gladiopeace

How to intercept all SSL connections from an Android x86 VM

This guide shows how to setup an Android VM in order to intercept all HTTPS requests. This was originally intended to reverse PlayServices but should work with any app that does not use certificate pinning (i.e. every app that relies on the system certificate authorities).

Inspired by this guide how to install Android x86 in VirtualBox, this guide how to install a system certificate on Android and this guide how to use mitmproxy with VirtualBox.

Download a recent Android x86 ISO from here.
Download a recent Kali Linux VirtualBox Image from here. (You can also use an

PKG format

sample	name	details
DB AD 47 5E	magic
00 01	version	PKG format version 1
00 00	encrypt	resellers can crypt these?
00 2A 60 00	pkg_len	total package length
69 4F 82 7D	pkg_md5	md5 of rest of pkg
6B DE CA 4F	-

	// Get a reference to the active document.
	var doc = app.activeDocument;

	// Set the height of the selection to the height of the document.
	var height = doc.height;

	// Set the x and y offset in pixels.
	var xOffset = 5;
	var yOffset = 5;

	// dump classes and selectors forbidden in NSPredicates
	// `cc -framework Foundation -o restricted restricted.m`
	#import <Foundation/Foundation.h>
	#import <dlfcn.h>

	int main() {
	void *cf = dlopen("/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation", 0);
	NSDictionary* (*RestrictedClasses)() = dlsym(cf, "_CFPredicatePolicyRestrictedClasses");
	NSDictionary* (*RestrictedSelectors)() = dlsym(cf, "_CFPredicatePolicyRestrictedSelectors");
	NSLog(@"Restricted Selectors: %@", RestrictedSelectors());

	/**
	* Hello, and welcome to this brief, but hopefully complete, example file for
	* wireless packet injection using pcap.
	*
	* Although there are various resources for this spread on the web, it is hard
	* to find a single, cohesive piece that shows how everything fits together.
	* This file aims to give such an example, constructing a fully valid UDP packet
	* all the way from the 802.11 PHY header (through radiotap) to the data part of
	* the packet and then injecting it on a wireless interface
	*

	{/* Download button */}
	<button className='download-btn' onClick={downloadCanvasToImage}>
	<img
	src={download}
	alt='download_image'
	className='w-3/5 h-3/5 object-contain'
	/>
	</button>

	import openai
	import asyncio
	from typing import Any

	async def dispatch_openai_requests(
	messages_list: list[list[dict[str,Any]]],
	model: str,
	temperature: float,
	max_tokens: int,
	top_p: float,

	import torch
	print(torch.version.cuda)
	print(torch.cuda.is_available())

	import pyarrow.flight as fl
	import json

	client = fl.FlightClient("grpc://127.0.0.1:8815")
	print(
	client.do_get(
	fl.Ticket(json.dumps({"contract": "0x", "event": "0x"}))
	).read_pandas()
	)