Error when decrypting Funf in a Box DB files (decrypt.py)

47 views
Skip to first unread message

alexander garcia davalos

unread,
Oct 11, 2018, 10:31:35 PM10/11/18
to Funf Developers
Hi Guys!

I installed Funf in a Box and then I try to process the data collected, but this error appears when I run the program "process_data.py":

FAILED!!!!
File is either encrypted with another method, another key, or is not a valid sqlite3 db file.
Keeping original file.

I'm using the password which is generated by Funf, so I think the problem is related to decryption method. 

Could you help me whith this error please? ... any help will be appreciated!

Regards,

Alex

Nello Serio

unread,
Oct 12, 2018, 1:03:50 AM10/12/18
to funf-de...@googlegroups.com
Hi,

In order to decrypt the data collected, you should drag the selected items onto "dbdecrypt" script, which will ask you for the encryption password placed in your  Dropbox folder. After it generates the intermediate files, you just need to use "merge" script and you get the final db file. 
If you find any issues, please report, it is appreciated and helps improving the tool :) Thank you

Best regards,

Nello

--
You received this message because you are subscribed to the Google Groups "Funf Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to funf-develope...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

alexander garcia davalos

unread,
Oct 13, 2018, 11:30:02 AM10/13/18
to Funf Developers
Hi Nello:

Thank you for your answer .... File process_data.py (see the attach) has code which do all the process (decrypt, merge, and so on). I still thinking that the problem is that perhaps the key or method for decryting data is not working well.

I tried with another program for Windows --> step1_process_data(win).exe. I executed this program and it works, then I executed another program (step2_convert_to_csv(win).exe) for obtaining the csv files.

Finally, I'm no very sure if this data is helpful for me, because it is in a not readable format:

619cdd70-6c87-4e14-8d0f-a720a7fe71f0-8,57f7970d-5d05-459f-aee1-41652509516a,1538594805.8,4307,1538594805801,32,"{""ONE_WAY_HASH"":""573e51b4269f5acee2a6c21c02c0bdafaab776b4""}","{""ONE_WAY_HASH"":""4f7354ab3cd0c63f6367bb1dd6410c968a4e3e73""}","{""ONE_WAY_HASH"":""""}","{""ONE_WAY_HASH"":""da4b9237bacccdf19c0760cab7aec4a8359010b0""}",1538594805.8,2

Did you know anything about this data format? 

Best regards,

Alex
process_data.py

Nello Serio

unread,
Oct 13, 2018, 12:56:30 PM10/13/18
to funf-de...@googlegroups.com
Hello Alexander,
Actually I also noticed the fact that some collected data contained these "ONE WAY HASH" , in particular those related to personal information such as Contacts name and phone numbers. In fact I  get those  in Contacts/Call logs/SMS probes  mostly, instead of contacts name and phone numbers, so I guess it is to guarantee the anonymity whenever data from large pools of people are collected.
However, I managed to manipulate and analyse some data using some simple python scripts using Pandas library if it can be helpfull, in order to convert the timestamp in a better format and to extract information from the dictionary type field (usually the "value" field) which includes the values collected from the app for that probe.
The fields meaning is showed in the first row of the file, I've attached some screen about how they are shown using DB Browser for SQL Lite.
I hope it can help.

Regards,

Nello
screen1.png
screen2.png
Reply all
Reply to author
Forward
0 new messages