new obsfucation method in the last couple days?

This is the place to help test and discuss Version 6 Beta releases.

new obsfucation method in the last couple days?

Postby drez » Sun Feb 20, 2022 3:20 pm

Is there a new obsfucation method that started in the last couple days?
Some .nzb's I've been getting are being decoded as 4 random characters with the correct extension.
I can provide a nzb if you need one to look at
drez
Occasional Contributor
Occasional Contributor
 
Posts: 14
Joined: Tue Oct 03, 2006 8:28 pm

Re: new obsfucation method in the last couple days?

Postby Quade » Sun Feb 20, 2022 6:02 pm

Sure send the nzb to ts@newsbin.com

What version are you using? Let me know after you've sent it so I can look for it.
User avatar
Quade
Eternal n00b
Eternal n00b
 
Posts: 44867
Joined: Sat May 19, 2001 12:41 am
Location: Virginia, US

Registered Newsbin User since: 10/24/97

Re: new obsfucation method in the last couple days?

Postby drez » Sun Feb 20, 2022 11:17 pm

I'm using the latest build (5524)
sending you a couple nzbs so you can see what I mean

----- Edit

Just sent you 4 of them, I did notice all the .nzb's end with -4P so maybe that's something. but take a look at them
drez
Occasional Contributor
Occasional Contributor
 
Posts: 14
Joined: Tue Oct 03, 2006 8:28 pm

Re: new obsfucation method in the last couple days?

Postby Quade » Mon Feb 21, 2022 12:41 am

Does look like a new scheme.

Thanks for the NZB's. They're basically naked MKV's posted with some PAR files. If you use "$(NZBFILE)" in the unrar path the path will include the NZB FIlename so, renaming is pretty easy.

"D:\UnRAR\<NZB Filename>\TGUE.mkv"

I looked at one of the MKV's and the actual filename doesn't appear in the MKV meta-data so, only the NZB Filename is useful for renaming. It renames some MKV's already but not this new format.
User avatar
Quade
Eternal n00b
Eternal n00b
 
Posts: 44867
Joined: Sat May 19, 2001 12:41 am
Location: Virginia, US

Registered Newsbin User since: 10/24/97

Re: new obsfucation method in the last couple days?

Postby drez » Mon Feb 21, 2022 5:57 am

Quade wrote:Does look like a new scheme.

Thanks for the NZB's. They're basically naked MKV's posted with some PAR files. If you use "$(NZBFILE)" in the unrar path the path will include the NZB FIlename so, renaming is pretty easy.

"D:\UnRAR\<NZB Filename>\TGUE.mkv"

I looked at one of the MKV's and the actual filename doesn't appear in the MKV meta-data so, only the NZB Filename is useful for renaming. It renames some MKV's already but not this new format.



Glad I could help in some way and point out something funky
I've just been downloading stuff to named folders then renaming the .mkv so it's easy enough
and like I said, I only see these on ONE indexer out of the 4 I use (I can't get access to the one that starts with O yet)
drez
Occasional Contributor
Occasional Contributor
 
Posts: 14
Joined: Tue Oct 03, 2006 8:28 pm

Re: new obsfucation method in the last couple days?

Postby Quade » Mon Feb 21, 2022 10:29 am

It's the posting group that controls the final filename, not the indexer so, I'd suggest the one indexer that supplies these NZB's simply has an in with this posting group.
User avatar
Quade
Eternal n00b
Eternal n00b
 
Posts: 44867
Joined: Sat May 19, 2001 12:41 am
Location: Virginia, US

Registered Newsbin User since: 10/24/97

Re: new obsfucation method in the last couple days?

Postby drez » Mon Feb 21, 2022 12:31 pm

Quade wrote:It's the posting group that controls the final filename, not the indexer so, I'd suggest the one indexer that supplies these NZB's simply has an in with this posting group.


Probably, and lately their indexing has been wacky so we'll see what happens.
drez
Occasional Contributor
Occasional Contributor
 
Posts: 14
Joined: Tue Oct 03, 2006 8:28 pm

Re: new obsfucation method in the last couple days?

Postby meenich » Fri Feb 25, 2022 11:58 am

[quote="Quade"]Sure send the nzb to ts@newsbin.com

What version are you using? Let me know after you've sent it so I can look for it.[/quote]

I actually posted a request to look into this same new obfuscation method back when you put up RC4 or RC5, but you must have missed it back then. Glad you're looking into it now :)
meenich
Occasional Contributor
Occasional Contributor
 
Posts: 40
Joined: Mon Mar 13, 2006 12:02 am

Registered Newsbin User since: 07/08/05


Return to Newsbin Version 6 Beta Support

Who is online

Users browsing this forum: No registered users and 2 guests