forked from iGio90/NetworkRequests
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathscript.js
More file actions
87 lines (78 loc) · 2.79 KB
/
Copy pathscript.js
File metadata and controls
87 lines (78 loc) · 2.79 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
// api.hookNative is a shortcut of Interceptor attach
// api.findExport is a shortcut of Module.findExportByName
api.hookNative(api.findExport('send'), function(args) {
var what = Memory.readByteArray(args[1], parseInt(args[2]));
// send data to ui (data panel)
api.setData(Date.now() + ' send', what);
// return -1 to prevent thread break
return -1;
});
api.hookNative(api.findExport('SSL_write', 'libssl.so'), function(args) {
var what = Memory.readByteArray(args[1], parseInt(args[2]));
// send data to ui (data panel)
api.setData(Date.now() + ' SSL_write', what);
// return -1 to prevent thread break
return -1;
});
api.hookNative(api.findExport('recv'), {
onEnter: function (args) {
this.buf = args[1];
// return -1 to prevent thread break
return -1;
},
onLeave: function (ret) {
var what = Memory.readByteArray(this.buf, parseInt(ret));
// send data to ui (data panel)
api.setData(Date.now() + ' recv', what);
}
});
api.hookNative(api.findExport('SSL_read', 'libssl.so'), {
onEnter: function (args) {
this.buf = args[1];
return -1;
},
onLeave: function (ret) {
var what = Memory.readByteArray(this.buf, parseInt(ret));
// send data to ui (data panel)
api.setData(Date.now() + ' SSL_read', what);
}
});
// api.hookJava is a global shortcut to hook both java methods and class constructor
if (Java.available) {
Java.perform(function () {
var String = Java.use('java.lang.String');
var mediaType;
var bodyContent;
api.hookJava('okhttp3.RequestBody.create', function (args) {
mediaType = args[0];
bodyContent = args[1];
});
api.hookJava('okhttp3.Request$Builder.build', function () {
var a = this.build();
var s = a + '\n\n' +
'-=url=-\n' + a.url() + '\n\n' +
'-=headers=-\n' + a.headers();
if (a.body() !== null) {
s += '\n\n' + '-=body=-\n' + mediaType + '\n' + String.$new(bodyContent)
}
api.setData(Date.now() + ' okhttp3.Request', s);
return a;
});
api.hookJava('okhttp3.Response$Builder.build', function () {
var a = this.build();
var u;
try {
var source = a.peekBody(a.body().contentLength());
var buffer = Java.array('byte', source.bytes());
u = new Uint8Array(buffer);
} catch (e) {
return a;
}
var s = a + '\n\n' +
'-=headers=-\n' + a.headers() + '\n\n' +
'-=buffer=-\n' + hexdump(u.buffer);
api.setData(Date.now() + ' okhttp3.Response', s);
return a;
});
});
}