this is only useful for single paged files
- open getKey.js file and then load the page and paste the content in the dev tools (CTRL + SHIFT + I)
- you'll get the download url and the password key for the pdf
| const sdp = 'v=0\no=- 166855176514521964 2 IN IP4 127.0.0.1\ns=-\nt=0 0\na=msid-semantic:WMS *\na=group:BUNDLE audio1\nm=audio 9 UDP/TLS/RTP/SAVPF 111\nc=IN IP4 0.0.0.0\na=rtcp:9 IN IP4 0.0.0.0\na=ice-ufrag:someufrag\na=ice-pwd:somelongpwdwithenoughrandomness\na=fingerprint:sha-256 00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00\na=setup:actpass\na=mid:audio1\na=sendonly\na=rtcp-mux\na=rtcp-rsize\na=rtpmap:111 opus/48000/2\na=candidate:702786350 1 udp 41819902 8.8.8.8 60769 typ host\na=msid:stream1 audiotrack\n'; | |
| const ssrc = 'a=ssrc:1001 msid:stream1 audiotrack\n'; // a=ssrc:1001 cname:something\n'; | |
| const pc = new RTCPeerConnection({sdpSemantics: 'plan-b'}); | |
| pc.ontrack = e => { | |
| console.log('ONTRACK', e.track, e.streams); | |
| document.getElementById("testing").innerHTML = `ONTRACK: ${e.track} ${e.streams}`; | |
| }; | |
| pc.setRemoteDescription({type: 'offer', sdp: sdp + ssrc}) | |
| .then(() => pc.createAnswer()) |
| console.log("[*] SSL Pinning Bypasses"); | |
| console.log(`[*] Your frida version: ${Frida.version}`); | |
| console.log(`[*] Your script runtime: ${Script.runtime}`); | |
| /** | |
| * by incogbyte | |
| * Common functions | |
| * thx apkunpacker, NVISOsecurity, TheDauntless | |
| * Remember that sslpinning can be custom, and sometimes u need to reversing using ghidra,IDA or something like that. | |
| * !!! THIS SCRIPT IS NOT A SILVER BULLET !! |