Aes-Killer V3.0 - Burp Plugin To Decrypt Aes Encrypted Traffic Of Mobile Apps On The Fly


Burpsuite Plugin to decrypt AES Encrypted traffic on the fly.


Requirements
  • Burpsuite
  • Java

Tested on
  • Burpsuite 1.7.36
  • Windows 10
  • xubuntu 18.04
  • Kali Linux 2018

What it does
  • The IProxyListener decrypt requests too encrypt responses, too an IHttpListener than encrypt requests too decrypt responses.
  • Burp sees the decrypted traffic, including Repeater, Intruder too Scanner, simply the client/mobile app too server come across the encrypted version.
NOTE: Currently back upwards AES/CBC/PKCS5Padding encryption/decryption.

How it works
  • Require AES Encryption Key (Can move obtained yesteryear using frida script or reversing mobile app)
  • Require AES Encryption Initialize Vector (Can move obtained yesteryear using frida script or reversing mobile app)
  • Request Parameter (Leave blank inward illustration of whole asking body)
  • Response Parameter (Leave blank inward illustration of whole reply body)
  • Character Separated amongst infinite for obfuscation on request/response (In illustration of Offuscation)
  • URL/Host of target to decrypt/encrypt asking too response

How to Install
Download jolt file from Release too add together inward burpsuite



Original Request/Response


Getting AES Encryption Key too IV
  • First setup frida server on IOS too Android device.
  • Launch Application on mobile device.
  • Run this frida script on your host car to popular off AES Encryption Key too IV.

Decrypt Request/Response
  • Provide SecretSpecKey nether Secret Key field
  • Procide IV nether Initialize Vector field
  • Provide Host/URL to filter asking too reply for encryption too decryption
  • Press Start AES Killer

 
 
 
 
 





































































Popular posts from this blog









Efiguard - Disable Patchguard Together With Dse At Kicking Time




















Image







EfiGuard is a portable x64 UEFI  bootkit that patches the Windows kicking manager, kicking loader too center at kicking fourth dimension inward club to disable PatchGuard too Driver Signature Enforcement (DSE).   Features   Currently supports all EFI-compatible versions of Windows x64 e'er released, from Vista SP1 to Server 2019.     Easy to use: tin live on booted from a USB stick via a loader application that automatically finds too boots Windows. The driver tin also live on loaded too configured manually using either the UEFI rhythm out or the loader.     Makes extensive utilization of the Zydis  disassembler  library for fast runtime pedagogy decoding to back upwardly to a greater extent than robust analysis  than what is possible amongst signature matching, which oftentimes requires changes amongst novel OS updates.     Works passively: the driver does non charge or start the Windows kicking manager. Instead it acts on a charge of bootmgfw.efi  yesteryear the firmware kicking ...








Read more










Osweep - Don't Simply Search Osint, Sweep It




















Image







    If you lot operate inward information technology security, therefore you lot most probable role OSINT to assistance you lot sympathise what it is that your SIEM alerted you lot on together with what everyone else inward the globe understands most it. More than probable you lot are using to a greater extent than than 1 OSINT service because most of the fourth dimension OSINT volition entirely render you lot amongst reports based on the final analysis of the IOC. For some, that's practiced enough. They do network together with electronic mail blocks, do novel rules for their IDS/IPS, update the content inward the SIEM, do novel alerts for monitors inward Google Alerts together with DomainTools, etc etc. For others, they deploy these same countermeasures based on provided reports from their third-party tools that the fellowship is paying THOUSANDS of dollars for.   The work amongst both of these is that the analyst needs to dig a footling deeper (ex. FULLY deobfuscate  a PowerShel...








Read more










Telekiller - A Tool Session Hijacking In Addition To Stealer Local Passcode Telegram Windows




















Image







   H5N1 Tools Session Hijacking  And Stealer Local passcode Telegram  Windows.   Features :   Session Hijacking  Stealer Local Passcode  Keylogger  Shell  Bypass ii Step Verification  Bypass Av (Coming Soon)    Installation Windows  git clone https://github.com/ultrasecurity/TeleKiller.git cd TeleKiller pip install -r requirements.txt python TeleKiller.py   Dependency :   python 2.7  pyHook  pywin32    Video Tutorial      Operating Systems Tested   Windows 10  Windows 8.1  Windows 8  Windows 7    Contact   WebSite Ultra Security Team: https://ultrasec.org  Channel Telegram: https://t.me/UltraSecurity    Thanks to  Milad Ranjbar MrQadir     Download TeleKiller








Read more