Adam Hosker ahosker

Audit this entire codebase for materially useful simplifications in its data structures, state representation, control flow, algorithms, and ownership.

This is an audit-only exercise. Do not edit files, run tests, implement recommendations, commit, or push. Read-only inspection commands are allowed.

You are the coordinator. Continue until the complete codebase has been reviewed and the final audit is validated.

Establish the coverage contract

Inspect the repository and inventory every identifiable subsystem.

Bypassing SSL Pinning using Frida and Objection

To use this method you will have to have a rooted Android phone. There are other methods to disable SSL Pinning like modifying the apk, for example apk-mitm, but that doesn't always work for me.

Downloads

Download and install frida and frida tools: pip3 install frida frida-tools
Download and install objection: pip3 install objection
Download frida server for architecture used by the phone you will use: https://github.com/frida/frida/releases
Download adb included in platform-tools:

Traefik and Portainer on Docker Swarm with Letsencrypt

Reproducing a Traefik with SSL and Portainer setup on a 2 Node Docker Swarm

Install Docker:

Install Docker on both nodes with a Bootstrap Script:

$ curl https://gitlab.com/rbekker87/scripts/raw/master/setup-docker-ubuntu.sh | bash

Tools

Metaspoit: Penetration testing software
GhostShell: Malware indetectable, with AV bypass techniques, anti-disassembly, etc.
BeEF: The Browser Exploitation Framework
PTF: Penetration Testers Framework
Bettercap: MITM framework
Nessus: Vulnerability scanner
AutoNessus: Auto Nessus
BDFProxy: Patch Binaries via MITM (BackdoorFactory)

	<?php

	namespace {{ namespace }};

	use App\Http\Requests\Store{{ class }}Request;
	use Illuminate\Console\Command;
	use Lorisleiva\Actions\Concerns\AsAction;
	use Lorisleiva\Actions\Concerns\WithAttributes;