D
dsty
New Member
- Joined
- September 26, 2026
- Messages
- 1
- Reaction score
- 0
- Points
- 0
- Thread Author
- #1
TOOL SPECIFICATIONS
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
* Target Application: Monilend Android Package (APK/SPLIT APK's v2.1.0-v2.4.2)
* API Architecture: RESTful HTTP/2 JSON endpoints with custom body encryption
* Execution Environment: Python 3.10+, Frida-Core 16.x, Android Debug Bridge (ADB)
* Device Requirements: Tested on Android 11 (API 30) and Android 13 (API 33) x86_64/arm64 emulators (Rooted environment required for Frida server execution)
* Dynamic Memory Patching: Automated Frida hook script to bypass client-side SSL/TLS certificate pining (TrustManagerImpl override) during application startup
* Payload Serialization & Injection: Constructs, encrypts, and transmits flattened JSON request payloads directly to target loan origination endpoints
* SSL Pinning Bypass: It actively disables the application's certificate validation checks, permitting the tool to intercept, view, and route HTTPS traffic without being blocked by network-level security controls.
* Cryptographic Key Interception: Intercepts runtime method parameters to dynamically extract temporary AES-256 session keys and IVs directly from memory prior to payload encryption.
* Session Management: Captures server-issued JWT tokens from response headers and automatically attaches required authorization headers to subsequent requests.
INCLUDED DELIVERABLES:
* loader .py: Mastere execution script managing ADB connection, Frida process spawing, and CLI log output
* hooks.js: Frida Javascript injection script containing SSL unpinning and AES key interception logic.
* payload_template.json: Configurable JSON schema for structured API parameter inputs (e.g, emergency contact arrays, identity fields).
* config.ini: Network configuration file for specifying upstream proxy endpoints, user-agent strings, and request delay intervals.
* README. txt: Environment setup documentation and execution CLI command examples.
OPERATIONAL FEATURES & CONSTRAINTS
* Traffic Routing: Built-in support for HTTP/SOCKS5 proxy chaining to anonymize outgoing API requests.
* Evasion Controls: Configurable request throttling (100ms-2000ms delay range) to prevent triggering rate-limiting thresholds on the target Web Application Firewall(WAF).
* Output Logging: Generates time-stamped PCAP network capture files and raw HTTP response dumps in JSON format
SERVICE TERMS
* File released upon escrow confirmation
* Exclusivity: Private listing (1-on-1 sale); source code provided uncompiled and non-obfuscated to the buyer.
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
* Target Application: Monilend Android Package (APK/SPLIT APK's v2.1.0-v2.4.2)
* API Architecture: RESTful HTTP/2 JSON endpoints with custom body encryption
* Execution Environment: Python 3.10+, Frida-Core 16.x, Android Debug Bridge (ADB)
* Device Requirements: Tested on Android 11 (API 30) and Android 13 (API 33) x86_64/arm64 emulators (Rooted environment required for Frida server execution)
* Dynamic Memory Patching: Automated Frida hook script to bypass client-side SSL/TLS certificate pining (TrustManagerImpl override) during application startup
* Payload Serialization & Injection: Constructs, encrypts, and transmits flattened JSON request payloads directly to target loan origination endpoints
* SSL Pinning Bypass: It actively disables the application's certificate validation checks, permitting the tool to intercept, view, and route HTTPS traffic without being blocked by network-level security controls.
* Cryptographic Key Interception: Intercepts runtime method parameters to dynamically extract temporary AES-256 session keys and IVs directly from memory prior to payload encryption.
* Session Management: Captures server-issued JWT tokens from response headers and automatically attaches required authorization headers to subsequent requests.
INCLUDED DELIVERABLES:
* loader .py: Mastere execution script managing ADB connection, Frida process spawing, and CLI log output
* hooks.js: Frida Javascript injection script containing SSL unpinning and AES key interception logic.
* payload_template.json: Configurable JSON schema for structured API parameter inputs (e.g, emergency contact arrays, identity fields).
* config.ini: Network configuration file for specifying upstream proxy endpoints, user-agent strings, and request delay intervals.
* README. txt: Environment setup documentation and execution CLI command examples.
OPERATIONAL FEATURES & CONSTRAINTS
* Traffic Routing: Built-in support for HTTP/SOCKS5 proxy chaining to anonymize outgoing API requests.
* Evasion Controls: Configurable request throttling (100ms-2000ms delay range) to prevent triggering rate-limiting thresholds on the target Web Application Firewall(WAF).
* Output Logging: Generates time-stamped PCAP network capture files and raw HTTP response dumps in JSON format
SERVICE TERMS
* File released upon escrow confirmation
* Exclusivity: Private listing (1-on-1 sale); source code provided uncompiled and non-obfuscated to the buyer.
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------