mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 08:30:20 +00:00
24f816b6a3
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
71 lines
4.1 KiB
Markdown
71 lines
4.1 KiB
Markdown
# Workflows: Mobile Traffic Interception with Burp Suite
|
|
|
|
## Workflow 1: Standard Mobile API Testing
|
|
|
|
```
|
|
[Configure Burp Listener] --> [Set Device Proxy] --> [Install CA Cert] --> [Open Target App]
|
|
|
|
|
v
|
|
[Capture HTTP History]
|
|
|
|
|
+---------------------+---------------------+
|
|
| | |
|
|
[Map API surface] [Identify auth flow] [Check data exposure]
|
|
| | |
|
|
v v v
|
|
[Send to Scanner] [Token analysis] [PII in responses]
|
|
[Active scan] [Session testing] [Sensitive headers]
|
|
| | |
|
|
+---------------------+---------------------+
|
|
|
|
|
[Compile findings]
|
|
[Generate report]
|
|
```
|
|
|
|
## Workflow 2: SSL Pinning Bypass Pipeline
|
|
|
|
```
|
|
[Set Proxy] --> [Open App] --> [Connection fails?]
|
|
|
|
|
[Yes: Pinning active]
|
|
|
|
|
+--------------+--------------+
|
|
| | |
|
|
[Frida bypass] [Objection] [APK repackage]
|
|
[Generic script] [sslpinning] [Remove pinning code]
|
|
| [disable] |
|
|
+--------------+--------------+
|
|
|
|
|
[Verify traffic flows]
|
|
[Continue assessment]
|
|
```
|
|
|
|
## Workflow 3: Authentication Testing
|
|
|
|
```
|
|
[Intercept login request] --> [Capture auth token] --> [Analyze token format]
|
|
|
|
|
+----------+----------+
|
|
| |
|
|
[JWT analysis] [Opaque token]
|
|
[Decode payload] [Session management]
|
|
[Check signature] [Timeout testing]
|
|
[Modify claims] [Concurrent session]
|
|
| |
|
|
+----------+----------+
|
|
|
|
|
[Test IDOR with user IDs]
|
|
[Test privilege escalation]
|
|
[Test token replay after logout]
|
|
```
|
|
|
|
## Decision Matrix: Traffic Interception Approach
|
|
|
|
| Scenario | Android | iOS |
|
|
|----------|---------|-----|
|
|
| No pinning, API < 24 | Standard proxy + user CA | Standard proxy + profile install |
|
|
| No pinning, API 24+ | System CA or network_security_config mod | Standard proxy + profile install |
|
|
| Pinning implemented | Frida/Objection bypass + system CA | Frida/Objection bypass |
|
|
| Custom protocol | Wireshark + custom Frida hooks | Wireshark + custom Frida hooks |
|
|
| VPN tunnel | iptables redirect on rooted device | Not feasible without jailbreak |
|