'use strict'; const maxPrintableLength = 48; // Limit length of logged hex and ascii strings const Log = Java.use("android.util.Log"); const Throwable = Java.use("java.lang.Throwable"); function traceStack() { return Log.getStackTraceString(Throwable.$new()); } function logging(state) { console.log(JSON.stringify(state, null, 2)); } function fingerprint(input, type) { // Compute a 32-bit FNV-1a hash if (input === null || input === undefined) return ""; let h = 2166136261; for (let i = 0; i < input.length; i++) { if (type === "object") { h ^= (input[i] & 0xFF); } else if (type === "string") { h ^= (input.toString().charCodeAt(i) & 0xFF); } h = Math.imul(h, 16777619); } return (h >>> 0).toString(16).padStart(8, "0") + ":" + input.length; } function bytesToHex(bytes, bufferOffset, bufferLength, maxLength) { if (bytes === null || bytes === undefined) return ""; let result = ""; let start, end, length; if (bufferOffset === 0 && bufferLength === 0) { start = 0; end = bytes.length; } else { start = bufferOffset; end = bufferOffset + bufferLength; } length = end - start; // If maxLength === 0, parse whole byte array // Truncate the log entry if maxLength < bytes.length const hasLimit = typeof maxLength === "number" && maxLength > 0; const len = hasLimit ? Math.min(maxLength, length) : length; for (let i = start; i < len; i++) { let v = bytes[i]; if (v < 0) v += 256; result += ("0" + v.toString(16)).slice(-2); } if (hasLimit && length > len) result += ` ... [${length - len} more bytes]`; return result; } function bytesToString(bytes, bufferOffset, bufferLength, maxLength) { if (bytes === null || bytes === undefined) return ""; let result = ""; let start, end, length; if (bufferOffset === 0 && bufferLength === 0) { start = 0; end = bytes.length; } else { start = bufferOffset; end = bufferOffset + bufferLength; } length = end - start; // If maxLength === 0, parse whole byte array // Truncate the log entry if maxLength < bytes.length const hasLimit = typeof maxLength === "number" && maxLength > 0; const len = hasLimit ? Math.min(maxLength, length) : length; for (let i = start; i < len; ++i) { // Only convert printable ASCII characters (32-126); otherwise, use a placeholder dot (.) let val = bytes[i] & 0xFF; // Get unsigned byte value if (val === 10) { result += "\\n"; } else if (val === 13) { result += "\\r"; } else if (val === 9) { result += "\\t"; } else if (val >= 32 && val <= 126) { result += String.fromCharCode(val); } else { result += '.'; } } if (hasLimit && length > len) result += ` ... [${length - len} more bytes]`; return result; } function logKey(state, key) { if (key === null) return; state.keyClass = key.$className; state.keyAlgorithm = key.getAlgorithm(); state.keyFormat = key.getFormat(); const encoded = key.getEncoded(); if (encoded !== null) { state.keyBytesHex = bytesToHex(encoded, 0, 0, maxPrintableLength); state.keyBytesString = bytesToString(encoded, 0, 0, maxPrintableLength); state.keyBytesFingerprint = fingerprint(encoded, typeof (encoded)); } else { state.keyBytes = ""; } } function logAlgorithmParameters(state, params) { if (params === null) return; state.parameterClass = params.$className; state.parameterAlgorithm = params.getAlgorithm(); const encoded = params.getEncoded(); if (encoded !== null) { state.parameterEncoded = bytesToHex(params.getEncoded(), 0, 0, maxPrintableLength); } else { state.parameterEncoded = ""; } } function logAlgorithmParameterSpec(state, params) { if (params === null) return; state.parameterClass = params.$className; if (params.$className === "javax.crypto.spec.IvParameterSpec") { const IvParameterSpec = Java.use("javax.crypto.spec.IvParameterSpec"); const ivSpec = Java.cast(params, IvParameterSpec); const ivValue = ivSpec.getIV(); state.iv = bytesToHex(ivValue, 0, 0, maxPrintableLength); state.ivFingerprint = fingerprint(ivValue, typeof (ivValue)); } if (params.$className === "javax.crypto.spec.GCMParameterSpec") { const GCMParameterSpec = Java.use("javax.crypto.spec.GCMParameterSpec"); const gcm = Java.cast(params, GCMParameterSpec); state.gcmIv = bytesToHex(gcm.getIV(), 0, 0, maxPrintableLength); state.gcmTagBits = gcm.getTLen(); } } function describeOpmode(opmode) { if (opmode === 1) { return "ENCRYPT"; } else if (opmode === 2) { return "DECRYPT"; } else if (opmode === 3) { return "WRAP"; } else if (opmode === 4) { return "UNWRAP"; } else { return "UNKNOWN"; } } function base64FlagsToArray(flags) { const flagsToString = []; if (flags === 0) flagsToString.push("Default"); if (flags & 1) flagsToString.push("NoPadding"); if (flags & 2) flagsToString.push("NoWrap"); if (flags & 4) flagsToString.push("Crlf"); if (flags & 8) flagsToString.push("UrlSafe"); if (flags & 16) flagsToString.push("NoClose"); return flagsToString.values(); } function base64FlagsToString(flags) { let string = ""; for (const i of base64FlagsToArray(flags)) { if (string === "") { string = i; } else { string = string + " " + i; } } return string; } function getObjectId(name, obj) { if (obj === null || obj === undefined) return name + "-"; return name + "-" + obj.hashCode().toString(); } function truncateBase64(str) { // Truncate a Base64 string returned by java.lang.String objet let truncated; if (str.length > maxPrintableLength) { truncated = str.substring(0, maxPrintableLength); truncated += ` ... [${str.length - maxPrintableLength} more bytes]`; } else { truncated = str; } return truncated; } function resetDigestState(state) { state.updateInputs = []; state.updateInputsLen = []; state.updateOutputs = []; state.updateOutputsLen = []; } Java.perform(function () { const cipherStates = new Map(); const macStates = new Map(); const messageDigestStates = new Map(); let decodeBase64Counter = 0; let encodeBase64Counter = 0; let encodeToStringBase64Counter = 0; // ------------------ // | Cipher overloads | // ------------------ const Cipher = Java.use("javax.crypto.Cipher"); // ------------------------------ // | Cipher.getInstance overloads | // ------------------------------ try {// 1. [Cipher.getInstance(java.lang.String) -> static Cipher] const instanceKey = Cipher.getInstance.overload( "java.lang.String" ); instanceKey.implementation = function (transformation) { const cipher = instanceKey.call(Cipher, transformation); const provider = cipher.getProvider(); const objectId = getObjectId("Cipher", cipher); const state = { objectId: objectId, timestamp: Date.now(), lastSeen: Date.now(), instanceOverload: "1. [Cipher.getInstance(java.lang.String) -> static Cipher]", transformation: transformation, algorithm: cipher.getAlgorithm(), runtimeClass: cipher.getClass().getName(), providerName: provider.getName(), providerVersion: provider.getVersion(), providerInfo: provider.getInfo(), providerClass: provider.getClass().getName(), updateInputs: [], updateInputsLen: [], updateOutputs: [], updateOutputsLen: [] }; cipherStates.set(objectId, state); return cipher; } } catch (e) { console.log("[+] ERROR - 1. [Cipher.getInstance(java.lang.String) -> static Cipher]: " + e.message); } try { // 2. [Cipher.getInstance(String transformation, String provider) -> static Cipher] const instanceKey = Cipher.getInstance.overload( "java.lang.String", "java.lang.String" ); instanceKey.implementation = function (transformation, provider) { const cipher = instanceKey.call(Cipher, transformation, provider); const cipherProvider = cipher.getProvider(); const objectId = getObjectId("Cipher", cipher); const state = { objectId: objectId, timestamp: Date.now(), lastSeen: Date.now(), instanceOverload: "2. [Cipher.getInstance(String transformation, String provider) -> static Cipher]", transformation: transformation, algorithm: cipher.getAlgorithm(), runtimeClass: cipher.getClass().getName(), providerName: cipherProvider.getName(), providerVersion: cipherProvider.getVersion(), providerInfo: cipherProvider.getInfo(), providerClass: cipherProvider.getClass().getName(), updateInputs: [], updateInputsLen: [], updateOutputs: [], updateOutputsLen: [] }; cipherStates.set(objectId, state); return cipher; }; } catch (e) { console.log("[+] ERROR - 2. [Cipher.getInstance(String transformation, String provider) -> static Cipher]: " + e.message); } try { // 3. [Cipher.getInstance(String transformation, Provider provider) -> static Cipher] const instanceKey = Cipher.getInstance.overload( "java.lang.String", "java.security.Provider" ); instanceKey.implementation = function (transformation, provider) { const cipher = instanceKey.call(Cipher, transformation, provider); const objectId = getObjectId("Cipher", cipher); const state = { objectId: objectId, timestamp: Date.now(), lastSeen: Date.now(), instanceOverload: "3. [Cipher.getInstance(String transformation, Provider provider) -> static Cipher]", transformation: transformation, algorithm: cipher.getAlgorithm(), runtimeClass: cipher.getClass().getName(), providerName: provider.getName(), providerVersion: provider.getVersion(), providerInfo: provider.getInfo(), providerClass: provider.getClass().getName(), updateInputs: [], updateInputsLen: [], updateOutputs: [], updateOutputsLen: [] }; cipherStates.set(objectId, state); return cipher; }; } catch (e) { console.log("[+] ERROR - 3. [Cipher.getInstance(String transformation, Provider provider) -> static Cipher]: " + e.message); } // ----------------------- // | Cipher.init overloads | // ----------------------- try { // 1. [Cipher.init(int opmode, Certificate certificate) -> void] const initKey = Cipher.init.overload( "int", "java.security.cert.Certificate" ); initKey.implementation = function (opmode, certificate) { initKey.call(this, opmode, certificate); const objectId = getObjectId("Cipher", this); let state = cipherStates.get(objectId); if (state !== undefined) { state.initOverload = "1. [Cipher.init(int opmode, Certificate certificate) -> void]"; state.opmode = opmode; state.opmodeString = describeOpmode(opmode); state.certificateType = certificate.getType(); state.publicKey = bytesToHex(certificate.getPublicKey().getEncoded(), 0, 0, maxPrintableLength); try { state.blockSize = this.getBlockSize(); } catch (e) { state.blockSize = ""; } state.lastSeen = Date.now(); }; }; } catch (e) { console.log("[+] ERROR - 1. [Cipher.init(int opmode, Certificate certificate) -> void]: " + e.message); } try { // 2. [Cipher.init(int opmode, Certificate certificate, SecureRandom random) -> void] const initKey = Cipher.init.overload( "int", "java.security.cert.Certificate", "java.security.SecureRandom" ); initKey.implementation = function (opmode, certificate, random) { initKey.call(this, opmode, certificate, random); const objectId = getObjectId("Cipher", this); let state = cipherStates.get(objectId); if (state !== undefined) { state.initOverload = "2. [Cipher.init(int opmode, Certificate certificate, SecureRandom random) -> void]"; state.opmode = opmode; state.opmodeString = describeOpmode(opmode); state.certificateType = certificate.getType(); state.publicKey = bytesToHex(certificate.getPublicKey().getEncoded(), 0, 0, maxPrintableLength); try { state.blockSize = this.getBlockSize(); } catch (e) { state.blockSize = ""; } state.lastSeen = Date.now(); }; }; } catch (e) { console.log("[+] ERROR - 2. [Cipher.init(int opmode, Certificate certificate, SecureRandom random) -> void]: " + e.message); } try { // 3. [Cipher.init(int opmode, Key key) -> void] const initKey = Cipher.init.overload( "int", "java.security.Key" ); initKey.implementation = function (opmode, key) { initKey.call(this, opmode, key); const objectId = getObjectId("Cipher", this); let state = cipherStates.get(objectId); if (state !== undefined) { state.initOverload = "3. [Cipher.init(int opmode, Key key) -> void]"; state.opmode = opmode; state.opmodeString = describeOpmode(opmode); try { state.blockSize = this.getBlockSize(); } catch (e) { state.blockSize = ""; } logKey(state, key); state.lastSeen = Date.now(); }; }; } catch (e) { console.log("[+] ERROR - 3. [Cipher.init(int opmode, Key key) -> void]: " + e.message); } try { // 4. [Cipher.init(int opmode, Key key, AlgorithmParameters params) -> void] const initKey = Cipher.init.overload( "int", "java.security.Key", "java.security.AlgorithmParameters" ); initKey.implementation = function (opmode, key, params) { initKey.call(this, opmode, key, params); const objectId = getObjectId("Cipher", this); let state = cipherStates.get(objectId); if (state !== undefined) { state.initOverload = "4. [Cipher.init(int opmode, Key key, AlgorithmParameters params) -> void]"; state.opmode = opmode; state.opmodeString = describeOpmode(opmode); try { state.blockSize = this.getBlockSize(); } catch (e) { state.blockSize = ""; } logKey(state, key); logAlgorithmParameters(state, params); state.lastSeen = Date.now(); }; }; } catch (e) { console.log("[+] ERROR - 4. [Cipher.init(int opmode, Key key, AlgorithmParameters params) -> void]: " + e.message); } try { // 5. [Cipher.init(int opmode, Key key, AlgorithmParameterSpec params) -> void] const initKey = Cipher.init.overload( "int", "java.security.Key", "java.security.spec.AlgorithmParameterSpec" ); initKey.implementation = function (opmode, key, params) { initKey.call(this, opmode, key, params); const objectId = getObjectId("Cipher", this); let state = cipherStates.get(objectId); if (state !== undefined) { state.initOverload = "5. [Cipher.init(int opmode, Key key, AlgorithmParameterSpec params) -> void]"; state.opmode = opmode; state.opmodeString = describeOpmode(opmode); try { state.blockSize = this.getBlockSize(); } catch (e) { state.blockSize = ""; } logKey(state, key); logAlgorithmParameterSpec(state, params); state.lastSeen = Date.now(); }; }; } catch (e) { console.log("[+] ERROR - 5. [Cipher.init(int opmode, Key key, AlgorithmParameterSpec params) -> void]: " + e.message); } try { // 6. [Cipher.init(int opmode, Key key, AlgorithmParameterSpec params, SecureRandom random) -> void] const initKey = Cipher.init.overload( "int", "java.security.Key", "java.security.spec.AlgorithmParameterSpec", "java.security.SecureRandom" ); initKey.implementation = function (opmode, key, params, random) { initKey.call(this, opmode, key, params, random); const objectId = getObjectId("Cipher", this); let state = cipherStates.get(objectId); if (state !== undefined) { state.initOverload = "6. [Cipher.init(int opmode, Key key, AlgorithmParameterSpec params, SecureRandom random) -> void]"; state.opmode = opmode; state.opmodeString = describeOpmode(opmode); try { state.blockSize = this.getBlockSize(); } catch (e) { state.blockSize = ""; } logKey(state, key); logAlgorithmParameterSpec(state, params); state.secureRandom = random !== null ? String(random.getClass().getName()) : ""; state.lastSeen = Date.now(); }; }; } catch (e) { console.log("[+] ERROR - 6. [Cipher.init(int opmode, Key key, AlgorithmParameterSpec params, SecureRandom random) -> void]: " + e.message); } try { // 7. [Cipher.init(int opmode, Key key, AlgorithmParameters params, SecureRandom random) -> void] const initKey = Cipher.init.overload( "int", "java.security.Key", "java.security.AlgorithmParameters", "java.security.SecureRandom" ); initKey.implementation = function (opmode, key, params, random) { initKey.call(this, opmode, key, params, random); const objectId = getObjectId("Cipher", this); let state = cipherStates.get(objectId); if (state !== undefined) { state.initOverload = "7. [Cipher.init(int opmode, Key key, AlgorithmParameters params, SecureRandom random) -> void]"; state.opmode = opmode; state.opmodeString = describeOpmode(opmode); try { state.blockSize = this.getBlockSize(); } catch (e) { state.blockSize = ""; } logKey(state, key); logAlgorithmParameters(state, params); state.secureRandom = random !== null ? String(random.getClass().getName()) : ""; state.lastSeen = Date.now(); }; }; } catch (e) { console.log("[+] ERROR - 7. [Cipher.init(int opmode, Key key, AlgorithmParameters params, SecureRandom random) -> void]: " + e.message); } try { // 8. [Cipher.init(int opmode, Key key, SecureRandom random) -> void] const initKey = Cipher.init.overload( "int", "java.security.Key", "java.security.SecureRandom" ); initKey.implementation = function (opmode, key, random) { initKey.call(this, opmode, key, random); const objectId = getObjectId("Cipher", this); let state = cipherStates.get(objectId); if (state !== undefined) { state.initOverload = "8. [Cipher.init(int opmode, Key key, SecureRandom random) -> void]"; state.opmode = opmode; state.opmodeString = describeOpmode(opmode); try { state.blockSize = this.getBlockSize(); } catch (e) { state.blockSize = ""; } logKey(state, key); state.secureRandom = random !== null ? String(random.getClass().getName()) : ""; state.lastSeen = Date.now(); }; }; } catch (e) { console.log("[+] ERROR - 8. [Cipher.init(int opmode, Key key, SecureRandom random) -> void]: " + e.message); } // ------------------------- // | Cipher.update overloads | // ------------------------- try { // 1. [Cipher.update(byte[] input) -> byte[]] const updateKey = Cipher.update.overload( "[B" ); updateKey.implementation = function (input) { const objectId = getObjectId("Cipher", this); const output = updateKey.call(this, input); let state = cipherStates.get(objectId); if (state !== undefined) { state.updateOverload = "1. [Cipher.update(byte[] input) -> byte[]]"; state.updateInputs.push(bytesToHex(input, 0, 0, maxPrintableLength)); state.updateInputsLen.push(input.length); state.updateOutputs.push(bytesToHex(output, 0, 0, maxPrintableLength)); state.updateOutputsLen.push(output.length); state.lastSeen = Date.now(); } return output; }; } catch (e) { console.log("[+] ERROR - 1. [Cipher.update(byte[] input) -> byte[]]: " + e.message); } try { // 2. [Cipher.update(byte[] input, int inputOffset, int inputLen) -> byte[]] const updateKey = Cipher.update.overload( "[B", "int", "int" ); updateKey.implementation = function (input, inputOffset, inputLen) { const objectId = getObjectId("Cipher", this); const output = updateKey.call(this, input, inputOffset, inputLen); let state = cipherStates.get(objectId); if (state !== undefined) { state.updateOverload = "2. [Cipher.update(byte[] input, int inputOffset, int inputLen) -> byte[]]"; state.updateInputs.push(bytesToHex(input, inputOffset, inputLen, maxPrintableLength)); state.updateInputsLen.push(inputLen); if (output !== null) { state.updateOutputs.push(bytesToHex(output, 0, 0, maxPrintableLength)); state.updateOutputsLen.push(output.length); } else { state.updateOutputs.push(""); state.updateOutputsLen.push(0); } state.lastSeen = Date.now(); } return output; }; } catch (e) { console.log("[+] ERROR - 2. [Cipher.update(byte[] input, int inputOffset, int inputLen) -> byte[]]: " + e.message); } try { // 3. [Cipher.update(byte[] input, int inputOffset, int inputLen, byte[] output) -> int] const updateKey = Cipher.update.overload( "[B", "int", "int", "[B" ); updateKey.implementation = function (input, inputOffset, inputLen, output) { const objectId = getObjectId("Cipher", this); const outputLen = updateKey.call(this, input, inputOffset, inputLen, output); let state = cipherStates.get(objectId); if (state !== undefined) { state.updateOverload = "3. [Cipher.update(byte[] input, int inputOffset, int inputLen, byte[] output) -> int]"; state.updateInputs.push(bytesToHex(input, inputOffset, inputLen, maxPrintableLength)); state.updateInputsLen.push(inputLen); if (outputLen > 0) { state.updateOutputs.push(bytesToHex(output, 0, outputLen, maxPrintableLength)); state.updateOutputsLen.push(outputLen); } else { state.updateOutputs.push(""); state.updateOutputsLen.push(0); } state.lastSeen = Date.now(); } return outputLen; }; } catch (e) { console.log("[+] ERROR - 3. [Cipher.update(byte[] input, int inputOffset, int inputLen, byte[] output) -> int]: " + e.message); } try { // 4. [Cipher.update(byte[] input, int inputOffset, int inputLen, byte[] output, int outputOffset) -> int] const updateKey = Cipher.update.overload( "[B", "int", "int", "[B", "int" ); updateKey.implementation = function (input, inputOffset, inputLen, output, outputOffset) { const objectId = getObjectId("Cipher", this); const outputLen = updateKey.call(this, input, inputOffset, inputLen, output, outputOffset); let state = cipherStates.get(objectId); if (state !== undefined) { state.updateOverload = "4. [Cipher.update(byte[] input, int inputOffset, int inputLen, byte[] output, int outputOffset) -> int]"; state.updateInputs.push(bytesToHex(input, inputOffset, inputLen, maxPrintableLength)); state.updateInputsLen.push(inputLen); if (outputLen > 0) { state.updateOutputs.push(bytesToHex(output, outputOffset, outputLen, maxPrintableLength)); state.updateOutputsLen.push(outputLen); } else { state.updateOutputs.push(""); state.updateOutputsLen.push(0); } state.lastSeen = Date.now(); } return outputLen; }; } catch (e) { console.log("[+] ERROR - 4. [Cipher.update(byte[] input, int inputOffset, int inputLen, byte[] output, int outputOffset) -> int]: " + e.message); } // -------------------------- // | Cipher.doFinal overloads | // -------------------------- try { // 1. [Cipher.doFinal() -> byte[]] const finalKey = Cipher.doFinal.overload(); finalKey.implementation = function () { const objectId = getObjectId("Cipher", this); const output = finalKey.call(this); let state = cipherStates.get(objectId); if (output !== null && state !== undefined) { state.finalOverload = "1. [Cipher.doFinal() -> byte[]]"; state.bytesWritten = output.length; if (state.opmode === 1) { state.output = bytesToHex(output, 0, 0, maxPrintableLength); } else if (state.opmode === 2) { state.output = bytesToString(output, 0, 0, maxPrintableLength); } state.outputFingerprint = fingerprint(output, typeof (output)); state.stackTrace = traceStack(); state.lastSeen = Date.now(); logging(state); } return output; }; } catch (e) { console.log("[+] ERROR - 1. [Cipher.doFinal() -> byte[]]: " + e.message); } try { // 2. [Cipher.doFinal(byte[] input) -> byte[]] const finalKey = Cipher.doFinal.overload( "[B" ); finalKey.implementation = function (input) { const objectId = getObjectId("Cipher", this); const output = finalKey.call(this, input); let state = cipherStates.get(objectId); if (output !== null && state !== undefined) { state.finalOverload = "2. [Cipher.doFinal(byte[] input) -> byte[]]"; state.bytesWritten = output.length; if (state.opmode === 1) { state.input = bytesToString(input, 0, 0, maxPrintableLength); state.output = bytesToHex(output, 0, 0, maxPrintableLength); } else if (state.opmode === 2) { state.input = bytesToHex(input, 0, 0, maxPrintableLength); state.output = bytesToString(output, 0, 0, maxPrintableLength); } state.outputFingerprint = fingerprint(output, typeof (output)); state.stackTrace = traceStack(); state.lastSeen = Date.now(); logging(state); } return output; }; } catch (e) { console.log("[+] ERROR - 2. [Cipher.doFinal(byte[] input) -> byte[]]: " + e.message); } try { // 3. [Cipher.doFinal(byte[] output, int outputOffset) -> int] const finalKey = Cipher.doFinal.overload( "[B", "int" ); finalKey.implementation = function (output, outputOffset) { const objectId = getObjectId("Cipher", this); const outputLen = finalKey.call(this, output, outputOffset); let state = cipherStates.get(objectId); if (outputLen > 0 && state !== undefined) { state.finalOverload = "3. [Cipher.doFinal(byte[] output int outputOffset) -> int]"; state.bytesWritten = outputLen; if (state.opmode === 1) { state.output = bytesToHex(output, outputOffset, outputLen, maxPrintableLength); } else if (state.opmode === 2) { state.output = bytesToString(output, outputOffset, outputLen, maxPrintableLength); } state.outputFingerprint = fingerprint(output, typeof (output)); state.stackTrace = traceStack(); state.lastSeen = Date.now(); logging(state); } return outputLen; }; } catch (e) { console.log("[+] ERROR - 3. [Cipher.doFinal(byte[] output int outputOffset) -> int]: " + e.message); } try { // 4. [Cipher.doFinal(byte[] input, int inputOffset, int inputLen) -> byte[]] const finalKey = Cipher.doFinal.overload( "[B", "int", "int" ); finalKey.implementation = function (input, inputOffset, inputLen) { const objectId = getObjectId("Cipher", this); const output = finalKey.call(this, input, inputOffset, inputLen); let state = cipherStates.get(objectId); if (state !== undefined) { state.finalOverload = "4. [Cipher.doFinal(byte[] input int inputOffset, int inputLen) -> byte[]]"; state.bytesWritten = output.length; if (state.opmode === 1) { state.input = bytesToString(input, inputOffset, inputLen, maxPrintableLength); state.output = bytesToHex(output, 0, 0, maxPrintableLength); } else if (state.opmode === 2) { state.input = bytesToHex(input, inputOffset, inputLen, maxPrintableLength); state.output = bytesToString(output, 0, 0, maxPrintableLength); } state.outputFingerprint = fingerprint(output, typeof (output)); state.stackTrace = traceStack(); state.lastSeen = Date.now(); logging(state); } return output; }; } catch (e) { console.log("[+] ERROR - 4. [Cipher.doFinal(byte[] input int inputOffset, int inputLen) -> byte[]]: " + e.message); } try { // 5. [Cipher.doFinal(byte[] input, int inputOffset, int inputLen, byte[] output) -> int] const finalKey = Cipher.doFinal.overload( "[B", "int", "int", "[B" ); finalKey.implementation = function (input, inputOffset, inputLen, output) { const objectId = getObjectId("Cipher", this); const outputLen = finalKey.call(this, input, inputOffset, inputLen, output); let state = cipherStates.get(objectId); if (outputLen > 0 && state !== undefined) { state.finalOverload = "5. [Cipher.doFinal(byte[] input int inputOffset, int inputLen, byte[] output) -> int]"; state.bytesWritten = outputLen; if (state.opmode === 1) { state.input = bytesToString(input, inputOffset, inputLen, maxPrintableLength); state.output = bytesToHex(output, 0, outputLen, maxPrintableLength); } else if (state.opmode === 2) { state.input = bytesToHex(input, inputOffset, inputLen, maxPrintableLength); state.output = bytesToString(output, 0, outputLen, maxPrintableLength); } state.outputFingerprint = fingerprint(output, typeof (output)); state.stackTrace = traceStack(); state.lastSeen = Date.now(); logging(state); } return outputLen; }; } catch (e) { console.log("[+] ERROR - 5. [Cipher.doFinal(byte[] input int inputOffset, int inputLen, byte[] output) -> int]: " + e.message); } try { // 6. [Cipher.doFinal(byte[] input, int inputOffset, int inputLen, byte[] output, int outputOffset) -> int] const finalKey = Cipher.doFinal.overload( "[B", "int", "int", "[B", "int" ); finalKey.implementation = function (input, inputOffset, inputLen, output, outputOffset) { const objectId = getObjectId("Cipher", this); const outputLen = finalKey.call(this, input, inputOffset, inputLen, output, outputOffset); let state = cipherStates.get(objectId); if (outputLen > 0 && state !== undefined) { state.finalOverload = "6. [Cipher.doFinal(byte[] input int inputOffset, int inputLen, byte[] output, int outputOffset) -> int]"; state.bytesWritten = outputLen; if (state.opmode === 1) { state.input = bytesToString(input, inputOffset, inputLen, maxPrintableLength); state.output = bytesToHex(output, outputOffset, outputLen, maxPrintableLength); } else if (state.opmode === 2) { state.input = bytesToHex(input, inputOffset, inputLen, maxPrintableLength); state.output = bytesToString(output, outputOffset, outputLen, maxPrintableLength); } state.outputFingerprint = fingerprint(output, typeof (output)); state.stackTrace = traceStack(); state.lastSeen = Date.now(); logging(state); } return outputLen; }; } catch (e) { console.log("[+] ERROR - 6. [Cipher.doFinal(byte[] input int inputOffset, int inputLen, byte[] output, int outputOffset) -> int]: " + e.message); } try { // 7. [Cipher.doFinal(ByteBuffer input, ByteBuffer output) -> int] const finalKey = Cipher.doFinal.overload( "java.nio.ByteBuffer", "java.nio.ByteBuffer" ); finalKey.implementation = function (input, output) { const objectId = getObjectId("Cipher", this); const outputLen = finalKey.call(this, input, output); const duplicateInput = input.duplicate(); const duplicateOutput = output.duplicate(); let state = cipherStates.get(objectId); if (state !== undefined) { state.finalOverload = "7. [Cipher.doFinal(ByteBuffer input, ByteBuffer output) -> int]"; state.bytesWritten = outputLen; if (state.opmode === 1) { state.input = bytesToString(duplicateInput, 0, 0, maxPrintableLength); state.output = bytesToHex(duplicateOutput, 0, 0, maxPrintableLength); } else if (state.opmode === 2) { state.input = bytesToHex(duplicateInput, 0, 0, maxPrintableLength); state.output = bytesToString(duplicateOutput, 0, 0, maxPrintableLength); } state.outputFingerprint = fingerprint(output, typeof (output)); state.stackTrace = traceStack(); state.lastSeen = Date.now(); logging(state); } return outputLen; }; } catch (e) { console.log("[+] ERROR - 7. [Cipher.doFinal(ByteBuffer input, ByteBuffer output) -> int]: " + e.message); } // --------------- // | Mac overloads | // --------------- const Mac = Java.use("javax.crypto.Mac"); // ----------------------------- // | Mac.getInstance() overloads | // ----------------------------- try {// 1. [Mac.getInstance(java.lang.String) -> static Mac] const instanceKey = Mac.getInstance.overload( "java.lang.String" ); instanceKey.implementation = function (transformation) { const instance = instanceKey.call(Mac, transformation); const provider = instance.getProvider(); const objectId = getObjectId("Mac", instance); const state = { objectId: objectId, timestamp: Date.now(), lastSeen: Date.now(), instanceOverload: "1. [Mac.getInstance(java.lang.String) -> static Mac]", transformation: transformation, algorithm: instance.getAlgorithm(), runtimeClass: instance.getClass().getName(), providerName: provider.getName(), providerVersion: provider.getVersion(), providerInfo: provider.getInfo(), providerClass: provider.getClass().getName(), updateCount: 0, updates: [] }; macStates.set(objectId, state); return instance; } } catch (e) { console.log("[+] ERROR - 1. [Mac.getInstance(java.lang.String) -> static Mac]: " + e.message); } try { // 2. [Mac.getInstance(java.lang.String, java.lang.String) -> static Mac] const instanceKey = Mac.getInstance.overload( "java.lang.String", "java.lang.String" ); instanceKey.implementation = function (transformation, provider) { const instance = instanceKey.call(Mac, transformation, provider); const macProvider = instance.getProvider(); const objectId = getObjectId("Mac", instance); const state = { objectId: objectId, timestamp: Date.now(), lastSeen: Date.now(), instanceOverload: "2. [Mac.getInstance(java.lang.String, java.lang.String) -> static Mac]", transformation: transformation, algorithm: instance.getAlgorithm(), runtimeClass: instance.getClass().getName(), providerName: macProvider.getName(), providerVersion: macProvider.getVersion(), providerInfo: macProvider.getInfo(), providerClass: macProvider.getClass().getName(), updateCount: 0, updates: [] }; macStates.set(objectId, state); return instance; }; } catch (e) { console.log("[+] ERROR - 2. [Mac.getInstance(java.lang.String, java.lang.String) -> static Mac]: " + e.message); } try { // 3. [Mac.getInstance(java.lang.String, java.security.Provider) -> static Mac] const instanceKey = Mac.getInstance.overload( "java.lang.String", "java.security.Provider" ); instanceKey.implementation = function (transformation, provider) { const instance = instanceKey.call(Mac, transformation, provider); const objectId = getObjectId("Mac", instance); const state = { objectId: objectId, timestamp: Date.now(), lastSeen: Date.now(), instanceOverload: "3. [Mac.getInstance(java.lang.String, java.security.Provider) -> static Mac]", transformation: transformation, algorithm: instance.getAlgorithm(), runtimeClass: instance.getClass().getName(), providerName: provider.getName(), providerVersion: provider.getVersion(), providerInfo: provider.getInfo(), providerClass: provider.getClass().getName(), updateCount: 0, updates: [] }; macStates.set(objectId, state); return instance; }; } catch (e) { console.log("[+] ERROR - 3. [Mac.getInstance(java.lang.String, java.security.Provider) -> static Mac]: " + e.message); } // ---------------------- // | Mac.init() overloads | // ---------------------- try { // 1. [Mac.init(Key key) -> void] const macKey = Mac.init.overload( "java.security.Key" ); macKey.implementation = function (key) { macKey.call(this, key); const objectId = getObjectId("Mac", this); let state = macStates.get(objectId); if (state !== undefined) { state.initOverload = "1. [Mac.init(Key key) -> void]"; state.macLength = this.getMacLength(); logKey(state, key); state.lastSeen = Date.now(); } }; } catch (e) { console.log("[+] ERROR - 1. [Mac.init(Key key) -> void]: " + e.message); } try { // 2. [Mac.init(Key key, AlgorithmParameterSpec params) -> void] const macKey = Mac.init.overload( "java.security.Key", "java.security.spec.AlgorithmParameterSpec" ); macKey.implementation = function (key, params) { macKey.call(this, key, params); const objectId = getObjectId("Mac", this); let state = macStates.get(objectId); if (state !== undefined) { state.initOverload = "2. [Mac.init(Key key, AlgorithmParameterSpec params) -> void]"; logKey(state, key); state.parameters = params; logAlgorithmParameterSpec(state, params); state.lastSeen = Date.now(); } }; } catch (e) { console.log("[+] ERROR - 2. [Mac.init(Key key, AlgorithmParameterSpec params) -> void]: " + e.message); } try { // 1. [Mac.update(byte[] input) -> void] const macKey = Mac.update.overload( "[B" ); macKey.implementation = function (input) { macKey.call(this, input); const objectId = getObjectId("Mac", this); let state = macStates.get(objectId); if (state !== undefined) { state.updateOverload = "1. [Mac.update(byte[] input) -> void]"; state.updateCount++; state.updates.push(bytesToHex(input, 0, 0, maxPrintableLength)); state.lastSeen = Date.now(); } }; } catch (e) { console.log("[+] ERROR - 1. [Mac.update(byte[] input) -> void]: " + e.message); } try { // 2. [Mac.update(byte[] input, int offset, int len) -> void] const macKey = Mac.update.overload( "[B", "int", "int" ); macKey.implementation = function (input, offset, len) { macKey.call(this, input, offset, len); const objectId = getObjectId("Mac", this); let state = macStates.get(objectId); if (state !== undefined) { state.updateOverload = "2. [Mac.update(byte[] input, int offset, int len) -> void]"; state.updateCount++; state.updates.push(bytesToHex(input, offset, len, maxPrintableLength)); state.lastSeen = Date.now(); } }; } catch (e) { console.log("[+] ERROR - 2. [Mac.update(byte[] input, int offset, int len) -> void]: " + e.message); } // ------------------------- // | Mac.doFinal() overloads | // ------------------------- try { // 1. [Mac.doFinal() -> byte[]] const macKey = Mac.doFinal.overload(); macKey.implementation = function () { const output = macKey.call(this); const objectId = getObjectId("Mac", this); let state = macStates.get(objectId); if (state !== undefined) { state.finalOverload = "1. [Mac.doFinal() -> byte[]]"; const macLength = this.getMacLength(); state.bytesWritten = macLength; if (output !== null) { state.output = bytesToHex(output, 0, 0, maxPrintableLength); state.outputFingerprint = fingerprint(output, typeof (output)); } else { state.output = ""; } state.stackTrace = traceStack(); state.lastSeen = Date.now(); logging(state); }; return output; }; } catch (e) { console.log("[+] ERROR - 1. [Mac.doFinal() -> byte[]]: " + e.message); } try { // 2. [Mac.doFinal(byte[] input) -> byte[]] const macKey = Mac.doFinal.overload( "[B" ); macKey.implementation = function (input) { const output = macKey.call(this, input); const objectId = getObjectId("Mac", this); let state = macStates.get(objectId); if (state !== undefined) { state.finalOverload = "2. [Mac.doFinal(byte[] input) -> byte[]]"; state.inputHex = bytesToHex(input, 0, 0, maxPrintableLength); state.inputString = bytesToString(input, 0, 0, maxPrintableLength); state.inputFingerprint = fingerprint(input, typeof (input)); const macLength = this.getMacLength(); state.bytesWritten = macLength; state.updates.push(bytesToString(input, 0, 0, maxPrintableLength)); state.updateCount++; if (output !== null) { state.output = bytesToHex(output, 0, 0, maxPrintableLength); state.outputFingerprint = fingerprint(output, typeof (output)); } else { state.output = ""; } state.stackTrace = traceStack(); state.lastSeen = Date.now(); logging(state); }; return output; }; } catch (e) { console.log("[+] ERROR - 2. [Mac.doFinal(byte[] input) -> byte[]]: " + e.message); } try { // 3. [Mac.doFinal(byte[] output, int outOffset) -> void] const macKey = Mac.doFinal.overload( "[B", "int" ); macKey.implementation = function (output, outputOffset) { macKey.call(this, output, outputOffset); const objectId = getObjectId("Mac", this); let state = macStates.get(objectId); if (state !== undefined) { state.finalOverload = "3. [Mac.doFinal(byte[] output, int outOffset) -> void]"; const macLength = this.getMacLength(); state.bytesWritten = macLength; if (output !== null) { state.output = bytesToHex(output, outputOffset, macLength, maxPrintableLength); } else { state.output = ""; } state.stackTrace = traceStack(); state.lastSeen = Date.now(); logging(state); }; }; } catch (e) { console.log("[+] ERROR - 3. [Mac.doFinal(byte[] output, int outOffset) -> void]: " + e.message); } // ------------------ // | Base64 overloads | // ------------------ const Base64 = Java.use("android.util.Base64"); // ------------------------- // | Base64.encode overloads | // ------------------------- try { // 1. [Base64.encode(byte[] input, int flags) -> byte[]] const encodeKey = Base64.encode.overload( "[B", "int" ); encodeKey.implementation = function (input, flags) { const encodedString = encodeKey.call(this, input, flags); const objectId = "encodeBase64-" + encodeBase64Counter; const flagString = base64FlagsToString(flags); encodeBase64Counter++; const state = { objectId: objectId, timestamp: Date.now(), overload: "1. [Base64.encode(byte[] input, int flags) -> byte[]]", inputHex: bytesToHex(input, 0, 0, maxPrintableLength), inputString: bytesToString(input, 0, 0, maxPrintableLength), inputLength: input.length, flagNumerical: flags, flagString: flagString, outputHex: bytesToHex(encodedString, 0, 0, maxPrintableLength), outputString: bytesToString(encodedString, 0, 0, maxPrintableLength), outputLength: encodedString.length, inputFingerprint: fingerprint(input, typeof (input)), outputFingerprint: fingerprint(encodedString, typeof (encodedString)), stackTrace: traceStack() } if (state) logging(state); return encodedString; }; } catch (e) { console.log("[+] ERROR - 1. [Base64.encode(byte[] input, int flags) -> byte[]]: " + e.message); } try { // 2. [Base64.encode(byte[] input, int offset, int len, int flags) -> byte[]] const encodeKey = Base64.encode.overload( "[B", "int", "int", "int" ); encodeKey.implementation = function (input, offset, len, flags) { const encodedString = encodeKey.call(this, input, offset, len, flags); const objectId = "encodeBase64-" + encodeBase64Counter; const flagString = base64FlagsToString(flags); encodeBase64Counter++; const state = { objectId: objectId, timestamp: Date.now(), overload: "2. [Base64.encode(byte[] input, int offset, int len, int flags]) -> byte[]]", inputHex: bytesToHex(input, offset, len, maxPrintableLength), inputString: bytesToString(input, offset, len, maxPrintableLength), inputLength: input.length, inputOffset: offset, inputLen: len, flagNumerical: flags, flagString: flagString, outputHex: bytesToHex(encodedString, 0, 0, maxPrintableLength), outputString: bytesToString(encodedString, 0, 0, maxPrintableLength), outputLength: encodedString.length, inputFingerprint: fingerprint(input, typeof (input)), outputFingerprint: fingerprint(encodedString, typeof (encodedString)), stackTrace: traceStack() } if (state) logging(state); return encodedString; }; } catch (e) { console.log("[+] ERROR - 2. [Base64.encode(byte[] input, int offset, int len, int flags]) -> byte[]]: " + e.message); } // --------------------------------- // | Base64.encodeToString overloads | // --------------------------------- try { // 1. [Base64.encodeToString(byte[] input, int flags) -> java.lang.String] const encodeKey = Base64.encodeToString.overload( "[B", "int" ); encodeKey.implementation = function (input, flags) { const encodedString = encodeKey.call(this, input, flags); const objectId = "encodeToStringBase64-" + encodeToStringBase64Counter; const flagString = base64FlagsToString(flags); encodeToStringBase64Counter++; let truncated = truncateBase64(encodedString); const state = { objectId: objectId, timestamp: Date.now(), overload: "1. [Base64.encodeToString(byte[] input, int flags) -> java.lang.String]", inputHex: bytesToHex(input, 0, 0, maxPrintableLength), inputString: bytesToString(input, 0, 0, maxPrintableLength), inputLength: input.length, flagNumerical: flags, flagString: flagString, outputString: truncated, outputLength: encodedString.length, inputFingerprint: fingerprint(input, typeof (input)), outputFingerprint: fingerprint(encodedString, typeof (encodedString)), stackTrace: traceStack() } if (state) logging(state); return encodedString; }; } catch (e) { console.log("[+] ERROR - 1. [Base64.encodeToString(byte[] input, int flags) -> java.lang.String]: " + e.message); } try { // 2. [Base64.encodeToString(byte[] input, int offset, int len, int flags) -> java.lang.String] const encodeKey = Base64.encodeToString.overload( "[B", "int", "int", "int" ); encodeKey.implementation = function (input, offset, len, flags) { const encodedString = encodeKey.call(this, input, offset, len, flags); const objectId = "encodeToStringBase64-" + encodeToStringBase64Counter; const flagString = base64FlagsToString(flags); encodeToStringBase64Counter++; let truncated = truncateBase64(encodedString); const state = { objectId: objectId, timestamp: Date.now(), overload: "2. [Base64.encodeToString(byte[input, int offset, int len, int flags]) -> java.lang.String]", inputHex: bytesToHex(input, offset, len, maxPrintableLength), inputString: bytesToString(input, offset, len, maxPrintableLength), inputLength: input.length, inputOffset: offset, inputLen: len, flagNumerical: flags, flagString: flagString, outputString: truncated, outputLength: encodedString.length, inputFingerprint: fingerprint(input, typeof (input)), outputFingerprint: fingerprint(encodedString, typeof (encodedString)), stackTrace: traceStack() } if (state) logging(state); return encodedString; }; } catch (e) { console.log("[+] ERROR - 2. [Base64.encodeToString(byte[input, int offset, int len, int flags]) -> java.lang.String]: " + e.message); } // ------------------------- // | Base64.decode overloads | // ------------------------- try { // 1. [Base64.decode(java.lang.String str, int flags) -> byte[] const decodeKey = Base64.decode.overload( "java.lang.String", "int" ); decodeKey.implementation = function (str, flags) { const decodedString = decodeKey.call(this, str, flags); const objectId = "decodeBase64-" + decodeBase64Counter; const flagString = base64FlagsToString(flags); decodeBase64Counter++; let truncated = truncateBase64(str); const state = { objectId: objectId, timestamp: Date.now(), overload: "1. [Base64.decode(java.lang.String str, int flags) -> byte[]]", encodedInput: truncated, inputLength: str.length, flagNumerical: flags, flagString: flagString, outputHex: bytesToHex(decodedString, 0, 0, maxPrintableLength), outputString: bytesToString(decodedString, 0, 0, maxPrintableLength), outputLength: decodedString.length, inputFingerprint: fingerprint(str, typeof (str)), outputFingerprint: fingerprint(decodedString, typeof (decodedString)), stackTrace: traceStack() } if (state) logging(state); return decodedString; }; } catch (e) { console.log("[+] ERROR - 1. [Base64.decode(java.lang.String str, int flags) -> byte[]]: " + e.message); } try { // 2. [Base64.decode(byte[] input, int flags) -> byte[]] const decodeKey = Base64.decode.overload( "[B", "int" ); decodeKey.implementation = function (input, flags) { const decodedString = decodeKey.call(this, input, flags); const objectId = "decodeBase64-" + decodeBase64Counter; const flagString = base64FlagsToString(flags); decodeBase64Counter++; const state = { objectId: objectId, timestamp: Date.now(), overload: "2. [Base64.decode(byte[] input, int flags) -> byte[]]", encodedInputHex: bytesToHex(input, 0, 0, maxPrintableLength), encodedInputString: bytesToString(input, 0, 0, maxPrintableLength), inputLength: input.length, flagNumerical: flags, flagString: flagString, outputHex: bytesToHex(decodedString, 0, 0, maxPrintableLength), outputString: bytesToString(decodedString, 0, 0, maxPrintableLength), outputLength: decodedString.length, inputFingerprint: fingerprint(input, typeof (input)), outputFingerprint: fingerprint(decodedString, typeof (decodedString)), stackTrace: traceStack() } if (state) logging(state); return decodedString; }; } catch (e) { console.log("[+] ERROR - 2. [Base64.decode(byte[] input, int flags) -> byte[]]: " + e.message); } try { // 3. [Base64.decode(byte[] input, int offset, int len, int flags) -> byte[]] const decodeKey = Base64.decode.overload( "[B", "int", "int", "int" ); decodeKey.implementation = function (input, offset, len, flags) { const decodedString = decodeKey.call(this, input, offset, len, flags); const objectId = "decodeBase64-" + decodeBase64Counter; const flagString = base64FlagsToString(flags); decodeBase64Counter++; const state = { objectId: objectId, timestamp: Date.now(), overload: "3. [Base64.decode(byte[] input, int offset, int len, int flags) -> byte[]]", encodedInputHex: bytesToHex(input, offset, len, maxPrintableLength), encodedInputString: bytesToString(input, offset, len, maxPrintableLength), inputLength: input.length, flagNumerical: flags, flagString: flagString, outputHex: bytesToHex(decodedString, 0, 0, maxPrintableLength), outputString: bytesToString(decodedString, 0, 0, maxPrintableLength), outputLength: decodedString.length, inputFingerprint: fingerprint(input, typeof (input)), outputFingerprint: fingerprint(decodedString, typeof (decodedString)), stackTrace: traceStack() } if (state) logging(state); return decodedString; }; } catch (e) { console.log("[+] ERROR - 3. [Base64.decode(byte[] input, int offset, int len, int flags) -> byte[]]: " + e.message); } // ------------------------- // | MessageDigest overloads | // ------------------------- const MessageDigest = Java.use("java.security.MessageDigest"); // --------------------------------------- // | MessageDigest.getInstance() overloads | // --------------------------------------- try {// 1. [MessageDigest.getInstance(java.lang.String) -> static MessageDigest] const instanceKey = MessageDigest.getInstance.overload( "java.lang.String" ); instanceKey.implementation = function (transformation) { const digest = instanceKey.call(MessageDigest, transformation); const provider = digest.getProvider(); const objectId = getObjectId("MessageDigest", digest); const state = { objectId: objectId, timestamp: Date.now(), lastSeen: Date.now(), instanceOverload: "1. [MessageDigest.getInstance(java.lang.String) -> static MessageDigest]", transformation: transformation, algorithm: digest.getAlgorithm(), runtimeClass: digest.getClass().getName(), providerName: provider.getName(), providerVersion: provider.getVersion(), providerInfo: provider.getInfo(), providerClass: provider.getClass().getName(), updateInputs: [], updateInputsLen: [], updateOutputs: [], updateOutputsLen: [] }; messageDigestStates.set(objectId, state); return digest; } } catch (e) { console.log("[+] ERROR - 1. [MessageDigest.getInstance(java.lang.String) -> static MessageDigest]: " + e.message); } try { // 2. [MessageDigest.getInstance(String transformation, String provider) -> static MessageDigest] const instanceKey = MessageDigest.getInstance.overload( "java.lang.String", "java.lang.String" ); instanceKey.implementation = function (transformation, provider) { const digest = instanceKey.call(MessageDigest, transformation, provider); const digestProvider = digest.getProvider(); const objectId = getObjectId("MessageDigest", digest); const state = { objectId: objectId, timestamp: Date.now(), lastSeen: Date.now(), instanceOverload: "2. [MessageDigest.getInstance(String transformation, String provider) -> static MessageDigest]", transformation: transformation, algorithm: digest.getAlgorithm(), runtimeClass: digest.getClass().getName(), providerName: digestProvider.getName(), providerVersion: digestProvider.getVersion(), providerInfo: digestProvider.getInfo(), providerClass: digestProvider.getClass().getName(), updateInputs: [], updateInputsLen: [], updateOutputs: [], updateOutputsLen: [] }; messageDigestStates.set(objectId, state); return digest; }; } catch (e) { console.log("[+] ERROR - 2. [MessageDigest.getInstance(String transformation, String provider) -> static MessageDigest]: " + e.message); } try { // 3. [MessageDigest.getInstance(String transformation, Provider provider) -> static MessageDigest] const instanceKey = MessageDigest.getInstance.overload( "java.lang.String", "java.security.Provider" ); instanceKey.implementation = function (transformation, provider) { const digest = instanceKey.call(MessageDigest, transformation, provider); const objectId = getObjectId("MessageDigest", digest); const state = { objectId: objectId, timestamp: Date.now(), lastSeen: Date.now(), instanceOverload: "3. [MessageDigest.getInstance(String transformation, Provider provider) -> static MessageDigest]", transformation: transformation, algorithm: digest.getAlgorithm(), runtimeClass: digest.getClass().getName(), providerName: provider.getName(), providerVersion: provider.getVersion(), providerInfo: provider.getInfo(), providerClass: provider.getClass().getName(), updateInputs: [], updateInputsLen: [], updateOutputs: [], updateOutputsLen: [] }; messageDigestStates.set(objectId, state); return digest; }; } catch (e) { console.log("[+] ERROR - 3. [MessageDigest.getInstance(String transformation, Provider provider) -> static MessageDigest]: " + e.message); } // ---------------------------------- // | MessageDigest.update() overloads | // ---------------------------------- try { // 1. [MessageDigest.update(byte[] input) -> void] const digestKey = MessageDigest.update.overload( "[B" ); digestKey.implementation = function (input) { digestKey.call(this, input); const objectId = getObjectId("MessageDigest", this); let state = messageDigestStates.get(objectId); if (state !== undefined) { state.updateOverload = "1. [MessageDigest.update(byte[] input) -> void]"; state.updateInputs.push(bytesToHex(input, 0, 0, maxPrintableLength)); state.updateInputsLen.push(input.length); state.lastSeen = Date.now(); } }; } catch (e) { console.log("[+] ERROR - 1. [MessageDigest.update(byte[] input) -> void]: " + e.message); } try { // 2. [MessageDigest.update(byte[] input, int offset, int len) -> void] const digestKey = MessageDigest.update.overload( "[B", "int", "int" ); digestKey.implementation = function (input, offset, len) { digestKey.call(this, input, offset, len); const objectId = getObjectId("MessageDigest", this); let state = messageDigestStates.get(objectId); let length = len - offset; if (state !== undefined) { state.updateOverload = "2. [MessageDigest.update(byte[] input, int offset, int len) -> void]"; state.updateInputs.push(bytesToHex(input, offset, len, maxPrintableLength)); state.updateInputsLen.push(length); state.lastSeen = Date.now(); } }; } catch (e) { console.log("[+] ERROR - 2. [MessageDigest.update(byte[] input, int offset, int len) -> void]: " + e.message); } // ---------------------------------- // | MessageDigest.digest() overloads | // ---------------------------------- try { // 1. [MessageDigest.digest() -> byte[]] const digestKey = MessageDigest.digest.overload(); digestKey.implementation = function () { const output = digestKey.call(this); const objectId = getObjectId("MessageDigest", this); let state = messageDigestStates.get(objectId); if (state !== undefined) { state.digestOverload = "1. [MessageDigest.digest() -> byte[]]"; if (output !== null) { state.digestedHash = bytesToHex(output, 0, 0, maxPrintableLength); state.digestedHashLength = output.length; state.digestedHashFingerprint = fingerprint(output, typeof(output)); state.lastSeen = Date.now(); } logging(state); resetDigestState(state); } return output; }; } catch (e) { console.log("[+] ERROR - 1. [MessageDigest.digest() -> byte[]]: " + e.message); } try { // 2. [MessageDigest.digest(byte[] input) -> byte[]] const digestKey = MessageDigest.digest.overload( "[B" ); digestKey.implementation = function (input) { const output = digestKey.call(this, input); const objectId = getObjectId("MessageDigest", this); let state = messageDigestStates.get(objectId); if (state !== undefined) { state.digestOverload = "2. [MessageDigest.digest(byte[] input) -> byte[]]"; state.updateInputs.push(bytesToHex(input, 0, 0, maxPrintableLength)); state.updateInputsLen.push(input.length); if (output !== null) { state.digestedHash = bytesToHex(output, 0, 0, maxPrintableLength); state.digestedHashLength = output.length; state.digestedHashFingerprint = fingerprint(output, typeof(output)); state.lastSeen = Date.now(); } logging(state); resetDigestState(state); } return output; }; } catch (e) { console.log("[+] ERROR - 2. [MessageDigest.digest(byte[] input) -> byte[]]: " + e.message); } try { // 3. [MessageDigest.digest(byte[] buf, int offset, int len) -> int] const digestKey = MessageDigest.digest.overload( "[B", "int", "int" ); digestKey.implementation = function (outputBuf, offset, len) { const outputLen = digestKey.call(this, outputBuf, offset, len); const objectId = getObjectId("MessageDigest", this); let state = messageDigestStates.get(objectId); if (state !== undefined) { state.digestOverload = "3. [MessageDigest.digest(byte[] input, int offset, int len) -> int]"; if (outputLen > 0) { state.digestedHash = bytesToHex(outputBuf, offset, len, maxPrintableLength); state.digestedHashLength = outputLen; state.digestedHashFingerprint = fingerprint(outputBuf, typeof(outputBuf)); state.lastSeen = Date.now(); } else { state.digestedHash = ""; state.digestedHashLength = 0; state.digestedHashFingerprint = fingerprint(outputBuf, typeof(outputBuf)); state.lastSeen = Date.now(); } logging(state); resetDigestState(state); } return outputLen; }; } catch (e) { console.log("[+] ERROR - 3. [MessageDigest.digest(byte[] input, int offset, int len) -> int]: " + e.message); } // -------------------------------- // | MessageDigest.reset() overload | // -------------------------------- try { // 1. [MessageDigest.reset() -> void] const digestKey = MessageDigest.reset.overload(); digestKey.implementation = function () { digestKey.call(this); const objectId = getObjectId("MessageDigest", this); let state = messageDigestStates.get(objectId); if (state !== undefined) { state.resetOverload = "1. [MessageDigest.reset() -> void]"; state.resetCount = (state.resetCount || 0) + 1; state.discardedUpdateInputs = state.updateInputs.slice(); state.discardedUpdateInputsLen = state.updateInputsLen.slice(); state.lastSeen = Date.now(); logging(state); resetDigestState(state); } }; } catch (e) { console.log("[+] ERROR - 1. [MessageDigest.reset() -> void]: " + e.message); } });

Project: Crypto-discovery