Help Needed to Find Encryption Key Path in XUI One Panel

[squallp]

Hello everyone,

I am having trouble finding the encryption and decryption key in a project that uses the XUI One panel. This key is crucial for the encryption and decryption functions located in the xui.so library. Specifically, the key is used for:

1. Encrypting and decrypting user data: All sensitive data (e.g., passwords, user information) stored in the system is encrypted using this key.
2. Secure storage of configuration parameters: Some configuration parameters are also encrypted to ensure their security.
3. Authentication and authorization: The key may be used to generate and validate tokens for user authentication and authorization.

So far, I have taken the following steps:

1. Searched all configuration files and scripts within the /home/xui/ directory for any references to the key or encryption methods.
2. Checked environment variables that might contain the key by using scripts to list all environment variables and search for keywords like key, encrypt, decrypt, password, secret.
3. Analyzed logs using tools such as strace and ltrace to trace all functions in the xui.so file related to encryption and decryption.
4. Tested all potential keys found during the previous steps using a PHP script, but unfortunately, none of these keys were correct.

Unfortunately, I have not been able to identify the exact location of the key. My question is:

Does anyone know where the encryption key might be stored in the XUI One panel or has experience with similar systems?

Any advice, guidance, or information would be extremely helpful. I am willing to pay well for accurate information that helps me find the key.

Thank you in advance for your help!

Best regards,
Squallp

 

[KingOfSat]

its not working on that way key are is a different everytime and is a generated by remote server of xui.one

 

[squallp]

its not working on that way key are is a different everytime and is a generated by remote server of xui.one

This is not true, we just solved the problem with the key

This is the best functions in xui.so LB

function zim_Xui_Functions_FuckOffHackers() {

 

[KingOfSat]

This is not true, we just solved the problem with the key

This is the best functions in xui.so LB

function zim_Xui_Functions_FuckOffHackers() {

Oh I thing you talking for dynamic key hahaha best function

 

[CentOS]

Oh I thing you talking for dynamic key hahaha best function

I'm trying too, but it's a task that requires a lot of time, as it's binary in C, reverse engineering is difficult

It turns out that there are several constants and variables that add value until reaching the final key that uses openSSL_CBC