Improve Signatures and other pages

This commit is contained in:
Yakov5776 2022-10-19 02:43:45 -04:00
parent df57c67baf
commit 9b88680e31
6 changed files with 66 additions and 6 deletions

View File

@ -1 +1,3 @@
# What is Reverse Engineering?
## TODO

View File

@ -0,0 +1 @@
TODO

View File

@ -1,20 +1,43 @@
# What are signatures?
## Introduction
Signatures are another method of security ROBLOX uses to prevent any unauthorized tampering with external requests to Roblox Servers.
Signatures are another means of security ROBLOX uses to prevent any unauthorized tampering with external requests from ROBLOX Servers.
Traditionally, Signatures are as the name implies, a method of determination to insure all information is indeed coming from the authorized sender.
Traditionally, signatures are, as the name suggests, a method to determine the actual author/sender of an article.
In today's world, digitial signatures are analogous — They utilize mathematical algorithms to validate the authenticity of such data.[^1]
In today's world, digitial signatures are analogous (to traditional signatures) — They utilize mathematical algorithms to validate the authenticity of such data.[^1]
This abstract graph demonstrates the signing process:[^2]
```mermaid
flowchart LR
id1[(Data)]-->id2[Sign]---id3>Private Key]
id2-->id7[(Signed Data)]-->id5
id6>Public Key]---id5[Verify]-->id4[(Data)]
```
## Client Signatures
ROBLOX uses (and *used*) signatures for a multitude of things including but not limited to:
- JoinScripts<sub><sup>[Citation needed]</sup></sub>
- Online CoreScripts (2010-2015)
- [JoinScripts](/Client Security/JoinScripts)
- Online CoreScripts (2010-2015)<sub><sup>[Citation needed]</sup></sub>
### Specification
ROBLOX uses the [RSA](https://en.wikipedia.org/wiki/RSA_(cryptosystem)) algorithm (1024-bits) with X509 and PKCS7 encoding.
Signature wrappers have differed between the years but here are the primary forms:
- `--rbxsig%DATA%` (2013-2020)
- `--rbxsig2%DATA%` (Since 2018)
- `--rbxsig4%DATA%` (Since 2020)
(**DATA** refers to the actual signature)
<h3 id="see-also">See Also:</h3>
- [Generating a public/private key](/Extras/KeyGeneration)
- [JoinScripts](/Client Security/JoinScripts)
[^1]: More Information: [https://www.cisa.gov/uscert/ncas/tips/ST04-018](https://www.cisa.gov/uscert/ncas/tips/ST04-018)
[^1]: More Information: [https://www.cisa.gov/uscert/ncas/tips/ST04-018](https://www.cisa.gov/uscert/ncas/tips/ST04-018)
[^2]: The server is the signer, the client is the verifier

View File

@ -0,0 +1,4 @@
# About Brent
Brent is the founder of the <img src="/assets/iTunesArtwork@2xNoBG.png" width="16" height="16"/> **ROBLOX Reverse-Engineering** discord server and an avid ROBLOX Reverse-Engineer ever since he joined ROBLOX in 2013.
## History

21
docs/hidden/discord.md Normal file
View File

@ -0,0 +1,21 @@
# Join the Discord
<h4 id="please-solve-this-challenge">Please solve this challenge to continue!</h4>
<script src="https://www.google.com/recaptcha/api.js?onload=onloadCallback&render=explicit"
async defer>
</script>
<form action="/api/getDiscord" method="POST" id="captchaForm">
<div id="g-recaptcha"></div>
</form>
<script>
var onloadCallback = function() {
grecaptcha.render(document.getElementById("g-recaptcha"), {
'sitekey' : '6Le9nYYiAAAAAD4sZTVWRai4oSfXmfqEINei9mdI',
'callback' : correctCaptcha
});
};
var correctCaptcha = function(response) {
document.getElementById("captchaForm").submit();
};
</script>

View File

@ -19,6 +19,8 @@ theme:
nav:
- Home: 'index.md'
- What is Reversing?: 'AboutReversing.md'
- Client Features:
- JoinScripts: 'Client Features/JoinScripts.md'
- Client Security:
- What are signatures?: 'Client Security/Signatures.md'
- Common Issues:
@ -26,6 +28,8 @@ nav:
- Issue 2: 'Common Issues/test2.md'
- Extras:
- Generating a public/private key: 'Extras/KeyGeneration.md'
- Honerable Users:
- Brent: "Honerable Users/Brent.md"
extra:
generator: false
extra_css:
@ -37,4 +41,9 @@ plugins:
- hidden/*
markdown_extensions:
- footnotes
- pymdownx.superfences:
custom_fences:
- name: mermaid
class: mermaid
format: !!python/name:pymdownx.superfences.fence_code_format
copyright: We're not affiliated, associated, authorized, or endorsed by ROBLOX Corporation in any way, shape, or form.