mirror of
https://github.com/Sneed-Group/pypush-plus-plus
synced 2024-12-24 03:42:43 -06:00
minor stuff
This commit is contained in:
parent
125c668ea1
commit
22899ee98e
2 changed files with 87 additions and 2 deletions
10
bags.py
10
bags.py
|
@ -45,5 +45,11 @@ if __name__ == "__main__":
|
||||||
# config = get_config()
|
# config = get_config()
|
||||||
# print(config)
|
# print(config)
|
||||||
# print(apns_init_bag_2())
|
# print(apns_init_bag_2())
|
||||||
print(apns_init_bag_2() == apns_init_bag())
|
#print(apns_init_bag_2() == apns_init_bag())
|
||||||
# print(ids_bag())
|
bag = ids_bag()
|
||||||
|
for key in bag:
|
||||||
|
#print(key)
|
||||||
|
#print(bag[key])
|
||||||
|
if type(bag[key]) == str:
|
||||||
|
if 'http' in bag[key]:
|
||||||
|
print(key, bag[key])
|
||||||
|
|
79
disable-ssl-pin.js
Normal file
79
disable-ssl-pin.js
Normal file
|
@ -0,0 +1,79 @@
|
||||||
|
var SecTrustEvaluate_handle =
|
||||||
|
Module.findExportByName('Security', 'SecTrustEvaluate');
|
||||||
|
var SecTrustEvaluateWithError_handle =
|
||||||
|
Module.findExportByName('Security', 'SecTrustEvaluateWithError');
|
||||||
|
var SSL_CTX_set_custom_verify_handle =
|
||||||
|
Module.findExportByName('libboringssl.dylib', 'SSL_CTX_set_custom_verify');
|
||||||
|
var SSL_get_psk_identity_handle =
|
||||||
|
Module.findExportByName('libboringssl.dylib', 'SSL_get_psk_identity');
|
||||||
|
var boringssl_context_set_verify_mode_handle = Module.findExportByName(
|
||||||
|
'libboringssl.dylib', 'boringssl_context_set_verify_mode');
|
||||||
|
|
||||||
|
if (SecTrustEvaluateWithError_handle) {
|
||||||
|
var SecTrustEvaluateWithError = new NativeFunction(
|
||||||
|
SecTrustEvaluateWithError_handle, 'int', ['pointer', 'pointer']);
|
||||||
|
|
||||||
|
Interceptor.replace(
|
||||||
|
SecTrustEvaluateWithError_handle,
|
||||||
|
new NativeCallback(function(trust, error) {
|
||||||
|
console.log('[*] Called SecTrustEvaluateWithError()');
|
||||||
|
SecTrustEvaluateWithError(trust, NULL);
|
||||||
|
Memory.writeU8(error, 0);
|
||||||
|
return 1;
|
||||||
|
}, 'int', ['pointer', 'pointer']));
|
||||||
|
console.log('[+] SecTrustEvaluateWithError() hook installed.');
|
||||||
|
}
|
||||||
|
|
||||||
|
if (SecTrustEvaluate_handle) {
|
||||||
|
var SecTrustEvaluate = new NativeFunction(
|
||||||
|
SecTrustEvaluate_handle, 'int', ['pointer', 'pointer']);
|
||||||
|
|
||||||
|
Interceptor.replace(
|
||||||
|
SecTrustEvaluate_handle, new NativeCallback(function(trust, result) {
|
||||||
|
console.log('[*] Called SecTrustEvaluate()');
|
||||||
|
SecTrustEvaluate(trust, result);
|
||||||
|
Memory.writeU8(result, 1);
|
||||||
|
return 0;
|
||||||
|
}, 'int', ['pointer', 'pointer']));
|
||||||
|
console.log('[+] SecTrustEvaluate() hook installed.');
|
||||||
|
}
|
||||||
|
|
||||||
|
if (SSL_CTX_set_custom_verify_handle) {
|
||||||
|
var SSL_CTX_set_custom_verify = new NativeFunction(
|
||||||
|
SSL_CTX_set_custom_verify_handle, 'void', ['pointer', 'int', 'pointer']);
|
||||||
|
|
||||||
|
var replaced_callback = new NativeCallback(function(ssl, out) {
|
||||||
|
console.log('[*] Called custom SSL verifier')
|
||||||
|
return 0;
|
||||||
|
}, 'int', ['pointer', 'pointer']);
|
||||||
|
|
||||||
|
Interceptor.replace(
|
||||||
|
SSL_CTX_set_custom_verify_handle,
|
||||||
|
new NativeCallback(function(ctx, mode, callback) {
|
||||||
|
console.log('[*] Called SSL_CTX_set_custom_verify()');
|
||||||
|
SSL_CTX_set_custom_verify(ctx, 0, replaced_callback);
|
||||||
|
}, 'int', ['pointer', 'int', 'pointer']));
|
||||||
|
console.log('[+] SSL_CTX_set_custom_verify() hook installed.')
|
||||||
|
}
|
||||||
|
|
||||||
|
if (SSL_get_psk_identity_handle) {
|
||||||
|
Interceptor.replace(
|
||||||
|
SSL_get_psk_identity_handle, new NativeCallback(function(ssl) {
|
||||||
|
console.log('[*] Called SSL_get_psk_identity_handle()');
|
||||||
|
return 'notarealPSKidentity';
|
||||||
|
}, 'pointer', ['pointer']));
|
||||||
|
console.log('[+] SSL_get_psk_identity() hook installed.')
|
||||||
|
}
|
||||||
|
|
||||||
|
if (boringssl_context_set_verify_mode_handle) {
|
||||||
|
var boringssl_context_set_verify_mode = new NativeFunction(
|
||||||
|
boringssl_context_set_verify_mode_handle, 'int', ['pointer', 'pointer']);
|
||||||
|
|
||||||
|
Interceptor.replace(
|
||||||
|
boringssl_context_set_verify_mode_handle,
|
||||||
|
new NativeCallback(function(a, b) {
|
||||||
|
console.log('[*] Called boringssl_context_set_verify_mode()');
|
||||||
|
return 0;
|
||||||
|
}, 'int', ['pointer', 'pointer']));
|
||||||
|
console.log('[+] boringssl_context_set_verify_mode() hook installed.')
|
||||||
|
}
|
Loading…
Reference in a new issue