Encerrado

reverse Engineering Opera Browser

Well the Project will aim on one thing !

Extract one information form a free program , which is Opera Browser , i am a security engineer and my team and i , have some suspicions about how Opera browsers . which is the vpn function may collect some private information from the user PC.

Now we need to dig inside the binary file [url removed, login to view] in order to get one info. which is the key that opra use to encrypt the VPN request .

Now in more details :

Opera use to be used an old method to make HTTP Authentication and we use that method while we are studying opera !

Here is how we use to get the Authentication information

Open opera://net-internals/#capture page in opera.

Enable “Include the actual bytes sent/received.”

Click events

Click vpn in adress bar

Off and reOn VPN

Find “SOCKET ssl/[url removed, login to view]” in events

Find SE-Client-Type and SE-Client-API-Key values in headers hex dump

[[IMAGE ATTACHED]]

Now the new Opera [url removed, login to view] has switched to v4 API.

That API uses HTTP Digest Authentication instead of SE-...HTTP headers.

POST /v4/register_subscriber HTTP/1.1

Host: [url removed, login to view]

Connection: keep-alive

Content-Length: 128

Accept: application/json

SE-Client-Version: Stable [url removed, login to view]

SE-Operating-System: Windows

Content-Type: application/x-www-form-urlencoded

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/[url removed, login to view] (KHTML, like Gecko) Chrome/[url removed, login to view] Safari/[url removed, login to view] OPR/[url removed, login to view]

Accept-Encoding: gzip, deflate, br

HTTP/1.1 401 Unauthorized

Server: nginx/1.12.0

Date: Thu, 18 May 2017 20:32:04 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Status: 401 Unauthorized

WWW-Authenticate: Digest realm="ApiDigest", qop="auth", algorithm=SHA-256, nonce="MTQ5NTEzOTUyNDozNDEyMjA0OWY0ZjE4ZDgwZDFjOGI5M2ZiNmUyMzYyMWI4Y2NiYTNiMDEwZTdmNzU0NzY2ZTNjOTA2NmYwYWM2", opaque="a6feff632d495616728c8ef3532064ca457e3d0badcfa2db349a0433dcc4520f"

X-UA-Compatible: IE=Edge,chrome=1

Cache-Control: no-cache

X-Request-Id: 66c73f05d6950077cfd83b58fc9f498e

X-Runtime: [url removed, login to view]

X-Rack-Cache: invalidate, pass

POST /v4/register_subscriber HTTP/1.1

Host: [url removed, login to view]

Connection: keep-alive

Content-Length: 128

Authorization: Digest username="se0316", realm="ApiDigest", nonce="MTQ5NTEzOTUyNDozNDEyMjA0OWY0ZjE4ZDgwZDFjOGI5M2ZiNmUyMzYyMWI4Y2NiYTNiMDEwZTdmNzU0NzY2ZTNjOTA2NmYwYWM2", uri="/v4/register_subscriber", algorithm=SHA-256, response="ff7f495b6dd7c0b53119f3f92e6f3dbb7607d6a4d0441ec77359437e8b958ee2", opaque="a6feff632d495616728c8ef3532064ca457e3d0badcfa2db349a0433dcc4520f", qop=auth, nc=00000001, cnonce="d186e18e5c7172fa"

Accept: application/json

SE-Client-Version: Stable [url removed, login to view]

SE-Operating-System: Windows

Content-Type: application/x-www-form-urlencoded

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/[url removed, login to view] (KHTML, like Gecko) Chrome/[url removed, login to view] Safari/[url removed, login to view] OPR/[url removed, login to view]

Accept-Encoding: gzip, deflate, br

To calculate correct response the password is needed, according to RFC 7616:

3.4.2. A1

If the algorithm parameter's value is "<algorithm>", e.g., "SHA-256",

then A1 is:

A1 = unq(username) ":" unq(realm) ":" passwd

where

passwd = < user's password >

We need the " password " which is impeded inside opera application , and we need an easy way to extract it each time !

We need someone who can work with low level of programing , such C++ and Assembly and familiar with ollydbg ([url removed, login to view])

Habilidades: Montagem, Programação C++ , Depuração , Python

Ver mais: how to calculate photoshop free lance hours, how to calculate escrow fees, a program to calculate a salesman, how will you use the degree of leverages to calculate new ebit and new eps?, how will you use the degree of leverages to calculate new ebit and new eps, engineering freelance interpreter english to french in sherbrooke, create macro or formula to calculate quantity of patterns along a row of numbers, reverse engineering reverse assembly, browser opera, calculator engineering reverse, mini browser opera phone palm iphone, browser opera mini, mini browser opera, web browser opera mobile, mobile browser opera mini, perfect keylogger reverse engineering, reverse engineering vb5 exe bas, reverse engineering crack, reverse engineering visual basic, reverse engineering programs crack, reverse engineering exe file code, reverse engineering calculate

Acerca do Empregador:
( 2 comentários ) Damascus, United States

ID do Projeto: #14081647

9 freelancers estão ofertando em média $506 para este trabalho

prashushinde9

I want to discuss this project with you further, let me know the best suitable time for you to schedule the meeting, Feel free to message me at any time, i used to be online 14 hrs in a day on this website so probably Mais

$412 USD in 18 dias
(2 Comentários)
4.0
xupiter2012

Hello, Mybeshoo! It sounds like an interesting challenge and very good fit. I have great experience with reverse engineering, so it will be done in a very professional way. Please let me know how urgent it is and Mais

$350 USD in 14 dias
(4 Comentários)
2.9
MetaoriginLab

Hey We are a team of Technical Developers and have got expertise in such stuff. Ping me if you are looking for a quick resolution

$522 USD in 5 dias
(3 Comentários)
2.2
mirage254

A proposal has not yet been provided

$222 USD in 10 dias
(2 Comentários)
1.3
fahdhtolba

Hello , I have been programming in C/C++ for both linux and windows for more than 6 years now. I have also written various network applications some of which are down to the IP packet level. I also have previous experi Mais

$555 USD in 15 dias
(0 Comentários)
0.0
freelancer9292

Hey. I'll be happy to help you with this one. My main profile is https://www.freelancer.com/u/freelancer656.html . Let me know in case you'd be interested.

$400 USD in 10 dias
(0 Comentários)
0.0
bonapps

Hello Team, "BONAPPS - Delivering Excellence just a click away" We read your entire proposal and are happy to share that we are interested in your proposal. We would like to have an in-depth discussion about the Mais

$1000 USD in 10 dias
(0 Comentários)
0.0
techfinity3

Dear Prospect Hiring Manager. Thank you for giving me a chance to bid on your project. I am a serious bidder here and i have already worked on a similar project before and can deliver as u have mentioned I have c Mais

$342 USD in 6 dias
(0 Comentários)
0.0
Ashu4848

SALUTATIONS I hope you are doing well and the season is going great for you and your business. I and my team have gone through your requirements for this project. And one thing I can assure you that they will all Mais

$750 USD in 10 dias
(0 Comentários)
0.0
techlogics4

Dear Prospect Hiring Manager. Thank you for giving me a chance to bid on your project. i am a serious bidder here and i have already worked on a similar project before and can deliver as u have mentioned I have Mais

$342 USD in 6 dias
(0 Comentários)
0.0
designerexpert92

Hello, Expert here,ready to start immediately. I will always available on freelancer.com to discuss project specs.I have reviewed all your requirements and can deliver exactly what you are looking for, 100% guaranteed. Mais

$250 USD in 10 dias
(0 Comentários)
0.0
techcrunch2

Hello Sir, We have gone through the details you have provided and we have already worked on a similar project before and can deliver as u have mentioned and would be pleased to work on this with you to deliver the resu Mais

$342 USD in 6 dias
(0 Comentários)
0.0