rpfilomeno

Android Bypass Certificate Pinning and MitM Attack Setup

This is a gist used in the following blog posts:

• How to MitM Attack the API of an Android App
• How to Bypass Certificate Pinning with Frida on an Android App

rpfilomeno

RUN apt update
RUN apt upgrade -y
RUN apt install -y apt-utils
RUN a2enmod rewrite
RUN apt install -y libmcrypt-dev
RUN docker-php-ext-install mcrypt
RUN apt install -y libicu-dev
RUN docker-php-ext-install -j$(nproc) intl
RUN apt-get install -y libfreetype6-dev libjpeg62-turbo-dev libpng12-dev
RUN docker-php-ext-configure gd --with-freetype-dir=/usr/include/ --with-jpeg-dir=/usr/include/ 

rpfilomeno

#! /bin/bash

# from
# https://gist.github.com/3178130
# gist created by brodul
# modified for http://twitch.tv/jplebreton

# originaly from http://tinyurl.com/twitch-linux from taladan
# www.youtube.com/user/taladan

rpfilomeno

Installation of required libraries

sudo apt-get update sudo apt-get upgrade -y ``

rpfilomeno

/**
 * Check if a given ip is in a network
 * @param  string $ip    IP to check in IPV4 format eg. 127.0.0.1
 * @param  string $range IP/CIDR netmask eg. 127.0.0.0/24, also 127.0.0.1 is accepted and /32 assumed
 * @return boolean true if the ip is in this range / false if not.
 */
function ip_in_range( $ip, $range ) {
	if ( strpos( $range, '/' ) == false ) {
		$range .= '/32';
	}

rpfilomeno

\n
=============  HOST:  ==========\n
\n
           local_ip:  %{local_ip}\n
         local_port:  %{local_port}\n
          remote_ip:  %{remote_ip}\n
        remote_port:  %{remote_port}\n
\n
=======  CONNECTION:  ==========\n
\n

rpfilomeno

1. Add the Gparted CD ISO
2. Change VM Properties -> Options Tab -> Boot Options: Check Force BIOS Setup
3. Boot VM and edit BIOS boot order to CDROM First then Exit setup with Save to reboot
4. Allow VM to Boot GParted
5. ON Gparted, select LVM Partition with Lock Icon then select Partition menu -> Disable
6. Expand the said partition and Apply. Exit Gparted.
7. Run terminal on GParted
8. run "lvm lvdisplay" and take note of the /dev/ path of the partition needing expansion
9. run "lvextend –l +100%FREE /dev/[path]"
10. shutdown Gparted

rpfilomeno

Extract voice fingerprint from previous customer call recording and store it for future 
comparisons when the customer calls again.

Application:
* Fraud detection - detect the person voice print is different from the identity provided 
and raise flag for review or detect known fraudulent individuals in calls and alert the agent
to inquire for additional indentification challenges.
* Identification - provide agents with additional feedback for user's authenticity of 
his/her claimed identity

rpfilomeno

udp://open.demonii.com:1337

udp://tracker.coppersurfer.tk:6969

udp://tracker.leechers-paradise.org:6969

udp://exodus.desync.com:6969

http://tracker.yify-torrents.com/announce

rpfilomeno

# less /proc/cpuinfo | grep "physical id" | sort|uniq | wc -l
2

# less /proc/cpuinfo | grep "core id" | sort|uniq | wc -l
1

Optimal load average (100% utilization) = 2.0

(The "Red line"  load average = 5.0 per processor)