Crypto-discovery
0 | 33
Uploaded by: @KostasEreksonas
Overloads for a variety of Cipher, android.util.Base64, Mac and MessageDigest methods
Overloads for a variety of Cipher, android.util.Base64, Mac and MessageDigest methods
• Bypassing SSL pinning, root detection, emulator detection, and anti-instrumentation checks across 40+ libraries and frameworks
Enumerate methods of cryptography / encoding related Java classes in Android application and list all available overloads for given methods
Jdkd
A Google Exploit
d
ffff
Intercept Flutter app traffic on physical Android devices in one script — no iptables, no reFlutter, no ProxyDroid. Tested: Dart 3.11.1 stable, arm64, Android 13
Intercept Flutter app traffic on x86_64 emulators in one script — no iptables, no reFlutter, no ProxyDroid. Tested: Android 12, x86_64, redroid 12.0.0
Intercept Flutter app traffic in one script — no iptables, no reFlutter, no ProxyDroid: Flutter TLS bypass — pattern-scans ssl_verify_peer_cert in libflutter.so (Dart 3.4–3.11, arm64), connect() redirect — rewrites TCP 80/443 to your proxy (Flutter ignores Android system proxy), safe_device bypass — optional gate bypass for apps using xamdesign/safe_device plugin. Tested: Dart 3.11.1 stable, arm64, Android 13
The FreeRASP Flutter plugin for iOS relies on a Flutter EventChannel to send security threat alerts from native iOS code to the Dart application layer. Due to the absence of integrity checks on the native callback responsible for forwarding these alerts, those callbacks can be replaced at runtime before it is stored by the plugin. The result is that the plugin continues to detect threats normally, but no alerts ever reach the Flutter application, effectively disabling all runtime protection silently and without causing any visible errors.
PT
A Frida script for tracing outgoing iOS network payloads before they leave the app process. It hooks NSURLSession, NSMutableURLRequest, NSJSONSerialization, and common NSString/NSData conversion paths to dump URLs, methods, headers, HTTP bodies, JSON objects, and interesting secrets such as flags, tokens, and keys.
Teste manually deeplinks
A universal Frida script to bypass application self-termination at both Java and native levels on Android. This effectively bypasses termination-based security mechanisms commonly used in root detection, emulator detection, tamper detection, and instrumentation checks. Designed for penetration testing, ethical hacking, reverse engineering, and security research on Android applications that intentionally shut themselves down when defensive checks are triggered.
Shopee Bypass SHPSSDK ( imtaqin.id )