Skip to content

Commit 95e4045

Browse files
darklotuskdbdarklotuskdb
authored
Add files via upload
1 parent c3ef060 commit 95e4045

28 files changed

+4053
-0
lines changed

‎Windows/iOS_Buster-Win.bat‎

Lines changed: 380 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,380 @@
1+
@echo off
2+
3+
title iOS Buster By Kamaldeep Bhati
4+
rem Define color codes
5+
set "CR="
6+
set "CG="
7+
set "CY="
8+
set "CB="
9+
set "CRSET="
10+
11+
echo.
12+
echo %CR%=============================================================================================
13+
echo =============================================================================================
14+
echo -----------------^> iOS Buster by Kamaldeep Bhati @DarkLotusKDB ^<3 ^<------------------------
15+
echo =============================================================================================
16+
echo =============================================================================================%CRSET%
17+
echo.
18+
19+
20+
:menu
21+
echo.
22+
echo %CG%=============================================
23+
echo Please select an option from the following:
24+
echo =============================================%CRSET%
25+
echo %CY%
26+
echo 1) Launch Frida and Objection Tool (Custom Checks)
27+
echo 2) Security Access Control Missing From iOS Keychain
28+
echo 3) Jailbreak Detection Bypass
29+
echo 4) Certificate Pinning Bypass
30+
echo 5) Biometric Authentication Bypass
31+
echo 6) Generate Memory Dump Via Fridump Tool
32+
echo 7) Client-Side Authentication Bypass
33+
echo 8) Install/Upgrade Frida and Objection Tool
34+
echo %CRSET%
35+
36+
37+
set choice=
38+
echo.
39+
set /p choice=%CB%Enter your choice (1-7): %CRSET%
40+
41+
if "%choice%"=="1" (
42+
call :MFrida
43+
) else if "%choice%"=="2" (
44+
call :Frida
45+
call :option2
46+
) else if "%choice%"=="3" (
47+
call :Frida
48+
call :option3
49+
) else if "%choice%"=="4" (
50+
call :Frida
51+
call :option4
52+
) else if "%choice%"=="5" (
53+
call :Frida
54+
call :option5
55+
) else if "%choice%"=="6" (
56+
57+
call :option6
58+
) else if "%choice%"=="7" (
59+
call :Frida
60+
call :option7
61+
) else if "%choice%"=="8" (
62+
call :option8
63+
) else (
64+
echo Invalid choice. Please try again.
65+
goto menu
66+
)
67+
68+
goto menu
69+
70+
71+
72+
:option2
73+
74+
echo.
75+
echo %CG%=============================================================================================
76+
echo [+] Security Access Control Missing From iOS Keychain
77+
echo =============================================================================================%CRSET%
78+
objection -g %Pid% run "ios keychain dump"
79+
objection -g %Pid% run "ios keychain dump --json ./output/keychain.json"
80+
goto :eof
81+
82+
83+
84+
85+
86+
87+
88+
:option3
89+
echo.
90+
91+
echo %CG%=============================================================================================
92+
echo [+] Jailbreak Detection Bypass
93+
echo =============================================================================================%CRSET%
94+
95+
echo.
96+
echo %CY%[*] Trying with Objection tool (Once it's done, hit the 'Enter' key and type 'exit')
97+
echo ----------------------------------------------------------------------------------------%CRSET%
98+
pause
99+
objection -g %Pid% explore --startup-command "ios jailbreak disable"
100+
101+
echo.
102+
echo.
103+
echo.
104+
echo.
105+
106+
set answer=
107+
call :Icom
108+
109+
110+
set "folder=scripts\jb"
111+
112+
if not exist "%folder%" (
113+
echo The folder "%folder%" does not exist.
114+
exit /b
115+
)
116+
117+
for %%F in ("%folder%\*.js") do (
118+
echo.
119+
echo %CY%[*] Trying with "%%~nxF" script - Once it's done, hit the 'Enter' key and type 'exit'.
120+
echo ----------------------------------------------------------------------------------------%CRSET%
121+
echo.
122+
frida -U -f %Pid% -l scripts\jb\\"%%~nxF"
123+
124+
echo.
125+
echo.
126+
echo.
127+
echo.
128+
129+
set answer=
130+
call :Icom
131+
)
132+
133+
134+
135+
136+
goto :eof
137+
138+
139+
140+
:option4
141+
echo.
142+
echo %CG%=============================================================================================
143+
echo [+] Certificate Pinning Bypass
144+
echo =============================================================================================%CRSET%
145+
146+
echo.
147+
echo %CY%[*] Trying with Objection tool (Once it's done, hit the 'Enter' key and type 'exit')
148+
echo ----------------------------------------------------------------------------------------%CRSET%
149+
pause
150+
objection -g %Pid% explore --startup-command "ios sslpinning disable"
151+
152+
echo.
153+
echo.
154+
echo.
155+
echo.
156+
157+
set answer=
158+
call :Icom
159+
160+
161+
set "folder=scripts\ssl"
162+
163+
if not exist "%folder%" (
164+
echo The folder "%folder%" does not exist.
165+
exit /b
166+
)
167+
168+
for %%F in ("%folder%\*.js") do (
169+
echo.
170+
echo %CY%[*] Trying with "%%~nxF" script - Once it's done, hit the 'Enter' key and type 'exit'.
171+
echo ----------------------------------------------------------------------------------------%CRSET%
172+
echo.
173+
frida -U -f %Pid% -l scripts\ssl\\"%%~nxF"
174+
175+
echo.
176+
echo.
177+
echo.
178+
echo.
179+
180+
set answer=
181+
call :Icom
182+
)
183+
184+
185+
goto :eof
186+
187+
188+
189+
190+
191+
192+
193+
:option5
194+
echo.
195+
echo %CG%=============================================================================================
196+
echo [+] Biometric Authentication Bypass (iOS)
197+
echo =============================================================================================%CRSET%
198+
199+
echo.
200+
echo %CY%[*] Trying with Objection tool (Once it's done, hit the 'Enter' key and type 'exit')
201+
echo --------------------------------------------------------------------------------------%CRSET%
202+
pause
203+
objection -g %Pid% explore -c scripts\bio\bio.txt
204+
echo.
205+
echo.
206+
echo.
207+
208+
set answer=
209+
call :Icom
210+
211+
212+
set "folder=scripts\bio"
213+
214+
if not exist "%folder%" (
215+
echo The folder "%folder%" does not exist.
216+
exit /b
217+
)
218+
219+
for %%F in ("%folder%\*.js") do (
220+
echo.
221+
echo %CY%[*] Trying with "%%~nxF" script - Once it's done, hit the 'Enter' key and type 'exit'.
222+
echo ----------------------------------------------------------------------------------------%CRSET%
223+
echo.
224+
frida -U -f %Pid% -l scripts\bio\\"%%~nxF"
225+
226+
echo.
227+
echo.
228+
echo.
229+
echo.
230+
231+
set answer=
232+
call :Icom
233+
)
234+
235+
236+
237+
goto :eof
238+
239+
240+
241+
242+
:option6
243+
echo.
244+
echo %CG%=============================================================================================
245+
echo [+] Generate Memory Dump Via Fridump Tool
246+
echo =============================================================================================%CRSET%
247+
echo.
248+
echo %CG%=============================================================================================
249+
echo [+] Executing Frida Tool
250+
echo =============================================================================================%CRSET%
251+
echo.
252+
frida-ps -Ua
253+
254+
set Pid=
255+
:input
256+
echo.
257+
set /p Pid="%CB%Please enter the process Name (Ex: My App Uat): %CRSET%"
258+
if "%Pid%"=="" (
259+
echo Input is required. Please try again.
260+
goto input
261+
)
262+
echo.
263+
mkdir "output\dump_%Pid%"
264+
python scripts\fridump\fridump.py -U -s "%Pid%" -o "output\dump_%Pid%"
265+
266+
goto :eof
267+
268+
269+
270+
:option7
271+
echo.
272+
echo %CG%=============================================================================================
273+
echo [+] Client-Side Authentication Bypass
274+
echo =============================================================================================%CRSET%
275+
frida -U -l scripts\pin\PinLoginBypass.js -f %Pid%
276+
echo.
277+
echo [*] Now, on device enter any PIN such as "1234" or "123456".
278+
echo.
279+
echo.
280+
281+
set answer=
282+
call :Icom
283+
284+
goto :eof
285+
286+
287+
288+
289+
290+
:option8
291+
echo.
292+
echo %CG%=============================================================================================
293+
echo [+] Installing Frida and Objection Tool
294+
echo =============================================================================================%CRSET%
295+
echo.
296+
echo %CY%Note: Install the Python from the link below before proceeding further and relaunch the iOS Buster tool.%CRSET%
297+
echo https://www.python.org/downloads/
298+
echo.
299+
pause
300+
301+
python -m pip install --upgrade pip
302+
303+
pip install frida
304+
305+
pip install frida-tools
306+
307+
pip install objection
308+
309+
310+
:Ucom
311+
set answer=
312+
echo.
313+
set /p answer=%CR%Do you want to update the tools? (y/n): %CRSET%
314+
315+
if /i "%answer%"=="Y" (
316+
pip install --upgrade frida
317+
pip install --upgrade frida-tools
318+
pip install --upgrade objection
319+
) else if /i "%answer%"=="N" (
320+
echo.
321+
goto menu
322+
) else (
323+
echo Invalid input! Please enter either Y or N.
324+
goto Ucom
325+
)
326+
goto :eof
327+
328+
goto :eof
329+
330+
331+
332+
:Frida
333+
echo.
334+
echo %CG%=============================================================================================
335+
echo [+] Executing Frida Tool
336+
echo =============================================================================================%CRSET%
337+
echo.
338+
frida-ps -Ua
339+
340+
set Pid=
341+
:input
342+
echo.
343+
set /p Pid="%CB%Please enter the process Identifier (Ex: com.app.uat): %CRSET%"
344+
if "%Pid%"=="" (
345+
echo Input is required. Please try again.
346+
goto input
347+
)
348+
echo.
349+
goto :eof
350+
351+
352+
:MFrida
353+
echo.
354+
echo %CG%=============================================================================================
355+
echo [+] Launch Frida and Objection Tool (Custom Checks)
356+
echo =============================================================================================%CRSET%
357+
echo.
358+
call :Frida
359+
objection -g %Pid% explore
360+
goto :eof
361+
362+
363+
364+
:Icom
365+
echo.
366+
367+
set /p answer=%CR%Did the above method work? (y/n): %CRSET%
368+
369+
if /i "%answer%"=="Y" (
370+
goto menu
371+
) else if /i "%answer%"=="N" (
372+
echo.
373+
) else (
374+
echo Invalid input! Please enter either Y or N.
375+
goto Icom
376+
)
377+
goto :eof
378+
379+
pause
380+

‎Windows/scripts/bio/bio.txt‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
ios ui biometrics_bypass
2+
!echo %CY%[*] In test device, application will prompt touch-ID login, select "Cancel" and observe the user is successfully authenticated.%CRSET%

0 commit comments

Comments
 (0)