Nounours

Nounours is a tool designed to test APP_KEYs at scale on Laravel applications.

Developed by Damien Picard.

Description

• Nounours was written to test combinations of APP_KEY and Laravel ciphers found in open sources.

  The goal is to have a fast brute-force loop by leveraging the following optimizations:

  • Inlining the decryption code
  • Using AES-NI

Quick start

Dependencies

• rustc, cargo

Compilation

This line will generate the following binary ./target/release/nounours.

cargo build --release

Execution

Nounours takes the following options :

./target/release/nounours -h
Usage: nounours <--encrypted <ENCRYPTED>|--encrypted-file <ENCRYPTED_FILE>> <--key <KEY>|--key-file <KEY_FILE>>

Options:
  -e, --encrypted <ENCRYPTED>            Encrypted text to bruteforce
      --encrypted-file <ENCRYPTED_FILE>  File containing encrypted text to bruteforce
  -k, --key <KEY>                        Key to bruteforce
      --key-file <KEY_FILE>              File containing keys to bruteforce
  -h, --help                             Print help
  -V, --version                          Print version

It is possible to pass only a ciphertext and a key using the -e and -k options, or to pass files containing this information line by line with --encrypted-file and --key-file.