ : 00732efdfa024f4f01001400030000001b00000010000000 : 431e=. cb1f=s 0120=. 4321=э 9822=ъ b423=. 7b24=O 4925=O b126=. b127=. 3328=. 7c29=. 9f2a=. bb2b=. fb2c=. 9f2d=. 582e=. 1c2f=. 7530=. 4031=. 1032=. 7e33=. cc34=. 0235=.
00048 .С?ст?.н.э.номер.....3.. : 0fd1??f1f2??00ed16fd00edeeece5f00100000000330002 : 9036=. 5437=С 7738=? d539=с fb3a=т 773b=? 333c=. d53d=н 183e=. 333f=э 5a40=. fe41=н 7542=о 1c43=м 7c44=е 0245=р 9746=. 9747=. cf48=. 5849=. 414a=. 4c4b=3 864c=. a34d=.
00072 ......Phone..?....а?.?.. : 00010000000550686f6e650000??00010100e0??10??0000 : 014e=. 724f=. 7250=. 5351=. 5752=. f753=. 3d54=P e855=h e056=o e057=n e858=e 3759=. 665a=. ed5b=? 735c=. c85d=. 275e=. 275f=. 5a60=а 9b61=? 8362=. e163=? 8b64=. c065=.
00096 ..............?..¬.?ј... : 0d00010000000000001b00000000??0005ac00??bc010000 : 7b66=. eb67=. 1468=. 1469=. 286a=. 606b=. 0e6c=. d76d=. 066e=. 5f6f=. 1170=. e771=. 8372=. 7b73=. b874=? 2f75=. 7d76=. 1a77=¬ c978=. 6c79=? 8a7a=ј 617b=. 617c=. b57d=.
00120 ..4...ќ.›П?F-m?ilS...?.. : 0000340002009d009bcf??462d6d??696c53000000??0200 : 4c7e=. f67f=. 0b80=4 8e81=. 7482=. 2383=. b984=ќ 6585=. b986=› 4a87=П 9e88=? f089=F a48a=- 6e8b=m fd8c=? 368d=i 568e=l 198f=S ff90=. 6b91=. cb92=. 7f93=? 6a94=. d495=.
00144 ...'.................... : 0000102700000d0001000000000000000000000000000000 : 6a96=. b297=. d298=. 0c99=' 769a=. a59b=. e59c=. 449d=. 329e=. 329f=. e2a0=. 1ea1=. 2ba2=. 20a3=. 3da4=. f3a5=. 3aa6=. 29a7=. d2a8=. e5a9=. 07aa=. 34ab=. c1ac=. abad=.
00168 .ДЄ......../............ : 00c4aa01000000000000002f000000000302000000000000 : 2dae=. 7baf=Д 66b0=Є 08b1=. 08b2=. 79b3=. 0bb4=. 16b5=. a1b6=. a4b7=. a0b8=. 31b9=/ bfba=. d8bb=. 70bc=. e8bd=. 3ebe=. 3ebf=. 0cc0=. 3ec1=. 82c2=. 2ec3=. 21c4=. e0c5=.
00192 ...?я........?..?        : 010000??ff0000000000000000??0000??               : bcc6=. bcc7=. 05c8=. c5c9=? 64ca=я 0fcb=. a9cc=. 35cd=. 80ce=. f0cf=. f8d0=. 81d1=. c4d2=. 99d3=? 15d4=. 88d5=. c3d6=?

Processing record number 6
Found .С.ст.мн.й номь. which looks a lot like .Системный номер 
Add the following switches to your command line to fix the decoder box:
    -f 93330f -f 9534d1 -f 5e35e8 -f b136f1 -f 7c37f2 -f 5e38e5 -f b439ec -f b13aed -f cd3bfb -f b43ce9 -f f93d20 -f bb3eed -f 9f3fee -f fb40ec -f 2441e5 -f 1042f0 

00000 .....е.??.а?..??c?HG?Ж?? : 0400000300e500????00e0??0001????63??4847??c6???? : ac07=. 5408=. 8509=. b70a=. ac0b=. 9d0c=е b70d=. b00e=? 9c0f=? e910=. 9d11=а f412=? a713=. 0d14=. f415=? 4816=? ec17=c e118=? 7119=H 711a=G e11b=? 191c=Ж 6c1d=? e11e=?
00024 B??T??..............?С?с : 42????54????0017031400001b00000000000010??d1??f1 : 711f=B 3020=? b821=? 2c22=T d023=? d024=? b425=. 2426=. d527=. 3328=. 7c29=. d52a=. 8f2b=. fb2c=. 9f2d=. fe2e=. 1c2f=. 7530=. 4031=. 1032=. 9333=? 9534=С 5e35=? b136=с
00048 т?мн?й номь......4..?... : f2??eced??e920edeeecfc000100000000340002??010000 : 7c37=т 5e38=? b439=м b13a=н cd3b=? b43c=й f93d=  bb3e=н 9f3f=о fb40=м 2441=ь 1042=. 6243=. 6244=. 9045=. 8f46=. 9747=. 6148=4 5849=. 864a=. 6c4b=? ee4c=. ee4d=. 014e=.
00072 .???.. ................. : 00??????00002000000000000101000000100000000d0001 : a34f=. 5c50=? 7751=? c652=? 4553=. 1854=. 2f55=  4a56=. 5b57=. f758=. 3759=. 665a=. 735b=. f95c=. f95d=. c85e=. 275f=. 1160=. 7161=. 2562=. 4b63=. e764=. c065=. eb66=.
00096 ................CШ.....2 : 00000000000000001b0000000000000043d8010000000032 : eb67=. 8468=. 1469=. 286a=. 606b=. 0e6c=. d76d=. 066e=. 5f6f=. 1170=. e771=. 8372=. 7b73=. 4974=. 2f75=. 2c76=. bf77=C 7278=Ш ec79=. ec7a=. 7d7b=. 617c=. b57d=. 4f7e=2
00120 .......??о?. .‘?S..?.?.. : 00040002000000????ee??00200091??530001??00??0014 : f67f=. 7480=. 8e81=. 7482=. 2383=. 7484=. 6585=. d386=? 5c87=? 2c88=о b889=? 5f8a=. 348b=  478c=. 438d=‘ 9e8e=? 198f=S ff90=. cb91=. 7f92=? 5593=. 7f94=? d495=. 0796=.
00144 .......?...........?.?РЧ : 0000000d000100??0000000000000000000000??00??d0d7 : b297=. 3f98=. c299=. 299a=. a59b=. 449c=. 449d=. 919e=? 329f=. e2a0=. 1ea1=. 2ba2=. 20a3=. 3da4=. f3a5=. 3aa6=. 29a7=. d2a8=. e5a9=. beaa=? 34ab=. 17ac=? b5ad=Р 65ae=Ч
00168 ........../....О....яяяя : 010001000000000000002f03020000ce00000000ffffffff : 4faf=. 4fb0=. 08b1=. 08b2=. 79b3=. 0bb4=. 16b5=. a1b6=. a4b7=. a0b8=. 31b9=/ e8ba=. e8bb=. 70bc=. e8bd=. 47be=О 9abf=. 0cc0=. 3ec1=. 82c2=. 82c3=я 2ec4=я 21c5=я e0c6=я
00192 ..?я........             : 0000??ff0000000000000000                         : bcc7=. 05c8=. c5c9=? 64ca=я 0fcb=. a9cc=. 35cd=. 80ce=. f0cf=. f8d0=. 81d1=. c4d2=.

Processing record number 7
00000 rь?.я..УйN.??.??         : 72fc??00ff0801d3e94e03????00????                 : ec08=r 9509=ь 300a=? ac0b=. ac0c=я 0d0d=. 630e=. 190f=У af10=й 2711=N 0d12=. d113=? 9214=? 0d15=. f416=? dd17=?

Can't automatically crack the database password. Try using   crodump strucrack   and pass the database key (KOD) using --kod

If I'll use some -f flags with bin/crodump strucrack , I'll get different error:

Error
$ ./cronodump/bin/crodump strucrack -f 90360f -f 5437d1 -f 7738e8 -f d539f1 -f fb3af2 -f 773be5 -f 333cec -f d53ded -f 183efb -f 333fe9 -f 5a4020 -f fe41ed -f 7542ee -f 1c43ec -f 7c44e5 -f 0245f0 -f 93330f -f 9534d1 -f 5e35e8 -f b136f1 -f 7c37f2 -f 5e38e5 -f b439ec -f b13aed -f cd3bfb -f b43ce9 -f f93d20 -f bb3eed -f 9f3fee -f fb40ec -f 2441e5 -f 1042f0 -f 89340f -f 2235d1 -f e636e8 -f 3337f1 -f d538f2 -f e639e5 -f 243aec -f 333bed -f 393cfb -f 243de9 -f c83e20 -f fb3fed -f fe40ee -f 9f41ec -f b142e5 -f 7e43f0 SBERSPASIBO_www.cronos.li/

Processing record number 0
Found .Bb}.Nbme which looks a lot like .BankName 
Add the following switches to your command line to fix the decoder box:
    -f 836a08 -f ab6b42 -f 806c61 -f bd6d6e -f f26e6b -f e86f4e -f c47061 -f 8d716d -f 787265 

Found ..й.тж.ь.э..омер which looks a lot like .Системный номер 
Add the following switches to your command line to fix the decoder box:
    -f 36e70f -f 31e8d1 -f c4e9e8 -f bdeaf1 -f 52ebf2 -f c4ece5 -f f2edec -f bdeeed -f e4effb -f f2f0e9 -f 9df120 -f 09f2ed -f f5f3ee -f def4ec -f b3f5e5 -f 4ef6f0 

00000 ..Bank...?..К?'o©ОLd?.?? : 000442616e6b0e0000??0003ca3f276fa9ce4c64??03???? : 0a01=. 2202=. 9003=B c004=a 7b05=n e706=k 0d07=. 5408=. 8509=. e10a=? ac0b=. 630c=. 780d=К ee0e=? cd0f=' f610=o bf11=© de12=О 2713=L c914=d b015=? 3816=. fc17=? db18=?
00024 ?a.:C.?ю.nt,..Ђ<< Баиб ? : ??61053a4300??fe006e742c0000803c3c20c1e0e8e120?? : ed19=? 7d1a=a 001b=. 4a1c=: 5a1d=C 431e=. d31f=? 4320=ю b921=. ff22=n b223=t 7224=, b425=. 2426=. 2927=Ђ 8b28=< c029=< 412a=  4d2b=Б b62c=а 0d2d=и 632e=б a32f=  6730=?
00048 А??у..?б с?р?сурс? www.c : c0????f30100??e120f1??f0??f1f3f0f1??207777772e63 : 9d31=А f432=? db33=? b134=у 8a35=. 8a36=. d037=? 3838=б 3739=  bb3a=с ed3b=? fb3c=р 303d=? 1c3e=с 103f=у 7540=р 1041=с 3042=? 4b43=  d844=w 7045=w e846=w 2f47=. 3448=c
00072 rћќos.l. >>.BankI2?..Ђ?1 : 729e9d6f732e6c98203e3e0642616e6b4932??000080??31 : d849=r 314a=ћ 314b=ќ d84c=o 0c4d=s 614e=. d84f=l 3150=. e751=  ff52=> 6b53=> 6654=. b255=B a456=a e057=n 2e58=k 2b59=I 475a=2 945b=? 735c=. f95d=. 8d5e=Ђ d35f=? 6b60=1
00096 792431890.Bb}.Nbme??.ЂTb : 3739323433313839300842627d7f4e626d65????00805462 : 3f61=7 a562=9 d463=2 3f64=4 3f65=3 b266=1 3267=8 1e68=9 c269=0 836a=. ab6b=B 806c=b bd6d=} f26e=. e86f=N c470=b 8d71=m 7872=e be73=? b874=? 2f75=. 3676=Ђ 0f77=T b378=b
00120 erTpa???o 53? << ?аза за : 6572547061??????6f203533??203c3c20??e0e7e020e7e0 : 8d79=e 4d7a=r f07b=T 4d7c=p 8d7d=a 967e=? 6d7f=? 3b80=? 6f81=o 2b82=  a083=5 a484=3 9985=? 3a86=  2e87=< 2188=< e589=  6c8a=? 608b=а 7b8c=з d78d=а 2d8e=  2c8f=з 1190=а
00144 ??ЋженЊ ? Ѓе?уCса ?’?/c? : ????8ee6e5ed8c20??2081e5??f343f1e020??92??2f63?? : b891=? 5092=? b993=Ћ ec94=ж ec95=е 2396=н 1a97=Њ a098=  e199=? bf9a=  989b=Ѓ 8e9c=е 9e9d=? 6b9e=у 199f=C 6ba0=с 8ea1=а 82a2=  fca3=? 8aa4=’ 59a5=? 88a6=/ 04a7=c fca8=?
00168 po??=?j!>>.B?s??0??..•.. : 706f????3d??6a213e3e0742??73????30????0000950000 : 38a9=p 38aa=o fcab=? 48ac=? bdad== fcae=? 38af=j 81b0=! 69b1=> 6fb2=> bfb3=. 36b4=B b0b5=? 7cb6=s 59b7=? 6db8=? 26b9=0 e4ba=? 46bb=? 70bc=. e8bd=. 45be=• 9abf=. 0cc0=.
00192 ..?....?......?зЫ???XX.. : 0300??00030101??000101010714??e7db??????58580000 : 21c1=. 82c2=. c5c3=? 21c4=. 05c5=. bcc6=. 05c7=. c5c8=? 64c9=. 0fca=. a9cb=. 35cc=. 15cd=. 19ce=. becf=? a4d0=з c1d1=Ы 2ad2=? ced3=? ddd4=? 9fd5=X fed6=X 78d7=. 1dd8=.
00216 .........?......й.тж.ь?э : 1400010000001b0000??000000000f00e900f2e600fc??fd : f2d9=. b3da=. fadb=. fadc=. 52dd=. 8dde=. 56df=. dee0=. f5e1=. 3be2=? 5de3=. 12e4=. f1e5=. 4ee6=. 36e7=. 31e8=. c4e9=й bdea=. 52eb=т c4ec=ж f2ed=. bdee=ь e4ef=? f2f0=э
00240 ..омер.....?...????..... : 0000eeece5f00100000001??000101????????0300000000 : 9df1=. 09f2=. f5f3=о def4=м b3f5=е 4ef6=р 6ef7=. 6ef8=. aff9=. 56fa=. 1ffb=. c7fc=? adfd=. 7afe=. 8cff=. ca00=? e301=? da02=? ce03=? ba04=. 9505=. 2206=. ba07=. 5408=.
00264 ....яя.?яЯяя.???.??.?B?s : 00000000ffff00??ffdfffff00??????00????1a??42??73 : 8509=. 040a=. ac0b=. b60c=. b60d=я b70e=я 630f=. 9c10=? e911=я 9d12=Я a813=я a714=я 0d15=. f416=? b017=? 6718=? 3819=. 461a=? fc1b=? 8a1c=. d01d=? 5a1e=B df1f=? 5520=s
00288 .0??.....B?se002....?Bas : 0030????040000000742??736530303206000000??426173 : b921=. 5722=0 d123=? d924=? 7c25=. 2426=. b127=. 3328=. 7529=. 0e2a=B d32b=? 322c=s cb2d=e c82e=0 272f=0 2530=2 3931=. 1032=. 7e33=. cc34=. 1b35=? c936=B 3f37=a 3438=s
00312 ?00N..???.ormuls+00?..Ѓ. : ??30304e0715??????1f6f726d756c732b3030??00008100 : 9139=? 283a=0 603b=0 5f3c=N 623d=. 453e=. ea3f=? c640=? 6c41=? 7142=. 0843=o a144=r 0845=m d846=u 7947=l d848=s 4949=+ ec4a=0 7d4b=0 924c=? ee4d=. 014e=. f84f=Ѓ 7250=.
00336 ..????..Fosm?m?001...Ђ.. : 0000????????000a466f736d??6d??303031080000800000 : 5351=. 5752=. d153=? 9254=? d955=? 5c56=? 5b57=. 2558=. 3259=F 645a=o 805b=s 645c=m 995d=? 0f5e=m 995f=? ff60=0 6b61=0 5562=1 6063=. 8b64=. c065=. 4e66=Ђ eb67=. 8468=.
00360 .......Formuls002?..Ђ..? : 00000000000005466f726d756c73303032??0000800000?? : 1469=. 286a=. 606b=. 0e6c=. d76d=. 066e=. 496f=. a170=F de71=o 1272=r de73=m 2674=u f575=l 2676=s 2977=0 d278=0 3479=2 507a=? 7d7b=. 617c=. ad7d=Ђ 4c7e=. f67f=. df80=?
00384 .?....G?s??l?ю03...Ѓ.... : 00??0000000a47??73????6c??fe30330800008100000000 : 8e81=. 5082=? 2383=. 7484=. 6585=. ff86=. 8087=G ef88=? 1f89=s ef8a=? ca8b=? 6e8c=l ca8d=? 478e=ю 9a8f=0 2e90=3 c291=. cb92=. 5593=. 0d94=Ѓ d495=. 6a96=. b297=. 3f98=.
00408 ...?.N?2...?.O  ?tUд?.?? : 000000??034e??32160000??024fa0a0??7455e4??1b???? : c299=. 769a=. a59b=. 039c=? e29d=. 4d9e=N 2a9f=? c4a0=2 a4a1=. 2ba2=. 20a3=. d0a4=? 29a5=. aaa6=O 97a7=  cfa8=  5ca9=? 43aa=t 8cab=U ffac=д 94ad=? 64ae=. c3af=? ceb0=?
00432 в<?яЬђU2¬i.5S?2I?FO...Ђ2 : e23c??ffdc905532ac69083553??3249??464f0700018032 : 55b1=в 13b2=< d6b3=? 79b4=я 6bb5=Ь 8fb6=ђ b6b7=U bdb8=2 c0b9=¬ 1aba=i 2ebb=. 9dbc=5 e9bd=S cebe=? 9dbf=2 85c0=I 9cc1=? 54c2=F a8c3=O 0fc4=. e0c5=. bcc6=. 97c7=Ђ 56c8=2
00456 ?0539?Vers?on...Ђ-.      : ??30353339??56657273??6f6e020000802d16           : c7c9=? 56ca=0 8ccb=5 7acc=3 22cd=9 c3ce=? b4cf=V 02d0=e 89d1=r 90d2=s 1bd3=? 89d4=o 89d5=n 1dd6=. 78d7=. 1dd8=. 37d9=Ђ bada=- 9ddb=.

Processing record number 2
00000 @?.@                     : 40??1840                                         : 8903=@ f404=? 5e05=. 8f06=@

Processing record number 3
00000 .............а...?..c... : 04000003000600040000010100e0000d08??082e63030605 : 5404=. 9505=. 2206=. 0407=. 5408=. 6309=. 040a=. 630b=. b60c=. b70d=. 630e=. e90f=. e910=. 9d11=а a812=. 7713=. 9814=. d315=? 4316=. 9017=. 7d18=c 9819=. 001a=. 001b=.
00024 .s.э.?.................. : 00732efd00??010001000000040000001b00000000000000 : 981c=. ff1d=s 861e=. 981f=э 0020=. db21=? 1a22=. 1a23=. b424=. b425=. 2426=. b127=. fb28=. 7c29=. d52a=. bb2b=. 972c=. 9f2d=. fe2e=. 1c2f=. 7530=. 4031=. 1032=. 7e33=.
00048 .Системный номер.....3.. : 0fd1e8f1f2e5ecedfbe920edeeece5f00100000000330002 : 8934=. 2235=С e636=и 3337=с d538=т e639=е 243a=м 333b=н 393c=ы 243d=й c83e=  fb3f=н fe40=о 9f41=м b142=е 7e43=р 9044=. 9045=. 8f46=. 9747=. cf48=. 6149=3 414a=. ee4b=.
00072 .....?phone............. : 0001000000??70686f6e6500000000010100000010000000 : 864c=. 014d=. 014e=. a34f=. 7250=. 5c51=? 8252=p d853=h 2e54=o 2e55=n d856=e 5b57=. f758=. 3759=. 665a=. 735b=. f95c=. f95d=. c85e=. 275f=. 1160=. 7161=. 2562=. 4b63=.
00096 .....................ы.. : 0d000100000000000000001b000000000000000100fb0000 : e764=. c065=. eb66=. eb67=. 8468=. 1469=. 286a=. 606b=. 0e6c=. d76d=. 066e=. 5f6f=. 1170=. e771=. 8372=. 7b73=. 4974=. 2f75=. 2c76=. c977=. c978=. 4979=ы ec7a=. 7d7b=.
00120 ..4.......?b?suhdayS...? : 00003400040002000000??62??73756864617953000000?? : 617c=. b57d=. 087e=4 f67f=. 7480=. 8e81=. 7482=. 2383=. 7484=. 6585=. 9e86=? 2687=b 9688=? 1f89=s 7a8a=u 878b=h 6f8c=d 138d=a ba8e=y 198f=S ff90=. 6b91=. cb92=. 7f93=?
00144 ....?................... : 02000000??0000000d000100000000000000000000000000 : 6a94=. d495=. 6a96=. b297=. 1798=? c299=. 769a=. a59b=. e59c=. 449d=. 329e=. 329f=. e2a0=. 1ea1=. 2ba2=. 20a3=. 3da4=. f3a5=. 3aa6=. 29a7=. d2a8=. e5a9=. 07aa=. 34ab=.
00168 ...??...?..../...?mail.. : 0000003f??010001??000200032f000005??6d61696c0000 : c1ac=. abad=. 2dae=. 13af=? d0b0=? 08b1=. 08b2=. 0bb3=. dcb4=? 16b5=. a0b6=. a4b7=. d8b8=. 31b9=/ bfba=. d8bb=. 3ebc=. 30bd=? bbbe=m 77bf=a 7cc0=i 9fc1=l 82c2=. 2ec3=.
00192 ....?...'....??..??..... : 00000204??00011f2701010d01????0101????000014000f : 21c4=. e0c5=. 05c6=. 0fc7=. c5c8=? 64c9=. 0fca=. bdcb=. 87cc=' 80cd=. f0ce=. facf=. 81d0=. 99d1=? 99d2=? 15d3=. 88d4=. c3d5=? ddd6=? 78d7=. 1dd8=. f2d9=. b3da=. bddb=.
00216 .......F...??.?..?...... : 0000000500000046010000????00??0000??000000030300 : fadc=. 52dd=. 8dde=. 12df=. dee0=. f5e1=. 19e2=. 7ce3=F f1e4=. f1e5=. 4ee6=. dce7=? 6de8=? 26e9=. e4ea=? 3ceb=. 4dec=. fded=? 13ee=. 69ef=. 6ff0=. a2f1=. aaf2=. 87f3=.
00240 ...?..яя.?я..????ьяяяя   : 000000??0000ffff00??ff0000????????fcffffffff     : a2f4=. aaf5=. 36f6=. eff7=? 6ef8=. aff9=. affa=я 56fb=я 1ffc=. c7fd=? adfe=я 7aff=. 8c00=. ca01=? e302=? da03=? ce04=? 0a05=ь 9506=я 2207=я ba08=я 5409=я

Processing record number 4
00000 @??.?л.@.ш.А             : 40????00??eb004000f800c0                         : 9005=@ 6706=? 4807=? 5408=. 4209=? aa0a=л ac0b=. 860c=@ b70d=. 220e=ш 630f=. f810=А

Processing record number 5
00000 .........?.....?.?К.c..я : 040000030005000501??0002000001??08??ca2e630300ff : 0406=. ba07=. 5408=. b609=. 040a=. e90b=. b60c=. a80d=. 630e=. 9c0f=? e910=. a711=. a812=. a713=. 0d14=. 3015=? 4316=. 9e17=? 1918=К 9719=. b51a=c 431b=. 981c=. 981d=я
00024 .s.эъ.OO................ : 00732efdfa024f4f01000000030000001b00000000000000 : 431e=. cb1f=s 0120=. 4321=э 9822=ъ b423=. 7b24=O 4925=O b126=. b127=. 3328=. 7c29=. 9f2a=. bb2b=. fb2c=. 9f2d=. 582e=. 1c2f=. 7530=. 4031=. 1032=. 7e33=. cc34=. 0235=.
00048 .Системный номер.....3.. : 0fd1e8f1f2e5ecedfbe920edeeece5f00100000000330002 : 9036=. 5437=С 7738=и d539=с fb3a=т 773b=е 333c=м d53d=н 183e=ы 333f=й 5a40=  fe41=н 7542=о 1c43=м 7c44=е 0245=р 9746=. 9747=. cf48=. 5849=. 414a=. 4c4b=3 864c=. a34d=.
00072 ......Phone..?.....?.?.. : 00010000000550686f6e650000??0001010000??10??0000 : 014e=. 724f=. 7250=. 5351=. 5752=. f753=. 3d54=P e855=h e056=o e057=n e858=e 3759=. 665a=. ed5b=? 735c=. c85d=. 275e=. 275f=. 5a60=. 9b61=? 8362=. e163=? 8b64=. c065=.
00096 ..............?..¬.?ј... : 0d00010000000000001b00000000??0005ac00??bc010000 : 7b66=. eb67=. 1468=. 1469=. 286a=. 606b=. 0e6c=. d76d=. 066e=. 5f6f=. 1170=. e771=. 8372=. 7b73=. b874=? 2f75=. 7d76=. 1a77=¬ c978=. 6c79=? 8a7a=ј 617b=. 617c=. b57d=.
00120 ..4...ќ.›П?F-m?ilS...?.. : 0000340002009d009bcf??462d6d??696c53000000??0200 : 4c7e=. f67f=. 0b80=4 8e81=. 7482=. 2383=. b984=ќ 6585=. b986=› 4a87=П 9e88=? f089=F a48a=- 6e8b=m fd8c=? 368d=i 568e=l 198f=S ff90=. 6b91=. cb92=. 7f93=? 6a94=. d495=.
00144 ...'.................... : 0000102700000d0001000000000000000000000000000000 : 6a96=. b297=. d298=. 0c99=' 769a=. a59b=. e59c=. 449d=. 329e=. 329f=. e2a0=. 1ea1=. 2ba2=. 20a3=. 3da4=. f3a5=. 3aa6=. 29a7=. d2a8=. e5a9=. 07aa=. 34ab=. c1ac=. abad=.
00168 .ДЄ......../............ : 00c4aa01000000000000002f000000000302000000000000 : 2dae=. 7baf=Д 66b0=Є 08b1=. 08b2=. 79b3=. 0bb4=. 16b5=. a1b6=. a4b7=. a0b8=. 31b9=/ bfba=. d8bb=. 70bc=. e8bd=. 3ebe=. 3ebf=. 0cc0=. 3ec1=. 82c2=. 2ec3=. 21c4=. e0c5=.
00192 ...?я........?..?        : 010000??ff0000000000000000??0000??               : bcc6=. bcc7=. 05c8=. c5c9=? 64ca=я 0fcb=. a9cc=. 35cd=. 80ce=. f0cf=. f8d0=. 81d1=. c4d2=. 99d3=? 15d4=. 88d5=. c3d6=?

Processing record number 6
00000 .....е.??.а?..??c?HG?Ж?? : 0400000300e500????00e0??0001????63??4847??c6???? : ac07=. 5408=. 8509=. b70a=. ac0b=. 9d0c=е b70d=. b00e=? 9c0f=? e910=. 9d11=а f412=? a713=. 0d14=. f415=? 4816=? ec17=c e118=? 7119=H 711a=G e11b=? 191c=Ж 6c1d=? e11e=?
00024 B??T??...............Сис : 42????54????0000030000001b000000000000000fd1e8f1 : 711f=B 3020=? b821=? 2c22=T d023=? d024=? b425=. 2426=. d527=. 3328=. 7c29=. d52a=. 8f2b=. fb2c=. 9f2d=. fe2e=. 1c2f=. 7530=. 4031=. 1032=. 9333=. 9534=С 5e35=и b136=с
00048 темный номер.....4..?... : f2e5ecedfbe920edeeece5f00100000000340002??010000 : 7c37=т 5e38=е b439=м b13a=н cd3b=ы b43c=й f93d=  bb3e=н 9f3f=о fb40=м 2441=е 1042=р 6243=. 6244=. 9045=. 8f46=. 9747=. 6148=4 5849=. 864a=. 6c4b=? ee4c=. ee4d=. 014e=.
00072 .?П?.е ................. : 00??cf??00e52000000000000101000000100000000d0001 : a34f=. 5c50=? 7751=П c652=? 4553=. 1854=е 2f55=  4a56=. 5b57=. f758=. 3759=. 665a=. 735b=. f95c=. f95d=. c85e=. 275f=. 1160=. 7161=. 2562=. 4b63=. e764=. c065=. eb66=.
00096 ................CШ.....2 : 00000000000000001b0000000000000043d8010000000032 : eb67=. 8468=. 1469=. 286a=. 606b=. 0e6c=. d76d=. 066e=. 5f6f=. 1170=. e771=. 8372=. 7b73=. 4974=. 2f75=. 2c76=. bf77=C 7278=Ш ec79=. ec7a=. 7d7b=. 617c=. b57d=. 4f7e=2
00120 .......??о?. .‘?S..?.?.. : 00040002000000????ee??00200091??530001??00??0014 : f67f=. 7480=. 8e81=. 7482=. 2383=. 7484=. 6585=. d386=? 5c87=? 2c88=о b889=? 5f8a=. 348b=  478c=. 438d=‘ 9e8e=? 198f=S ff90=. cb91=. 7f92=? 5593=. 7f94=? d495=. 0796=.
00144 .......?...........?.?РЧ : 0000000d000100??0000000000000000000000??00??d0d7 : b297=. 3f98=. c299=. 299a=. a59b=. 449c=. 449d=. 919e=? 329f=. e2a0=. 1ea1=. 2ba2=. 20a3=. 3da4=. f3a5=. 3aa6=. 29a7=. d2a8=. e5a9=. beaa=? 34ab=. 17ac=? b5ad=Р 65ae=Ч
00168 ........../....О....яяяя : 010001000000000000002f03020000ce00000000ffffffff : 4faf=. 4fb0=. 08b1=. 08b2=. 79b3=. 0bb4=. 16b5=. a1b6=. a4b7=. a0b8=. 31b9=/ e8ba=. e8bb=. 70bc=. e8bd=. 47be=О 9abf=. 0cc0=. 3ec1=. 82c2=. 82c3=я 2ec4=я 21c5=я e0c6=я
00192 ..?я........             : 0000??ff0000000000000000                         : bcc7=. 05c8=. c5c9=? 64ca=я 0fcb=. a9cc=. 35cd=. 80ce=. f0cf=. f8d0=. 81d1=. c4d2=.

Processing record number 7
00000 rь?.я..УйN.??.??         : 72fc??00ff0801d3e94e03????00????                 : ec08=r 9509=ь 300a=? ac0b=. ac0c=я 0d0d=. 630e=. 190f=У af10=й 2711=N 0d12=. d113=? 9214=? 0d15=. f416=? dd17=?


Duplicates found:
[43=>1e], [e6=>1e], [00=>20], [77=>20], [8a=>36], [cd=>36]

Traceback (most recent call last):
  File "<frozen runpy>", line 198, in _run_module_as_main
  File "<frozen runpy>", line 88, in _run_code
  File "/home/qwerty/TMP/cronodump/crodump/crodump.py", line 422, in <module>
    main()
  File "/home/qwerty/TMP/cronodump/crodump/crodump.py", line 418, in main
    args.handler(kod, args)
  File "/home/qwerty/TMP/cronodump/crodump/crodump.py", line 245, in strucrack
    if args.noninteractive:
       ^^^^^^^^^^^^^^^^^^^
AttributeError: 'Namespace' object has no attribute 'noninteractive'

What is kod in 'kod-sbox' meaning, by the way?

And as I said before, It would be very nice to have some instruction with example "what to do if bin/croconvert -c --strucrack did not work"

@erdgeist
Copy link
Collaborator

The database encryption is outlined here: https://github.com/alephdata/cronodump/blob/master/docs/cronos-research.md … search for sbox in the CroStru section. Basically a password is scrambled to produce a 256 entry long s-box that translates input bytes to output bytes. If no encryption key is set, then a default sbox is used, which is defined here.

Now, if you don't know the password for the database, there's other ways to figure out the s-box (or KOD in cronos lingo): if you assume that most bytes in the CroStru file are zeros, then you can just do a statistical analysis for each s-box entry, which value gives the most amount of zeros when decoded. The code is here. However, this is not a very reliable way, even though it has worked well for most of the test databases we have encountered.

In order to improve reliability, I've added the PR above, that uses some well known strings appearing in the CroStru file to help identify wrong or missing guesses in the candidate s-box. One of the more useful ones is 'Системный номер' which is cronos lingo for the primary id of a record inside the database. It appears in CroStru files all the time. So if the strucrack encounters a string that looks like that string, it helps you to add more 'fixes' with the -f option in the next run. I.e. it forces the corresponding values in the s-box so you can continue looking for more strings that you can complete by invoking it again.

In your example, the string 'Fosm?m?001' looks a lot like the commonly found string 'Formuls001' which should give you more entries in the sbox. You can add the --text 'Formuls001' option to add it so that the next run will produce more helpful 'fixes' shortcuts.

The fact that you only have three duplicate candidate mappings means that you're probably close to cracking the s-box on your database.

@banderlog
Copy link

banderlog commented Jul 20, 2023

So, basically, I am trying to feed more text fields and more fixes in hope that eventually it will be cracked?

How I can deduct fix manually?

E.g. I have this

00000 .РР?..?.?љ.???..ht?ps??/ : 04d0d0??0005??03??9a00??????00126874??7073????2f : 1904=. 5c05=Р 3506=Р 6407=? 1908=. 9b09=. 640a=? 9b0b=. 9a0c=? b20d=љ 9b0e=. 690f=? 6910=? 9911=? 6312=. 5313=. 1814=h 4a15=t bc16=? 5217=p 3c18=s c219=? ba1a=? 251b=/
00024 c?on??.?i/.VT»є...П..¶.. : 63??6f6e????2e??692f025654bbba000007cf0000b60000 : da1c=c d71d=? d11e=o d11f=n d720=? c721=? 5522=. d723=? d124=i b125=/ f226=. c827=V 1828=T 9229=» 922a=є 202b=. c02c=. 592d=. 4f2e=П be2f=. df30=. 2331=¶ aa32=. 8633=.
00048 .›....Системный номер... : 009b0000000fd1e8f1f2e5ecedfbe920edeeece5f0010000 : 5934=. 0e35=› b536=. fd37=. e938=. e239=. b03a=С ef3b=и 163c=с be3d=т ef3e=е 203f=м 1640=н 9841=ы 2042=й 3d43=  9f44=н 8645=о aa46=м c047=е e948=р 2549=. 254a=. 2b4b=.
00072 ›.4­..??...8?????....... : 9b0034ad0200????00000638??????????00000000010100 : 234c=› f04d=. 114e=4 1e4f=­ 9450=. 3251=. c252=? c253=? b154=. a555=. 2456=. 3457=8 7958=? 7359=? 965a=? 735b=? f65c=? fe5d=. 4d5e=. e55f=. a260=. fb61=. 3d62=. 3d63=.
00096 ...?.........?.?.?...... : 000010??00000d000100000000??00??00??000000000500 : a664=. 8e65=. 0966=. f967=? 0868=. b769=. e36a=. 976b=. 466c=. 466d=. bd6e=. bf6f=. 9570=. e071=? db72=. a473=? 8574=. 7275=? 0976=. e377=. 6a78=. 7479=. da7a=. e17b=.
00120 ........;...?.?..?hone_? : 00010000000000003b000200??00??000c??686f6e655f?? : 187c=. 267d=. 267e=. da7f=. 7c80=. 6d81=. 1182=. f483=. 2a84=; 0f85=. 1486=. 5287=. bc88=? 4a89=. bc8a=? 3c8b=. 428c=. 758d=? 448e=h 6e8f=o 6e90=n 4491=e 7f92=_ 4893=?
00144 umb.?..........?...?.... : 756d6200??00000000010200000010??00000d??01000000 : de94=u 4595=m 3096=b 6597=. 6498=? 8c99=. 279a=. 079b=. 8d9c=. 819d=. 2d9e=. 1a9f=. 2da0=. 1da1=. d6a2=. e6a3=? afa4=. 39a5=. e8a6=. dda7=? f8a8=. f8a9=. c6aa=. c1ab=.
00168 .........?...?Ї....?;.?? : 000000000000000000??050001??af02010101??3b01???? : 04ac=. b4ad=. 4bae=. c5af=. cab0=. 3eb1=. d6b2=. e8b3=. acb4=. 4cb5=? 0ab6=. 0db7=. 50b8=. fcb9=? b7ba=Ї 0cbb=. 0cbc=. 31bd=. 2abe=. f5bf=? 01c0=; 13c1=. 73c2=? 5ac3=?
00192 .?а.??..fi.??_ьa.eц..... : 04??e001????0619666900????5ffc610c65f60000000103 : 4ec4=. e7c5=? 8bc6=а 4ec7=. 7bc8=? fac9=? 0eca=. 92cb=. aacc=f b5cd=i 84ce=. f7cf=? 60d0=? dfd1=_ 84d2=ь 59d3=a 51d4=. d0d5=e 66d6=ц 76d7=. 06d8=. cdd9=. d3da=. f1db=.
00216 ....'...?????.?......... : 000000102700000d??????????00??000000000000000005 : 68dc=. 05dd=. f1de=. a7df=. 7ae0=' bbe1=. b6e2=. 3ae3=. c3e4=? d9e5=? d9e6=? 78e7=? b3e8=? 15e9=. 6cea=? 6feb=. 2cec=. 87ed=. e4ee=. a7ef=. 3af0=. 7ff1=. 61f2=. 30f3=.
00240 ..’?я.э.›:.?.Ф..Р?vk_?as : 000092??ff00fd009b3a00??00d40000d0??766b5f??6173 : ecf4=. 1cf5=. 14f6=’ ebf7=? cbf8=я 21f9=. cbfa=э 01fb=. 65fc=› fdfd=: 6efe=. 48ff=? 6b00=. 5c01=Ф 4502=. 8f03=. 0b04=Р 9905=? 1806=v db07=k 2208=_ 7209=? 970a=a 260b=s
00264 t?name.??.??Р.Р.?.?..... : 74??6e616d6500????00????d000d010??00??0d00010000 : 7c0c=t 2f0d=? 180e=n 950f=a c810=m 0911=e 6312=. b913=? 2914=? 5415=. 9016=? 7d17=? 5818=Р 5d19=. 371a=Р 201b=. 771c=? 9d1d=. 621e=? c01f=. a920=. cc21=. cc22=. ef23=.
00288 ...?.›є...П...YР.›...6.? : 000000??009bba000000cf05000059d0039b0000003600?? : 3b24=. 5325=. 3f26=. eb27=? f228=. 3329=› 922a=є 202b=. c02c=. 162d=. 4f2e=П 592f=. df30=. 9f31=. 3c32=Y 8f33=Р fd34=. 0e35=› b536=. fd37=. e938=. bf39=6 d03a=. 933b=?
00312 .?”?Ћ?wk_emai?..›.®..... : 00??94??8e??776b5f656d6169??00009b00ae0500000010 : 983c=. f73d=? 1f3e=” fa3f=? 8440=Ћ ba41=? 5042=w 4b43=k ab44=_ c645=e e846=m 7e47=a 3e48=i 4c49=? 254a=. 2b4b=. 234c=› f04d=. 1e4e=® b14f=. 5550=. 3251=. 9452=. 3d53=.
00336 '.?.Ћ..О..........??..Й? : 2700??0d8e1a19ce00000000000000000000????0000c9?? : e154=' a555=. 5656=? a657=. 4158=Ћ 1759=. 175a=. 105b=О 245c=. fe5d=. 4d5e=. e55f=. a260=. 0361=. fb62=. 3d63=. a664=. 8e65=. ea66=? 2f67=? 0868=. b769=. 866a=Й 836b=?
00360 ?....9.?......v?_pas?wor : ??000000003900??00060000000b76??5f706173??776f72 : a46c=? 466d=. bd6e=. bf6f=. 9570=. c671=9 db72=. 7273=? 8574=. e175=. 0976=. e377=. 6a78=. ed79=. 3a7a=v d97b=? d37c=_ 877d=p 007e=a 617f=s 9180=? 3081=w 7f82=o 1c83=r
00384 ?....??.?...??.?ба??.... : ??00000000????00??001000????0d??e1e0????00000000 : b384=? 0f85=. 5f86=. 5287=. 1488=. bc89=? cf8a=? 3c8b=. 808c=? d18d=. 818e=. 348f=. cf90=? fc91=? 1a92=. 5b93=? 4794=б 4795=а dc96=? f397=? 4298=. 8c99=. 279a=. 079b=.
00408 ......?..MЉ............. : 000000000000??00004d8a0c000000000000000000000000 : 8d9c=. 679d=. 819e=. 1a9f=. 2da0=. 1da1=. dda2=? aba3=. afa4=. 61a5=M dfa6=Љ e8a7=. 7ea8=. f8a9=. c6aa=. c1ab=. 04ac=. b4ad=. 4bae=. c5af=. cab0=. 3eb1=. d6b2=. e8b3=.
00432 ..Щ..?......??..???Я.?я? : 0306d90001??000001000000????0000??????df00??ff?? : 0db4=. 0ab5=. 34b6=Щ 0db7=. 50b8=. 96b9=? 2eba=. 0abb=. 0cbc=. 0cbd=. 31be=. 2abf=. f5c0=? f6c1=? 13c2=. 38c3=. 5ac4=? 73c5=? e7c6=? 8bc7=Я 4ec8=. a0c9=? 57ca=я e6cb=?
00456 ?                        : ??                                               : c9cc=?

I know that 3a7a=v d97b=? d37c=_ 877d=p 007e=a 617f=s 9180=? 3081=w 7f82=o 1c83=r stands for vk_passwor, doing --text 'vk_password' did not help. How I can map k to d97b=? ?

UPD: answering my own question: by -f d97b=k. So I can guess other letters in same way

@banderlog
Copy link

If I may suggest, auto fixes should also provide human friendly format "-f 4_hex=1_letter", because '-f 6_hex' is hard to debug for meatbags.

Also, duplicates list stands for 4_hex digits which are mapped to few 1_letter?
If so, how I can map them manually or at least find them?

Please, consider this example

Processing record number 3
00000 .РР?..?.?љ.???..ht?ps??/ : 04d0d0??0005??03??9a00??????00126874??7073????2f : 1904=. 5c05=Р 3506=Р 6407=? 1908=. 9b09=. 640a=? 9b0b=. 9a0c=? b20d=љ 9b0e=. 690f=? 6910=? 9911=? 6312=. 5313=. 1814=h 4a15=t bc16=? 5217=p 3c18=s c219=? ba1a=? 251b=/
00024 c?on??.?i/.VT»є...П..¶.. : 63??6f6e????2e??692f025654bbba000007cf0000b60000 : da1c=c d71d=? d11e=o d11f=n d720=? c721=? 5522=. d723=? d124=i b125=/ f226=. c827=V 1828=T 9229=» 922a=є 202b=. c02c=. 592d=. 4f2e=П be2f=. df30=. 2331=¶ aa32=. 8633=.
00048 .›....Системный номер... : 009b0000000fd1e8f1f2e5ecedfbe920edeeece5f0010000 : 5934=. 0e35=› b536=. fd37=. e938=. e239=. b03a=С ef3b=и 163c=с be3d=т ef3e=е 203f=м 1640=н 9841=ы 2042=й 3d43=  9f44=н 8645=о aa46=м c047=е e948=р 2549=. 254a=. 2b4b=.
00072 ›.4­..??...8?????....... : 9b0034ad0200????00000638??????????00000000010100 : 234c=› f04d=. 114e=4 1e4f=­ 9450=. 3251=. c252=? c253=? b154=. a555=. 2456=. 3457=8 7958=? 7359=? 965a=? 735b=? f65c=? fe5d=. 4d5e=. e55f=. a260=. fb61=. 3d62=. 3d63=.
00096 ...?.........?.?.?...... : 000010??00000d000100000000??00??00??000000000500 : a664=. 8e65=. 0966=. f967=? 0868=. b769=. e36a=. 976b=. 466c=. 466d=. bd6e=. bf6f=. 9570=. e071=? db72=. a473=? 8574=. 7275=? 0976=. e377=. 6a78=. 7479=. da7a=. e17b=.
00120 ........;...?.?..?hone_? : 00010000000000003b000200??00??000c??686f6e655f?? : 187c=. 267d=. 267e=. da7f=. 7c80=. 6d81=. 1182=. f483=. 2a84=; 0f85=. 1486=. 5287=. bc88=? 4a89=. bc8a=? 3c8b=. 428c=. 758d=? 448e=h 6e8f=o 6e90=n 4491=e 7f92=_ 4893=?
00144 umb.?..........?...?.... : 756d6200??00000000010200000010??00000d??01000000 : de94=u 4595=m 3096=b 6597=. 6498=? 8c99=. 279a=. 079b=. 8d9c=. 819d=. 2d9e=. 1a9f=. 2da0=. 1da1=. d6a2=. e6a3=? afa4=. 39a5=. e8a6=. dda7=? f8a8=. f8a9=. c6aa=. c1ab=.
00168 .........?...?Ї....?;.?? : 000000000000000000??050001??af02010101??3b01???? : 04ac=. b4ad=. 4bae=. c5af=. cab0=. 3eb1=. d6b2=. e8b3=. acb4=. 4cb5=? 0ab6=. 0db7=. 50b8=. fcb9=? b7ba=Ї 0cbb=. 0cbc=. 31bd=. 2abe=. f5bf=? 01c0=; 13c1=. 73c2=? 5ac3=?
00192 .?а.??..fi.??_ьa.eц..... : 04??e001????0619666900????5ffc610c65f60000000103 : 4ec4=. e7c5=? 8bc6=а 4ec7=. 7bc8=? fac9=? 0eca=. 92cb=. aacc=f b5cd=i 84ce=. f7cf=? 60d0=? dfd1=_ 84d2=ь 59d3=a 51d4=. d0d5=e 66d6=ц 76d7=. 06d8=. cdd9=. d3da=. f1db=.
00216 ....'...?..?..?......... : 000000102700000d??0100??0000??000000000000000005 : 68dc=. 05dd=. f1de=. a7df=. 7ae0=' bbe1=. b6e2=. 3ae3=. c3e4=? d9e5=. d9e6=. 78e7=? b3e8=. 15e9=. 6cea=? 6feb=. 2cec=. 87ed=. e4ee=. a7ef=. 3af0=. 7ff1=. 61f2=. 30f3=.
00240 ..’?я.э.›:.?.Ф..Р?vk_?as : 000092??ff00fd009b3a00??00d40000d0??766b5f??6173 : ecf4=. 1cf5=. 14f6=’ ebf7=? cbf8=я 21f9=. cbfa=э 01fb=. 65fc=› fdfd=: 6efe=. 48ff=? 6b00=. 5c01=Ф 4502=. 8f03=. 0b04=Р 9905=? 1806=v db07=k 2208=_ 7209=? 970a=a 260b=s
00264 t?name.??.??Р.Р.?.?..... : 74??6e616d6500????00????d000d010??00??0d00010000 : 7c0c=t 2f0d=? 180e=n 950f=a c810=m 0911=e 6312=. b913=? 2914=? 5415=. 9016=? 7d17=? 5818=Р 5d19=. 371a=Р 201b=. 771c=? 9d1d=. 621e=? c01f=. a920=. cc21=. cc22=. ef23=.
00288 ...?.›є...П...YР.›...6.? : 000000??009bba000000cf05000059d0039b0000003600?? : 3b24=. 5325=. 3f26=. eb27=? f228=. 3329=› 922a=є 202b=. c02c=. 162d=. 4f2e=П 592f=. df30=. 9f31=. 3c32=Y 8f33=Р fd34=. 0e35=› b536=. fd37=. e938=. bf39=6 d03a=. 933b=?
00312 .?”?Ћ?wk_emai?..›.®..... : 00??94??8e??776b5f656d6169??00009b00ae0500000010 : 983c=. f73d=? 1f3e=” fa3f=? 8440=Ћ ba41=? 5042=w 4b43=k ab44=_ c645=e e846=m 7e47=a 3e48=i 4c49=? 254a=. 2b4b=. 234c=› f04d=. 1e4e=® b14f=. 5550=. 3251=. 9452=. 3d53=.
00336 '.?.Ћ..О..........??..Й? : 2700??0d8e1a19ce00000000000000000000????0000c9?? : e154=' a555=. 5656=? a657=. 4158=Ћ 1759=. 175a=. 105b=О 245c=. fe5d=. 4d5e=. e55f=. a260=. 0361=. fb62=. 3d63=. a664=. 8e65=. ea66=? 2f67=? 0868=. b769=. 866a=Й 836b=?
00360 ?....9.?......vk_passwor : ??000000003900??00060000000b766b5f70617373776f72 : a46c=? 466d=. bd6e=. bf6f=. 9570=. c671=9 db72=. 7273=? 8574=. e175=. 0976=. e377=. 6a78=. ed79=. 3a7a=v d97b=k d37c=_ 877d=p 007e=a 617f=s 9180=s 3081=w 7f82=o 1c83=r
00384 d....??.?...??.?ба??.... : 6400000000????00??001000????0d??e1e0????00000000 : b384=d 0f85=. 5f86=. 5287=. 1488=. bc89=? cf8a=? 3c8b=. 808c=? d18d=. 818e=. 348f=. cf90=? fc91=? 1a92=. 5b93=? 4794=б 4795=а dc96=? f397=? 4298=. 8c99=. 279a=. 079b=.
00408 ......?..MЉ............. : 000000000000??00004d8a0c000000000000000000000000 : 8d9c=. 679d=. 819e=. 1a9f=. 2da0=. 1da1=. dda2=? aba3=. afa4=. 61a5=M dfa6=Љ e8a7=. 7ea8=. f8a9=. c6aa=. c1ab=. 04ac=. b4ad=. 4bae=. c5af=. cab0=. 3eb1=. d6b2=. e8b3=.
00432 ..Щ..?......??..???Я.?я? : 0306d90001??000001000000????0000??????df00??ff?? : 0db4=. 0ab5=. 34b6=Щ 0db7=. 50b8=. 96b9=? 2eba=. 0abb=. 0cbc=. 0cbd=. 31be=. 2abf=. f5c0=? f6c1=? 13c2=. 38c3=. 5ac4=? 73c5=? e7c6=? 8bc7=Я 4ec8=. a0c9=? 57ca=я e6cb=?
00456 ?                        : ??                                               : c9cc=?


Duplicates found:
[41=>e6], [d9=>e6], [58=>e8], [b3=>e8]

How should I read/understand duplicates info and how I could solve it manually by providing -f?

@banderlog
Copy link

Why this output, after I provided fixes in 4_hex=1_letter format?

Processing record number 3
Found .Системный номер which looks a lot like .Системный номер
Add the following switches to your command line to fix the decoder box:
    -f e2390f -f b03ad1 -f ef3be8 -f 163cf1 -f be3df2 -f ef3ee5 -f 203fec -f 1640ed -f 9841fb -f 2042e9 -f 3d4320 -f 9f44ed -f 8645ee -f aa46ec -f c047e5 -f e948f0

@erdgeist
Copy link
Collaborator

And as I said before, It would be very nice to have some instruction with example "what to do if bin/croconvert -c --strucrack did not work"

I managed to narrow down the KOD to just six missing mapping with

crodump strucrack SBERSPASIBO_www.cronos.li/ -w 20 -f 36e70f -f 31e8d1 -f c4e9e8 -f bdeaf1 -f 52ebf2 -f c4ece5 -f f2edec -f bdeeed -f e4effb -f f2f0e9 -f 9df120 -f 09f2ed -f f5f3ee -f def4ec -f b3f5e5 -f 4ef6f0 -f 93330f -f 9534d1 -f 5e35e8 -f b136f1 -f 7c37f2 -f 5e38e5 -f b439ec -f b13aed -f cd3bfb -f b43ce9 -f f93d20 -f bb3eed -f 9f3fee -f fb40ec -f 2441e5 -f 1042f0 -f 90360f -f 5437d1 -f 7738e8 -f d539f1 -f fb3af2 -f 773be5 -f 333cec -f d53ded -f 183efb -f 333fe9 -f 5a4020 -f fe41ed -f 7542ee -f 1c43ec -f 7c44e5 -f 0245f0 -f 89340f -f 2235d1 -f e636e8 -f 3337f1 -f d538f2 -f e639e5 -f 243aec -f 333bed -f 393cfb -f 243de9 -f c83e20 -f fb3fed -f fe40ee -f 9f41ec -f b142e5 -f 7e43f0 -f 836a08 -f ab6b42 -f 806c61 -f bd6d6e -f f26e6b -f e86f4e -f c47061 -f 8d716d -f 787265 -f cebe=E -f 9cc1=N -f 1bd3=i -f 995d=u -f 0f5e=l -f 995f=s -f 7142=F -f ef88=o -f 1f89=r -f ef8a=m -f 478e=0 -f 4949=0 -f 6c410a -f c3ce07 -f df1f=a -f b921=e -f d123=0 -f d924=1 -f d01d07 -f 9139=e -f 5f3c=3 -f 2a9f=S -f d32b=a -f 967e=s -f 6d7f=i -f 3b80=b -f 7a8a=t -f b0b5=a -f 59b7=e -f 5c5105 -f fd8c=a -f 507a08 -f 924c08 -f b87400 -f bcc600 -f ed19=B -f 001b=n -f 4a1c=k -f 431e=o -f d31f=m -f 4320=m -f db180b -f 453e00 -f ea3f00 -f c64000 -f 9814=w -f 9819=r -f 981c=o -f 9e17=w -f 1918=w -f 30150d -f e118=r -f e11b=o -f e11e=l -f 6730e7 -f f432e3 -f fca3=w -f 8aa4=w -f 88a6=. -f 38a9=o -f 38aa=n -f 48ac=s -f 1a97e0 -f 81b020 -f 0d2de7 -f 632ee0 -f becfe0 -f 461aff -f c1d1e0 -f 945b0b -f f84f80 -f 039c00 -f c7c9=3 -f ddd402 -f 9b6100 -f 17ac00 -f 7f9202 -f 138d=a -f 15cd06 -f ca8d=s -f ca8b=u -f f0cfff -f 8c00ff -f 35cdff -f a9ccff -f c5c9ff -f 05c8ff -f e302ff -f 0a0103 -f da03ff -f dce700

will further investigate how to more easily crack the KOD using the CroBank

@erdgeist
Copy link
Collaborator

If I may suggest, auto fixes should also provide human friendly format "-f 4_hex=1_letter", because '-f 6_hex' is hard to debug for meatbags.

Also, duplicates list stands for 4_hex digits which are mapped to few 1_letter? If so, how I can map them manually or at least find them?

Please, consider this example

Processing record number 3
00000 .РР?..?.?љ.???..ht?ps??/ : 04d0d0??0005??03??9a00??????00126874??7073????2f : 1904=. 5c05=Р 3506=Р 6407=? 1908=. 9b09=. 640a=? 9b0b=. 9a0c=? b20d=љ 9b0e=. 690f=? 6910=? 9911=? 6312=. 5313=. 1814=h 4a15=t bc16=? 5217=p 3c18=s c219=? ba1a=? 251b=/
00024 c?on??.?i/.VT»є...П..¶.. : 63??6f6e????2e??692f025654bbba000007cf0000b60000 : da1c=c d71d=? d11e=o d11f=n d720=? c721=? 5522=. d723=? d124=i b125=/ f226=. c827=V 1828=T 9229=» 922a=є 202b=. c02c=. 592d=. 4f2e=П be2f=. df30=. 2331=¶ aa32=. 8633=.
00048 .›....Системный номер... : 009b0000000fd1e8f1f2e5ecedfbe920edeeece5f0010000 : 5934=. 0e35=› b536=. fd37=. e938=. e239=. b03a=С ef3b=и 163c=с be3d=т ef3e=е 203f=м 1640=н 9841=ы 2042=й 3d43=  9f44=н 8645=о aa46=м c047=е e948=р 2549=. 254a=. 2b4b=.
00072 ›.4­..??...8?????....... : 9b0034ad0200????00000638??????????00000000010100 : 234c=› f04d=. 114e=4 1e4f=­ 9450=. 3251=. c252=? c253=? b154=. a555=. 2456=. 3457=8 7958=? 7359=? 965a=? 735b=? f65c=? fe5d=. 4d5e=. e55f=. a260=. fb61=. 3d62=. 3d63=.
00096 ...?.........?.?.?...... : 000010??00000d000100000000??00??00??000000000500 : a664=. 8e65=. 0966=. f967=? 0868=. b769=. e36a=. 976b=. 466c=. 466d=. bd6e=. bf6f=. 9570=. e071=? db72=. a473=? 8574=. 7275=? 0976=. e377=. 6a78=. 7479=. da7a=. e17b=.
00120 ........;...?.?..?hone_? : 00010000000000003b000200??00??000c??686f6e655f?? : 187c=. 267d=. 267e=. da7f=. 7c80=. 6d81=. 1182=. f483=. 2a84=; 0f85=. 1486=. 5287=. bc88=? 4a89=. bc8a=? 3c8b=. 428c=. 758d=? 448e=h 6e8f=o 6e90=n 4491=e 7f92=_ 4893=?
00144 umb.?..........?...?.... : 756d6200??00000000010200000010??00000d??01000000 : de94=u 4595=m 3096=b 6597=. 6498=? 8c99=. 279a=. 079b=. 8d9c=. 819d=. 2d9e=. 1a9f=. 2da0=. 1da1=. d6a2=. e6a3=? afa4=. 39a5=. e8a6=. dda7=? f8a8=. f8a9=. c6aa=. c1ab=.
00168 .........?...?Ї....?;.?? : 000000000000000000??050001??af02010101??3b01???? : 04ac=. b4ad=. 4bae=. c5af=. cab0=. 3eb1=. d6b2=. e8b3=. acb4=. 4cb5=? 0ab6=. 0db7=. 50b8=. fcb9=? b7ba=Ї 0cbb=. 0cbc=. 31bd=. 2abe=. f5bf=? 01c0=; 13c1=. 73c2=? 5ac3=?
00192 .?а.??..fi.??_ьa.eц..... : 04??e001????0619666900????5ffc610c65f60000000103 : 4ec4=. e7c5=? 8bc6=а 4ec7=. 7bc8=? fac9=? 0eca=. 92cb=. aacc=f b5cd=i 84ce=. f7cf=? 60d0=? dfd1=_ 84d2=ь 59d3=a 51d4=. d0d5=e 66d6=ц 76d7=. 06d8=. cdd9=. d3da=. f1db=.
00216 ....'...?..?..?......... : 000000102700000d??0100??0000??000000000000000005 : 68dc=. 05dd=. f1de=. a7df=. 7ae0=' bbe1=. b6e2=. 3ae3=. c3e4=? d9e5=. d9e6=. 78e7=? b3e8=. 15e9=. 6cea=? 6feb=. 2cec=. 87ed=. e4ee=. a7ef=. 3af0=. 7ff1=. 61f2=. 30f3=.
00240 ..’?я.э.›:.?.Ф..Р?vk_?as : 000092??ff00fd009b3a00??00d40000d0??766b5f??6173 : ecf4=. 1cf5=. 14f6=’ ebf7=? cbf8=я 21f9=. cbfa=э 01fb=. 65fc=› fdfd=: 6efe=. 48ff=? 6b00=. 5c01=Ф 4502=. 8f03=. 0b04=Р 9905=? 1806=v db07=k 2208=_ 7209=? 970a=a 260b=s
00264 t?name.??.??Р.Р.?.?..... : 74??6e616d6500????00????d000d010??00??0d00010000 : 7c0c=t 2f0d=? 180e=n 950f=a c810=m 0911=e 6312=. b913=? 2914=? 5415=. 9016=? 7d17=? 5818=Р 5d19=. 371a=Р 201b=. 771c=? 9d1d=. 621e=? c01f=. a920=. cc21=. cc22=. ef23=.
00288 ...?.›є...П...YР.›...6.? : 000000??009bba000000cf05000059d0039b0000003600?? : 3b24=. 5325=. 3f26=. eb27=? f228=. 3329=› 922a=є 202b=. c02c=. 162d=. 4f2e=П 592f=. df30=. 9f31=. 3c32=Y 8f33=Р fd34=. 0e35=› b536=. fd37=. e938=. bf39=6 d03a=. 933b=?
00312 .?”?Ћ?wk_emai?..›.®..... : 00??94??8e??776b5f656d6169??00009b00ae0500000010 : 983c=. f73d=? 1f3e=” fa3f=? 8440=Ћ ba41=? 5042=w 4b43=k ab44=_ c645=e e846=m 7e47=a 3e48=i 4c49=? 254a=. 2b4b=. 234c=› f04d=. 1e4e=® b14f=. 5550=. 3251=. 9452=. 3d53=.
00336 '.?.Ћ..О..........??..Й? : 2700??0d8e1a19ce00000000000000000000????0000c9?? : e154=' a555=. 5656=? a657=. 4158=Ћ 1759=. 175a=. 105b=О 245c=. fe5d=. 4d5e=. e55f=. a260=. 0361=. fb62=. 3d63=. a664=. 8e65=. ea66=? 2f67=? 0868=. b769=. 866a=Й 836b=?
00360 ?....9.?......vk_passwor : ??000000003900??00060000000b766b5f70617373776f72 : a46c=? 466d=. bd6e=. bf6f=. 9570=. c671=9 db72=. 7273=? 8574=. e175=. 0976=. e377=. 6a78=. ed79=. 3a7a=v d97b=k d37c=_ 877d=p 007e=a 617f=s 9180=s 3081=w 7f82=o 1c83=r
00384 d....??.?...??.?ба??.... : 6400000000????00??001000????0d??e1e0????00000000 : b384=d 0f85=. 5f86=. 5287=. 1488=. bc89=? cf8a=? 3c8b=. 808c=? d18d=. 818e=. 348f=. cf90=? fc91=? 1a92=. 5b93=? 4794=б 4795=а dc96=? f397=? 4298=. 8c99=. 279a=. 079b=.
00408 ......?..MЉ............. : 000000000000??00004d8a0c000000000000000000000000 : 8d9c=. 679d=. 819e=. 1a9f=. 2da0=. 1da1=. dda2=? aba3=. afa4=. 61a5=M dfa6=Љ e8a7=. 7ea8=. f8a9=. c6aa=. c1ab=. 04ac=. b4ad=. 4bae=. c5af=. cab0=. 3eb1=. d6b2=. e8b3=.
00432 ..Щ..?......??..???Я.?я? : 0306d90001??000001000000????0000??????df00??ff?? : 0db4=. 0ab5=. 34b6=Щ 0db7=. 50b8=. 96b9=? 2eba=. 0abb=. 0cbc=. 0cbd=. 31be=. 2abf=. f5c0=? f6c1=? 13c2=. 38c3=. 5ac4=? 73c5=? e7c6=? 8bc7=Я 4ec8=. a0c9=? 57ca=я e6cb=?
00456 ?                        : ??                                               : c9cc=?


Duplicates found:
[41=>e6], [d9=>e6], [58=>e8], [b3=>e8]

How should I read/understand duplicates info and how I could solve it manually by providing -f?

I usually just copy the 2abf=. and map it to -f 2abf=X or if it's a byte, to -f 2abf00 to continue. However, in order to crack the database above, I needed to apply some in-depth knowledge of the database format. I am currently working on formalizing that experience in code to make the cracker better.

@erdgeist
Copy link
Collaborator

Also do you have a direct link to the database? I can't seem to create an account.

https://t.me/dbsdbsdbsdb/112 Password: "www.cronos.li"

Did you try to decode it with #13?

Yep, it throws error

Default:

$ ./cronodump/bin/croconvert -c SBERSPASIBO_www.cronos.li/
WARN: expected dbinfo to start with 0x03
ERROR decoding db definition: 'charmap' codec can't decode byte 0x98 in position 78: character maps to <undefined>
This could possibly mean that you need to try with the --strucrack option
WARN: expected dbinfo to start with 0x03
ERROR decoding db definition: 'charmap' codec can't decode byte 0x98 in position 78: character maps to <undefined>
This could possibly mean that you need to try with the --strucrack option

With --strucrack:

$ ./cronodump/bin/croconvert -c --strucrack  SBERSPASIBO_www.cronos.li/
Traceback (most recent call last):
  File "<frozen runpy>", line 198, in _run_module_as_main
  File "<frozen runpy>", line 88, in _run_code
  File "/home/qwerty/TMP/cronodump/crodump/croconvert.py", line 139, in <module>
    main()
  File "/home/qwerty/TMP/cronodump/crodump/croconvert.py", line 113, in main
    cracked = strucrack(None, cargs)
              ^^^^^^^^^^^^^^^^^^^^^^
  File "/home/qwerty/TMP/cronodump/crodump/crodump.py", line 161, in strucrack
    for fix in args.fix or []:
               ^^^^^^^^
AttributeError: 'Cls' object has no attribute 'fix'

Check for branch:

$ git branch
* erdgeist-strucrack-ambigous-kods
  master

Turns out that since these are all the bytes we find in the CroStru, the incomplete kod is enough to decode the whole database:

bin/croconvert --kod 894e359c0ac76eaab2df04b4c0146cca3270e4ee69d3b5ac398f773c2fd8a1fba3c406832662e95f6aa7f2a276aec37522b99f28abccf6591837a6e2eba4c198314a008d9d3e19be1f7987637eece6b08200dd510893fa52491c605756e31d6f6b7c440ec9855a1700ef96914be8f8f0bc88505c84309a20d7b3fe73297b3394cdd0c27268094cf3d4431b64ffde8146459e54426605f1478bd2bf610f118e2db8b6f44fb79b001312cbf5ad0bfd00f9162797da257d0c0d7486072bc6dbafba65b199d5d1c840fc5e780092343603482453a88c952a006dbb550223e7d6e080c58aa001eaa91e71bd103f677a5b4df7cee5d9a515e17f58cf5ddc2c1aed2e90 test_data/SBERSPASIBO_www.cronos.li does the job

@erdgeist
Copy link
Collaborator

Why this output, after I provided fixes in 4_hex=1_letter format?

Processing record number 3
Found .Системный номер which looks a lot like .Системный номер
Add the following switches to your command line to fix the decoder box:
    -f e2390f -f b03ad1 -f ef3be8 -f 163cf1 -f be3df2 -f ef3ee5 -f 203fec -f 1640ed -f 9841fb -f 2042e9 -f 3d4320 -f 9f44ed -f 8645ee -f aa46ec -f c047e5 -f e948f0

Because there's a length byte in front of the string: So there's a 0x0f byte in front which would be automatically added with the decoder fix lines.

@banderlog
Copy link

banderlog commented Jul 26, 2023

I managed to narrow down the KOD to just six missing mapping with crodump strucrack SBERSPASIBO_www.cronos.li/ -w 20 ...

How have you defined " just six missing mapping"?
All I see is Processing record number ... and hex tables and usual error AttributeError: 'Namespace' object has no attribute 'noninteractive'

@banderlog
Copy link

Turns out that since these are all the bytes we find in the CroStru, the incomplete kod is enough to decode the whole database:

bin/croconvert --kod 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 test_data/SBERSPASIBO_www.cronos.li does the job

From where you get that incomplete KOD?

@banderlog
Copy link

banderlog commented Jul 26, 2023

Why this output, after I provided fixes in 4_hex=1_letter format?

Processing record number 3
Found .Системный номер which looks a lot like .Системный номер
Add the following switches to your command line to fix the decoder box:
    -f e2390f -f b03ad1 -f ef3be8 -f 163cf1 -f be3df2 -f ef3ee5 -f 203fec -f 1640ed -f 9841fb -f 2042e9 -f 3d4320 -f 9f44ed -f 8645ee -f aa46ec -f c047e5 -f e948f0

Because there's a length byte in front of the string: So there's a 0x0f byte in front which would be automatically added with the decoder fix lines.

So it could be safely ignored or not?

@erdgeist erdgeist mentioned this issue Aug 2, 2023
@erdgeist
Copy link
Collaborator

erdgeist commented Aug 4, 2023

From where you get that incomplete KOD?

Just from looking at the structure in the database description files. There also was a rich supply of known plaintext in that header like << База загружена с ресурса www.cronos.li >> in the file which helped tremendously figuring out the mapping. I just kept adding -f parameters until nearly all bytes in the KOD were set.

I understand that this approach is not for everyone as it requires some in-depth understanding of how cronos databases are written to disk. But as I wrote earlier, I am working on making it easier for everyone to do that.

@erdgeist
Copy link
Collaborator

erdgeist commented Aug 4, 2023

Why this output, after I provided fixes in 4_hex=1_letter format?

Processing record number 3
Found .Системный номер which looks a lot like .Системный номер
Add the following switches to your command line to fix the decoder box:
    -f e2390f -f b03ad1 -f ef3be8 -f 163cf1 -f be3df2 -f ef3ee5 -f 203fec -f 1640ed -f 9841fb -f 2042e9 -f 3d4320 -f 9f44ed -f 8645ee -f aa46ec -f c047e5 -f e948f0

Because there's a length byte in front of the string: So there's a 0x0f byte in front which would be automatically added with the decoder fix lines.

So it could be safely ignored or not?

Well, it gives you an extra byte of known plaintext directly translating into a known entry in the KOD table, which is great if you want to decrypt the database

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants