Skip to content

Instantly share code, notes, and snippets.

View liamcottle's full-sized avatar

Liam Cottle liamcottle

368 followers · 9 following
View GitHub Profile
@liamcottle
liamcottle / ss_mod.sh
Created April 3, 2023 08:25
Mod StorySave
# This script mods StorySave to bypass checkpoint_required/challenge_required in 2023
# exit when any command fails
set -e
# make sure StorySave.apk exists
if [ ! -f "StorySave.apk" ]; then
echo "StorySave.apk does not exist."
echo "Download latest StorySave apk from APK Mirror and then rename it to StorySave.apk"
echo "https://www.apkmirror.com/apk/liam-cottle/storysave/storysave-1-26-2-release/storysave-1-26-2-android-apk-download/"
@liamcottle
liamcottle / script.txt
Created December 29, 2021 14:15
Retrieve the public IP address of a specific Mikrotik RouterBoard interface.
:global getPublicIP do={
# tag for temporary configurations
:local tag "get-public-ip-via-$interface"
# service that provides public ip address in http response
:local lookupProtocol "https"
:local lookupHostname "api.ipify.org"
# add temporary address list for lookup service
@liamcottle
liamcottle / plex_maintenance_notification.js
Created August 15, 2021 17:23
A NodeJS script for sending custom notifications to Plex Users in the mobile app.
const axios = require('axios');
/**
* PLEX_TOKEN: Your X-Plex-Token
* PLEX_IDENTIFIER: Your Plex Server Identifier
* PLEX_SERVER_NAME: Your Plex Server Name
*/
const PLEX_TOKEN = '';
const PLEX_IDENTIFIER = '';
const PLEX_SERVER_NAME = '';
@liamcottle
liamcottle / attestation.md
Last active June 9, 2023 09:06
SafetyNet Attestation Bypass

SafetyNet Attestation Bypass

Proof that with a few hours work, you can easily provide aribitrary data to the Google SafetyNet API and receive a valid Attestation signed by attest.android.com.

I've captured the HARDWARE_BACKED flag. Check this comment.

This is only a software backed attestation, as you can see with the evaluationType=BASIC. I don't have any devices that support hardware backed attestations via TEE, however once I do, I'll be taking a look into them 🤠

  • nonce: base64(liam@liamcottle.com)
  • packageName: liam@liamcottle.com
@liamcottle
liamcottle / README.md
Last active March 5, 2024 10:23
Disable SSL Pinning on Instagram for Android

Disable SSL Pinning on Instagram for Android

Create the file /data/data/com.instagram.android/shared_prefs/devprefs.xml and add the following content. (You will need root access to modify it)

<?xml version='1.0' encoding='utf-8' standalone='yes' ?>
<map>
    <string name="debug_allow_user_certs_ttl">1557909551442:86400000</string>
    <boolean name="debug_allow_user_certs" value="true" />
    <boolean name="debug_disable_liger_fizz" value="true" />