Brian_Deitch_11
Dec 07, 2012Historic F5 Account
v11 cookie hash
Hello,
I've looked around and can't find any data on it, but has the v11 cookie has been decoded like in v9 and v10?
Thanks!
If anyone is intrested, here is a python script:
import struct
import sys if len(sys.argv) != 2: print "Usage: %s cookie_value" % sys.argv[0] exit(1) encoded_string = sys.argv[1] print "\n[*] String to decode: %s\n" % encoded_string (rd, host, port) = encoded_string.split('o') Hexadecimal details: iphash = host.replace("00000000000000000000ffff", "") rdnum = rd.replace("rd", "") (a, b, c, d) = [ord(i) for i in struct.pack(" print "[*] Decoded IP: %s.%s.%s.%s" % (d, c, b, a) print "[*] Decoded Port: %s" % port print "[*] Decoded Route Domain: %s\n" % rdnum
Run the script
bash-3.2$ python rd-decoder.py rd5o00000000000000000000ffffc0000201o80
[*] String to decode: rd5o00000000000000000000ffffc0000201o80 [*] Decoded IP: 192.0.2.1 [*] Decoded Port: 80 [*] Decoded Route Domain: 5