blutter

Blutter Flutter Mobile Application Reverse Engineering Tool by Compiling Dart AOT Runtime Currently the application supports only Android libapp.so arm64 only. Also the application is currently work only against recent Dart versions. For high priority missing features, see TODO Environment Setup...

frida-android-libbinder

frida-android-libbinder Android libbinder トラフィックを表示する PoC Frida スクリプト。以下のリンクはインスピレーションと知識の素晴らしい源でした: https://www.blackhat.com/docs/eu-14/materials/eu-14-Artenstein-Man-In-The-Binder-He-Who-Controls-IPC-Controls-The-Droid.pdf...

XposedFridaBridge

XposedFridaBridge 소개 Introduction XposedBridge를 구현한 Frida 스크립트로, Xposed 프레임워크를 설치하지 않고 Xposed 모듈을 로드합니다. Xposed Framework를 설치하지 않고 Frida를 통해 Xposed 플러그인을 사용합니다. 사용법 Usage 준비 Preparation 1. XposedBridge.jar를 기기에 푸시합니다. push XposedBridge.jar into device 2. 모듈을 설치하거나 모듈 APK를 기기에 푸시합니다. install modul...

CVE-2022-39197-RCE

CVE-2022-39197-RCE First このプロジェクトは @its-arun のプロジェクト https://github.com/its-arun/CVE-2022-39197 を改変したものです。 スクリプトをテストした際、frida スクリプトが通常の順序でデータを照会できないことが判明しました。frida スクリプトを変更してプロセス名を変更する方法です。 利用方法への貢献をいただいた @Kai5174 師匠に感謝します。 Usage Payload の準備 1、EvilJar/src/main/java/Exploit.java...

AES-Killer v3.0 - Burp Plugin To Decrypt AES Encrypted Traffic Of Mobile Apps On The Fly

BurpsuitePlugin to decrypt AES Encrypted traffic on the fly. Requirements Burpsuite Java Tested on Burpsuite 1.7.36 Windows 10 xubuntu 18.04 Kali Linux 2018 What it does The IProxyListener decrypt requests and encrypt responses, and an IHttpListener than encrypt requests and decrypt responses. Bu...