Suljettu

reverse Engineering Opera Browser

Well the Project will aim on one thing !

Extract one information form a free program , which is Opera Browser , i am a security engineer and my team and i , have some suspicions about how Opera browsers . which is the vpn function may collect some private information from the user PC.

Now we need to dig inside the binary file [url removed, login to view] in order to get one info. which is the key that opra use to encrypt the VPN request .

Now in more details :

Opera use to be used an old method to make HTTP Authentication and we use that method while we are studying opera !

Here is how we use to get the Authentication information

Open opera://net-internals/#capture page in opera.

Enable “Include the actual bytes sent/received.”

Click events

Click vpn in adress bar

Off and reOn VPN

Find “SOCKET ssl/[url removed, login to view]” in events

Find SE-Client-Type and SE-Client-API-Key values in headers hex dump

[[IMAGE ATTACHED]]

Now the new Opera [url removed, login to view] has switched to v4 API.

That API uses HTTP Digest Authentication instead of SE-...HTTP headers.

POST /v4/register_subscriber HTTP/1.1

Host: [url removed, login to view]

Connection: keep-alive

Content-Length: 128

Accept: application/json

SE-Client-Version: Stable [url removed, login to view]

SE-Operating-System: Windows

Content-Type: application/x-www-form-urlencoded

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/[url removed, login to view] Safari/537.36 OPR/[url removed, login to view]

Accept-Encoding: gzip, deflate, br

HTTP/1.1 401 Unauthorized

Server: nginx/1.12.0

Date: Thu, 18 May 2017 20:32:04 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Status: 401 Unauthorized

WWW-Authenticate: Digest realm="ApiDigest", qop="auth", algorithm=SHA-256, nonce="MTQ5NTEzOTUyNDozNDEyMjA0OWY0ZjE4ZDgwZDFjOGI5M2ZiNmUyMzYyMWI4Y2NiYTNiMDEwZTdmNzU0NzY2ZTNjOTA2NmYwYWM2", opaque="a6feff632d495616728c8ef3532064ca457e3d0badcfa2db349a0433dcc4520f"

X-UA-Compatible: IE=Edge,chrome=1

Cache-Control: no-cache

X-Request-Id: 66c73f05d6950077cfd83b58fc9f498e

X-Runtime: 0.009371

X-Rack-Cache: invalidate, pass

POST /v4/register_subscriber HTTP/1.1

Host: [url removed, login to view]

Connection: keep-alive

Content-Length: 128

Authorization: Digest username="se0316", realm="ApiDigest", nonce="MTQ5NTEzOTUyNDozNDEyMjA0OWY0ZjE4ZDgwZDFjOGI5M2ZiNmUyMzYyMWI4Y2NiYTNiMDEwZTdmNzU0NzY2ZTNjOTA2NmYwYWM2", uri="/v4/register_subscriber", algorithm=SHA-256, response="ff7f495b6dd7c0b53119f3f92e6f3dbb7607d6a4d0441ec77359437e8b958ee2", opaque="a6feff632d495616728c8ef3532064ca457e3d0badcfa2db349a0433dcc4520f", qop=auth, nc=00000001, cnonce="d186e18e5c7172fa"

Accept: application/json

SE-Client-Version: Stable [url removed, login to view]

SE-Operating-System: Windows

Content-Type: application/x-www-form-urlencoded

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/[url removed, login to view] Safari/537.36 OPR/[url removed, login to view]

Accept-Encoding: gzip, deflate, br

To calculate correct response the password is needed, according to RFC 7616:

3.4.2. A1

If the algorithm parameter's value is "<algorithm>", e.g., "SHA-256",

then A1 is:

A1 = unq(username) ":" unq(realm) ":" passwd

where

passwd = < user's password >

We need the " password " which is impeded inside opera application , and we need an easy way to extract it each time !

We need someone who can work with low level of programing , such C++ and Assembly and familiar with ollydbg ([url removed, login to view])

Taidot: Assembly, C++ -ohjelmointi, Virheenjäljitys, Python

Näytä lisää: how to calculate photoshop free lance hours, how to calculate escrow fees, a program to calculate a salesman, how will you use the degree of leverages to calculate new ebit and new eps?, how will you use the degree of leverages to calculate new ebit and new eps, engineering freelance interpreter english to french in sherbrooke, create macro or formula to calculate quantity of patterns along a row of numbers, reverse engineering reverse assembly, browser opera, calculator engineering reverse, mini browser opera phone palm iphone, browser opera mini, mini browser opera, web browser opera mobile, mobile browser opera mini, perfect keylogger reverse engineering, reverse engineering vb5 exe bas, reverse engineering crack, reverse engineering visual basic, reverse engineering programs crack, reverse engineering exe file code, reverse engineering calculate

Tietoa työnantajasta:
( 2 arvostelua ) Damascus, United States

Projektin tunnus: #14081647

9 freelanceria on tarjonnut keskimäärin 506 $ tähän työhön

prashushinde9

I want to discuss this project with you further, let me know the best suitable time for you to schedule the meeting, Feel free to message me at any time, i used to be online 14 hrs in a day on this website so probably Lisää

412 $ USD 18 päivässä
(2 arvostelua)
4.0
xupiter2012

Hello, Mybeshoo! It sounds like an interesting challenge and very good fit. I have great experience with reverse engineering, so it will be done in a very professional way. Please let me know how urgent it is and Lisää

350 $ USD 14 päivässä
(4 arvostelua)
2.9
MetaoriginLab

Hey We are a team of Technical Developers and have got expertise in such stuff. Ping me if you are looking for a quick resolution

522 $ USD 5 päivässä
(3 arvostelua)
2.2
mirage254

A proposal has not yet been provided

222 $ USD 10 päivässä
(2 arvostelua)
1.3
designerexpert92

Hello, Expert here,ready to start immediately. I will always available on [url removed, login to view] to discuss project specs.I have reviewed all your requirements and can deliver exactly what you are looking for, 100% guaranteed. Lisää

250 $ USD 10 päivässä
(0 arvostelua)
0.0
Ashu4848

SALUTATIONS I hope you are doing well and the season is going great for you and your business. I and my team have gone through your requirements for this project. And one thing I can assure you that they will all Lisää

750 $ USD 10 päivässä
(0 arvostelua)
0.0
techlogics4

Dear Prospect Hiring Manager. Thank you for giving me a chance to bid on your project. i am a serious bidder here and i have already worked on a similar project before and can deliver as u have mentioned I have Lisää

342 $ USD 6 päivässä
(0 arvostelua)
0.0
techfinity3

Dear Prospect Hiring Manager. Thank you for giving me a chance to bid on your project. I am a serious bidder here and i have already worked on a similar project before and can deliver as u have mentioned I have c Lisää

342 $ USD 6 päivässä
(0 arvostelua)
0.0
techcrunch2

Hello Sir, We have gone through the details you have provided and we have already worked on a similar project before and can deliver as u have mentioned and would be pleased to work on this with you to deliver the resu Lisää

342 $ USD 6 päivässä
(0 arvostelua)
0.0
bonapps

Hello Team, "BONAPPS - Delivering Excellence just a click away" We read your entire proposal and are happy to share that we are interested in your proposal. We would like to have an in-depth discussion about the Lisää

1000 $ USD 10 päivässä
(0 arvostelua)
0.0
fahdhtolba

Hello , I have been programming in C/C++ for both linux and windows for more than 6 years now. I have also written various network applications some of which are down to the IP packet level. I also have previous experi Lisää

555 $ USD 15 päivässä
(0 arvostelua)
0.0
freelancer9292

Hey. I'll be happy to help you with this one. My main profile is [url removed, login to view] . Let me know in case you'd be interested.

400 $ USD 10 päivässä
(0 arvostelua)
0.0