■■■■□ Reverse Engineering Password Obfuscation in Lobster Data Configuration Files.

A hidden password. A custom Python tool. A path to Domain Admin. 🦞

We reverse engineered Lobster Data’s password obfuscation and built “Lobster Pot” to recover the credentials.

Here’s how it unfolded: https://netragard.com/blog/reverse-engineering-lobster-data-password-obfuscation/