OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[Full-disclosure] about uncovering skype

From: Wu Ping (pwufortinet.com)
Date: Wed Feb 01 2006 - 20:35:36 CST

I have similar confusing on the paper. The TCP packet detection part can not
reproduce ether. It not mention what seed means, dose that the RC4 key? Or
the RC4 key need generated from it. And it did not point out how to get
the first
cleared 10 byte of the first packet. Also it point out the first 2
packets are not using
RC4 to cipher.
Anyone has figure out how to decipher the first 2 packets?

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/