Turtlehead

Well, as has now been well publicised, I was beaten to the punch with the airport express public key.There appears to actually be a total of 255 keys in iTunes, but as far as I know only one is used to communicate with the airport express.

Anyway. If you’d like to rip all the keys I’ve uploaded some of the code I used to rip them from itunes.exe and dump them as asn1 objects as they’re stored internally.

Download here.

You’ll probably have to tweak the code a little to point to your location of itunes.exe.. And you may want to download dumpasn1 to display the keys.

(more…)

Well not really. But, If you’ve wondered why you don’t see much in itunes if you try hacking it that relates to remote audio, it’s because they’ve encrypted little chunks of the code here and there.It’s really easy to hack once you notice this and find the decryption code and it makes it a lot easier to place your breakpoints.
Here’s an example to decrypt the Apple-Challenge and Apple-Response header lines. Note: This only decodes that text, not the actual content of the challenge and the header.
Has anyone else even looked at the airport express and air tunes yet? The only stuff I can find on the net is very slim and what there is (cocoadev.org for example) is pretty incorrect in places.

Just a quick note to say I got an Airport Express today. Finally. Took a little mucking about to get it on the network but no problems once I sorted it out..

Well I’ve not done much with it yet apart from the obvious but here’s a little network dump just to give you an idea. It looks like it’s got some heavy encryption going on so this one may be a sucker to crack. Although I’m going to give it a little go…

Also some scanning software reported ports 53 (DNS) 161 (SNMP) 5000 (The dreaded uPnp) and 10000 (Network data management protocol) are all open. It also reports it’s running NetApp OnTap 5.3.5r2 as the Os.. Interesting eh?

(more…)