mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 08:30:20 +00:00
24f816b6a3
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
4.1 KiB
4.1 KiB
Workflows: Mobile Traffic Interception with Burp Suite
Workflow 1: Standard Mobile API Testing
[Configure Burp Listener] --> [Set Device Proxy] --> [Install CA Cert] --> [Open Target App]
|
v
[Capture HTTP History]
|
+---------------------+---------------------+
| | |
[Map API surface] [Identify auth flow] [Check data exposure]
| | |
v v v
[Send to Scanner] [Token analysis] [PII in responses]
[Active scan] [Session testing] [Sensitive headers]
| | |
+---------------------+---------------------+
|
[Compile findings]
[Generate report]
Workflow 2: SSL Pinning Bypass Pipeline
[Set Proxy] --> [Open App] --> [Connection fails?]
|
[Yes: Pinning active]
|
+--------------+--------------+
| | |
[Frida bypass] [Objection] [APK repackage]
[Generic script] [sslpinning] [Remove pinning code]
| [disable] |
+--------------+--------------+
|
[Verify traffic flows]
[Continue assessment]
Workflow 3: Authentication Testing
[Intercept login request] --> [Capture auth token] --> [Analyze token format]
|
+----------+----------+
| |
[JWT analysis] [Opaque token]
[Decode payload] [Session management]
[Check signature] [Timeout testing]
[Modify claims] [Concurrent session]
| |
+----------+----------+
|
[Test IDOR with user IDs]
[Test privilege escalation]
[Test token replay after logout]
Decision Matrix: Traffic Interception Approach
| Scenario | Android | iOS |
|---|---|---|
| No pinning, API < 24 | Standard proxy + user CA | Standard proxy + profile install |
| No pinning, API 24+ | System CA or network_security_config mod | Standard proxy + profile install |
| Pinning implemented | Frida/Objection bypass + system CA | Frida/Objection bypass |
| Custom protocol | Wireshark + custom Frida hooks | Wireshark + custom Frida hooks |
| VPN tunnel | iptables redirect on rooted device | Not feasible without jailbreak |