vj0shii

Security Researcher

vj0shii / ssl-bypass.js

Created June 29, 2020 15:16

	setTimeout(function(){
	Java.perform(function (){
	console.log("[*] Script loaded")
	var MenuActivity = Java.use("sg.vantagepoint.mstgkotlin.MenuActivity")
	StartActivity.RootDetection.overload().implementation = function() {
	console.log("[*] isDeviceRooted function invoked")
	return false
	}
	console.log("");
	console.log("[.] Cert Pinning Bypass/Re-Pinning");

vj0shii / 1. Initial.burp

Last active May 28, 2020 16:23

CSRF-email update

	POST /server/api/users/1 HTTP/1.1
	Host: test.example.com
	Connection: close
	Content-Length: 2298
	Accept: application/json, text/plain, /
	User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36
	Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryY0xsvHS604Lx0QVR
	Origin: https://test.example.com
	Sec-Fetch-Site: same-origin
	Sec-Fetch-Mode: cors

vj0shii / chaos.html

Last active May 25, 2019 06:14

	POST /J00_w1ll_f1Nd_n07H1n9_H3r3/ajax.php HTTP/1.1
	Host: chaos.htb
	User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:67.0) Gecko/20100101 Firefox/67.0
	Accept: /
	Accept-Language: en-US,en;q=0.5
	Accept-Encoding: gzip, deflate
	Referer: http://chaos.htb/J00_w1ll_f1Nd_n07H1n9_H3r3/
	Content-Type: application/x-www-form-urlencoded; charset=UTF-8
	X-Requested-With: XMLHttpRequest
	Content-Length: 29

vj0shii / decrypt.py

Created May 24, 2019 07:45

	import os, time
	from Crypto.Cipher import AES
	from Crypto.Hash import SHA256
	from Crypto import Random
	from optparse import *
	def decrypt(key, filename):
	chunksize = 64 * 1024
	outputFile = filename.split('en')[1]

	with open(filename, 'rb') as infile: