Extprotect

[JustANewbie]

Is is possible to restore the data stored in a file named Backup without password?

[Dekar]

It probably would help if you attach the file.

[JustANewbie]

ExtProtect is a tool used to protect warcraft 3 map, I thought you should have it, anyway, there you go, including the source. The tool will create a backup file when you protect the map and when you insert the password, the tool will restore all the files from the backup folder.

extprotect.7z

Backup.7z

[Dekar]

In addition to XORing the MD5 hash of the key all over the plaintext, there is also AES128 in ECB mode. The XOR part is a bad attempt at best and wouldn't stand any chance. Yet even though the ECB mode is infamous for leaking information, AES still prevents the recovery of the actual plaintext. Besides trying to brute force weak passwords, there's nothing you can do.

Here's an example of ECB:

http://en.wikipedia.org/wiki/Block_ciph ... _.28ECB.29

[JustANewbie]

Which type of password falls into the weak password category? I did thought before to use brute force and dictionary attack, maybe there is hope, but I got no idea how to do it.

[Dekar]

Depends on your hardware, I guess trying all alphanumeric passwords up to 6-7 characters should be doable. Though given that their algorithm is somewhat custom you'd have to do some programming. If you do, you might wanna look into the AES hardware acceleration of modern CPUs (AES-NI).

[JustANewbie]

Is that hard for a beginner?

[Dekar]

The basic concept is quite simple, you could even salvage the source code you posted.

[JustANewbie]

The password is not case sensitive, so I think it should be either alphabets, numbers or both only, I don't think special symbol will be included, I need more guide, or I should just give up and edit the map in jass instead, easier way