Casey Strouse cstrouse

Reverse Engineering on macOS

Some notes, tools, and techniques for reverse engineering macOS binaries.

Bypassing Cloudflare, Akamai, etc

Some notes/resources for bypassing anti-bot/scraping features on Cloudflare, Akamai, etc.

Deobfuscating / Unminifying Obfuscated Web App / JavaScript Code

GitHub Search Syntax for Finding API Keys/Secrets/Tokens

As a security professional, it is important to conduct a thorough reconnaissance. With the increasing use of APIs nowadays, it has become paramount to keep access tokens and other API-related secrets secure in order to prevent leaks. However, despite technological advances, human error remains a factor, and many developers still unknowingly hardcode their API secrets into source code and commit them to public repositories. GitHub, being a widely popular platform for public code repositories, may inadvertently host such leaked secrets. To help identify these vulnerabilities, I have created a comprehensive search list using powerful search syntax that enables the search of thousands of leaked keys and secrets in a single search.

Search Syntax:

(path:*.{File_extension1} OR path:*.{File_extension-N}) AND ({Keyname1} OR {Keyname-N}) AND (({Signature/pattern1} OR {Signature/pattern-N}) AND ({PlatformTag1} OR {PlatformTag-N}))

Examples:

**1.

Reverse Engineering Webpack Apps

Some notes and techniques for reverse engineering Webpack (and a little bit about React/Vue/Angular) apps.

Creating a Windows 11 Install USB in 2022

I have been installing Windows for a long time. Does it get easier? I want to say it gets easier, but it seems like there's always some new wrinkle! These instructions are as much a note to my future self as they may be useful to anyone else.

For me, I was not able to get any exfat-based installs, or even any of the GUI helpers to make this process any more straightforward. Maybe on your target Windows / host OS those helpers will work, but the below process (as of current year) is consistent, and not overly complicated.

Overview:

Downloading an official ISO image from MS:
- https://www.microsoft.com/software-download/windows11
Formatting the drive (at least 8GB) as GPT, and one FAT-format partition (aka MS-DOS)

Can use Disks or Disk Utilty for this

OpenBSD on Apple M2 with QEMU

Minimalist installation of OpenBSD on the Apple M2 using QEMU

Ingredients

Apple M2 running macOS Sonoma 14.4.1
QEMU version 8.2.1
OpenBSD 7.5 arm64

Installation

install QEMU with Homebrew brew install qemu, also possible with MacPorts
Write a script with execute permissions chmod +x qemu_aarch64_install_openbsd.sh for installing the image.

	const fs = require("fs");
	const { SourceMapConsumer, SourceMapGenerator } = require("source-map");

	function reverseSourceMap(sourceMap) {
	return SourceMapConsumer.with(sourceMap, null, (consumer) => {
	const reversedMap = new SourceMapGenerator();
	consumer.eachMapping((mapping) => {
	reversedMap.addMapping({
	generated: {
	line: mapping.originalLine,

	#!/bin/env python3

	import argparse
	import datetime
	import re
	import sys
	import uuid

	###############################################################################
	# Based off of Daniel Thatcher's guid tool

Casey Strouse cstrouse

Reverse Engineering on macOS

Table of Contents

Bypassing Cloudflare, Akamai, etc

Table of Contents

Deobfuscating / Unminifying Obfuscated Web App / JavaScript Code

Table of Contents

GitHub Search Syntax for Finding API Keys/Secrets/Tokens

Search Syntax:

Examples:

Reverse Engineering Webpack Apps

Table of Contents

Creating a Windows 11 Install USB in 2022

OpenBSD on Apple M2 with QEMU

Ingredients

Installation