hey guys,
about a year ago i developed a program to my comapny that extract customers call from our website, decrypt it and pushed it to our internel software and from ther to the support department.
here the problem: during the last week, my basic assumption is that our server did some automatic updates and it cause (by purpose?) changes in the decription of html pages. why am i saying this? in the code, i'm looking for tags such as to start from. the text that i get now is nothing like this. i need to know what is the encryption type that i get and how can i decrypt it. please, this is very urgent!!!
added: after research, i found out that microsoft made 5 security updates in our server. when i compare the emails i get before and after the security updates, i found out that the old email contain this:
Content-Transfer-Encoding: 8bit
and the new emails contains this:
Content-Transfer-Encoding: base64.
i think this is the source of my problem. now i need to know how to decrypy base64 back to the original encoding.
here is a section of the function of the old decryption:
Sub GetEmails(ByVal Server_Command As String)
Dim m_buffer() As Byte = System.Text.Encoding.UTF8.GetBytes(Server_Command.ToCharArray())
Dim stream_Reader As StreamReader
Dim TxtLine As String = ""
Try
'x = x & ",10"
m_sslStream.Write(m_buffer, 0, m_buffer.Length)
'x = x & ",11"
stream_Reader = New StreamReader(m_sslStream, Encoding.UTF8)
Do While stream_Reader.Peek() <> -1
TxtLine += stream_Reader.ReadLine() & vbNewLine
Loop
System.IO.File.WriteAllText("directory/utf8.html", TxtLine)
Dim einfo As New EmailInfo
TextBox1.Text = ""
Call Utilities.GetEmailInfo(TxtLine)
Dim AdpX As New OleDbDataAdapter, tbl As New DataTable, row As DataRow,sql As String
sql = "SELECT * FROM TempCalls"
AdpX = GetAdapter(sql, "\Service.mdb")
AdpX.Fill(tbl)
row = tbl.NewRow
row("License") = Val(GetFldSc("[מס' לקוח]", TxtLine))
row("LicName") = GetFldSc("[שם העסק]", TxtLine)
row("IDNumber") = GetFldSc("[ח.פ/ע.מ]", TxtLine)
End Sub
and this is the function which extract the text:
Public Function GetFldSc(fldToSearch As String, msgStr As String) As String
Dim str As String = ""
Dim index As Integer = msgStr.IndexOf("<tbody>")
Dim objRegEx As System.Text.RegularExpressions.Regex
'msgStr = objRegEx.Replace(msgStr, " ", "") 'Replace all " " in the string with: ""
msgStr.ToString.Replace(" ", "")
msgStr = msgStr.Substring(index, (msgStr.Length - index))
Dim bodyArray() As String = Split(msgStr, vbCrLf)
For i = 0 To bodyArray.Length - 1
If bodyArray(i).IndexOf(fldToSearch) <> -1 Then
str = bodyArray(i - 1).Substring(14, ((bodyArray(i - 1).Length - 5) - 14))
str.Replace(" ", "")
str = objRegEx.Replace(str, " ", "")
Exit For
End If
Next
If str = "<span>N/A</span>" Or str = " <span>N/A</span>" Then str = ""
Return str
End Function
this is the new decoding that i get and i dont know how to handle it:
+OK message follows
MIME-Version: 1.0
Received: by 10.28.39.193 with HTTP; Mon, 20 Apr 2015 23:31:55 -0700 (PDT)
In-Reply-To: <eec338eaf2a4ba099314de8d9fc4d7a3@www.minisoft.co.il>
References: <eec338eaf2a4ba099314de8d9fc4d7a3@www.minisoft.co.il>
Date: Tue, 21 Apr 2015 09:31:55 +0300
Delivered-To: ############
Message-ID: <cada2pvozucpnd3ykhoqotueuj>
Subject: =?UTF-8?B?RndkOiBb157Xmdeg15nXodeV16TXmCDXqtee15nXm9eUIC0gW9ek16rXmdeX16og16fXqA==?=
=?UTF-8?B?15nXkNeU?=
From: oron sultan
To: #########
Content-Type: multipart/alternative; boundary=001a11468f00e604be0514363370
--001a11468f00e604be0514363370
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: base64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--001a11468f00e604be0514363370
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: base64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--001a11468f00e604be0514363370--
.</cada2pvozucpnd3ykhoqotueuj></tbody>