Decode Vaulty protected .vdata files

vaulty-decode.py

#!/usr/bin/python

# This program will copy, rename and decode Vaulty .vdata files back to images and videos for viewing in normal applications.
# Usage: python vaulty-decode.py <directory with .vdata files>

import sys
import os
import glob
import io

def usage():
  print "Usage: %s <path to directory with vdata files>" % sys.argv[0]
  print ""
  sys.exit()

def main(args):
  if len(args) != 2 or not os.path.isdir(args[1]):
    print "Error: Invalid Argument, please provide a valid directory name"
    usage()
  vdata_dir = args[1]
  vdata_files = glob.glob(os.path.join(vdata_dir,'*.vdata'))
  print "Found %s .vdata encoded files" % len(vdata_files)
  for vdata_file in vdata_files:
    with io.open(vdata_file,'rb') as vfdf:
      bn = os.path.basename(vdata_file)
      if vfdf.read(8) == 'obscured':
        nfn = 'decrypted_' + bn + '.jpg'
        with io.open(os.path.join(vdata_dir,nfn),'wb') as idf:
          idf.write(vfdf.read())
        print "processed %s" % nfn
      else:
        nfn = 'decrypted_' + bn + '.3gp'
        vfdf.seek(0)
        with io.open(os.path.join(vdata_dir,nfn),'wb') as idf:
          idf.write(vfdf.read())
        print "processed %s" % nfn
  print "Done!"

if __name__ == '__main__':
  main(sys.argv)

Recently attempted to use this tool to recover my vaulty files.

Advice for future users:

As stated in the above comment there are syntax errors that have to be fixed for it to run It appears to only support .jpg and .3gp If the file was originally a .png etc it will automatically export the file as a .3gp All of my files were png so none of them were properly "decoded" and I haven't tested the seemingly supported formats.

I found a way easier method if you are having issues and don't want to customize this script:

Open up the .vdata file in your hex editor of choice (I use HxD) On the first line will be "obscured" followed by "%PNG" or "%JPG" depending on the file type. All you have to do now is delete the word "obscured" which will put "%PNG" to the beginning of the file. Save and then just rename the extension of the file to whatever was after the %

Profit. Hope this helps out.

This seemed like a good idea, and I was able to get one 3gp file. However most of the files have obscuredÿØÿà..JF (and then IF in the beginning of the 2nd line presenting JFIF?) so whatever those are, seem to be files containing non-ASCII characters or binary data that doesn't correspond to readable text.