Peter Teoh tthtlc

Tested on Workplace for Android version 362.0.0.29.109. This approach might work in other Facebook/Meta applications. Thank you Imre Rad for helping me analyze the binary.

How does it work?

The Workplace Android app uses the Fizz open source TLS-1.3 library to communicate with the backend APIs. This library is written in C++, and is compiled to native code. It is running as a native library attached to the Android app.

The certificate verification is implemented in fizz/client/ClientProtocol.cpp, on line 1944. The easiest way to bypass this check is to patch the if (state.verifier()) { check on line 1942.

Dissecting Go Binaries
Go: Overview of the Compiler
Go compiler internals: adding a new statement to Go - Part 1
Go compiler internals: adding a new statement to Go - Part 2
Reversing GO binaries like a pro
How a Go Program Compiles down to Machine Code
Analyzing Golang Executables
Go Reverse Engineering Tool Kit
go-internals book
[Reconstructing Program Semantics from Go Binaries](http://home.in.tum.de/

Table of Content

upgrade build tools
Add missing Java dependencies in jdk11
Remove findbug and add Spotbugs
Changes in GC options
- Runtime GC log changes
- GC info
Fork-join Thread pool
Class-Loader

	MongoDB University notes.

	Mongo Db is a document.
	Mongo Db uses JSON object/data.
	Mongo Db supports scaling out using sharing technique.
	Mongo Db supports scaling out vs scaling up.


	BSON:
	Mongo Db stores the data in the format of BSON. On the application side manogdb drivers map the BSON data into the native data types.

	0trace 1.5 A hop enumeration tool http://jon.oberheide.org/0trace/
	3proxy 0.7.1.1 Tiny free proxy server. http://3proxy.ru/
	3proxy-win32 0.7.1.1 Tiny free proxy server. http://3proxy.ru/
	42zip 42 Recursive Zip archive bomb. http://blog.fefe.de/?ts=b6cea88d
	acccheck 0.2.1 A password dictionary attack tool that targets windows authentication via the SMB protocol. http://labs.portcullis.co.uk/tools/acccheck/
	ace 1.10 Automated Corporate Enumerator. A simple yet powerful VoIP Corporate Directory enumeration tool that mimics the behavior of an IP Phone in order to download the name and extension entries that a given phone can display on its screen interface http://ucsniff.sourceforge.net/ace.html
	admid-pack 0.1 ADM DNS spoofing tools - Uses a variety of active and passive methods to spoof DNS packets. Very powerful. http://packetstormsecurity.com/files/10080/ADMid-pkg.tgz.html
	adminpagefinder 0.1 This python script looks for a large amount of possible administrative interfaces on a given site. http://packetstormse

	0trace 1.5 A hop enumeration tool http://jon.oberheide.org/0trace/
	3proxy 0.7.1.1 Tiny free proxy server. http://3proxy.ru/
	3proxy-win32 0.7.1.1 Tiny free proxy server. http://3proxy.ru/
	42zip 42 Recursive Zip archive bomb. http://blog.fefe.de/?ts=b6cea88d
	acccheck 0.2.1 A password dictionary attack tool that targets windows authentication via the SMB protocol. http://labs.portcullis.co.uk/tools/acccheck/
	ace 1.10 Automated Corporate Enumerator. A simple yet powerful VoIP Corporate Directory enumeration tool that mimics the behavior of an IP Phone in order to download the name and extension entries that a given phone can display on its screen interface http://ucsniff.sourceforge.net/ace.html
	admid-pack 0.1 ADM DNS spoofing tools - Uses a variety of active and passive methods to spoof DNS packets. Very powerful. http://packetstormsecurity.com/files/10080/ADMid-pkg.tgz.html
	adminpagefinder 0.1 This python script looks for a large amount of possible administrative interfaces on a given site. http://packetstormse

	/* ###
	* IP: GHIDRA
	*
	* Licensed under the Apache License, Version 2.0 (the "License");
	* you may not use this file except in compliance with the License.
	* You may obtain a copy of the License at
	*
	* http://www.apache.org/licenses/LICENSE-2.0
	*
	* Unless required by applicable law or agreed to in writing, software

	╔╦╗╦ ╦ ╔╗ ┬ ┬┌─┐ ╔╗ ┌─┐┬ ┬┌┐┌┬┐┬ ┬ ╦═╗┌─┐┌─┐┌─┐┬ ┬┬─┐┌─┐┌─┐┌─┐
	║║║╚╦╝ ╠╩╗│ ││ ┬ ╠╩╗│ ││ │││││ └┬┘ ╠╦╝├┤ └─┐│ ││ │├┬┘│ ├┤ └─┐
	╩ ╩ ╩ ╚═╝└─┘└─┘ ╚═╝└─┘└─┘┘└┘┴ ┴ ╩╚═└─┘└─┘└─┘└─┘┴└─└─┘└─┘└─┘

	//
	()==========>>======================================--
	\\


	2FA Bypass

	# Copyright 2017-2020 Jeff Foley. All rights reserved.
	# Use of this source code is governed by Apache 2 LICENSE that can be found in the LICENSE file.

	# Should results only be collected passively and without DNS resolution? Not recommended.
	#mode = passive
	mode = active

	# The directory that stores the Cayley graph database and other output files
	# The default for Linux systems is: $HOME/.config/amass
	#output_directory = amass



	A curated list of Easy machine learning frameworks, libraries and software (by language).

	If you want to contribute to this list (please do), send me a pull request or contact me [@praveen1664](https://www.justadvancetechnology.com/).
	Also, a listed repository should be deprecated if:

	* Repository's owner explicitly say that "this library is not maintained".
	* Not committed for long time (2~3 years).