{ "permissions": { "allow": [ "WebFetch(domain:docs.proxyman.com)", "WebSearch", "WebFetch(domain:freshbits.fi)", "WebFetch(domain:forums.swift.org)", "WebFetch(domain:github.com)", "Bash(xcode-select -p)", "Bash(xcodegen generate:*)", "Bash(rm -rf ~/Library/Developer/Xcode/DerivedData/ProxyApp-*/)", "Bash(rm -rf ~/Library/Developer/Xcode/DerivedData/ProxyApp-*)", "Read(//Users/treyt/Library/Developer/Xcode/DerivedData/**)", "Bash(pkill -f \"com.apple.dt.SKAgent\")", "Bash(rm -rf ~/Library/Developer/Xcode/DerivedData/ProxyApp-*/SourcePackages)", "Bash(rm -rf ~/Library/Caches/org.swift.swiftpm/repositories/GRDB*)", "Bash(pkill -9 -f xcodebuild)", "Bash(rm -rf ~/Library/Caches/org.swift.swiftpm)", "Bash(pkill -9 -f swift-build)", "Bash(pkill -9 -f \"com.apple.dt\")", "Bash(ls ~/Library/Developer/Xcode/DerivedData/ProxyApp-*/SourcePackages/checkouts/)", "Bash(cat ~/Library/Developer/Xcode/DerivedData/ProxyApp-*/SourcePackages/checkouts/swift-crypto/Package.swift)", "Bash(cat ~/Library/Developer/Xcode/DerivedData/ProxyApp-*/SourcePackages/checkouts/swift-certificates/Package.swift)", "Bash(git init:*)", "Bash(git add:*)", "Bash(git commit:*)", "Bash(ls -la /private/tmp/claude-501/-Users-treyt-Desktop-code-proxy-ios/0757dced-e811-40bc-bec2-50228073acad/tasks/*.output)", "Bash(grep -r \"fatalError\\\\|try!\\\\|force unwrap\\\\|!\\\\s*$\" /Users/treyt/Desktop/code/proxy_ios/ProxyCore/Sources --include=\"*.swift\")", "Bash(grep:*)", "Read(//Users/treyt/.claude/plugins/marketplaces/**)", "Read(//Users/treyt/**)", "Bash(pip3 install:*)", "Bash(python3 -c ':*)", "Bash(brew install:*)", "Bash(python3)", "Bash(/Users/treyt/.claude/plugins/marketplaces/axiom-marketplace/.claude-plugin/plugins/axiom/bin/xclog list:*)", "Bash(log stream:*)", "Bash(kill %1)", "Bash(ls -la /Users/treyt/Desktop/code/proxy_ios/*.apk*)", "Bash(ls -la /Users/treyt/Desktop/code/proxy_ios/*.apkm)", "Bash(mkdir -p /tmp/aa_apk)", "Read(//tmp/**)", "Bash(rm -rf *)", "Bash(unzip -o \"/Users/treyt/Desktop/code/proxy_ios/com.aa.android_2025.31-62650050_2arch_7dpi_24lang_1feat_7be620b8dcf290a0a741d5d9c13a5ad1_apkmirror.com.apkm\")", "Read(//private/tmp/aa_apk/**)", "Bash(mkdir -p /tmp/aa_base)", "Bash(unzip -o /tmp/aa_apk/base.apk AndroidManifest.xml res/xml/network_security_config.xml)", "Bash(unzip -l /tmp/aa_apk/base.apk)", "Bash(unzip -o /tmp/aa_apk/base.apk classes.dex classes2.dex classes3.dex -d /tmp/aa_base)", "Bash(xxd /tmp/aa_base/res/xml/network_security_config.xml)", "Read(//private/tmp/**)", "Bash(apktool d:*)", "Bash(adb devices:*)", "Bash(emulator -list-avds)", "Bash(/Users/treyt/Library/Android/sdk/emulator/emulator -avd Pixel_6_API_34 -writable-system -no-snapshot-load -no-audio -gpu swiftshader_indirect)", "Bash(/Users/treyt/Library/Android/sdk/platform-tools/adb wait-for-device:*)", "Bash(/Users/treyt/Library/Android/sdk/platform-tools/adb shell:*)", "Bash(/Users/treyt/Library/Android/sdk/platform-tools/adb devices:*)", "Bash(/Users/treyt/Library/Android/sdk/platform-tools/adb root:*)", "Bash(/Users/treyt/Library/Android/sdk/platform-tools/adb push:*)", "Bash(frida-ps -U)", "Bash(/Users/treyt/Library/Android/sdk/platform-tools/adb install-multiple:*)", "WebFetch(domain:www.passrider.com)", "WebFetch(domain:www.aa.com)", "Bash(sort echo:*)", "Bash(apktool b:*)", "Bash(sed -i '' '/car_blue_700/d' /tmp/aa_patched/res/values-v34/colors.xml)", "Bash(sed -i '' '/background_floating_device_default_dark/d' /tmp/aa_patched/res/values-v34/colors.xml)", "Bash(java -jar /opt/homebrew/Cellar/apktool/*/libexec/smali*.jar)", "Bash([ ! -f /tmp/smali.jar ])", "Bash(curl -sL -o /tmp/smali.jar \"https://github.com/google/smali/releases/download/v2.5.2/smali-2.5.2.jar\")", "Bash([ ! -f /tmp/baksmali.jar ])", "Bash(curl -sL -o /tmp/baksmali.jar \"https://github.com/google/smali/releases/download/v2.5.2/baksmali-2.5.2.jar\")", "Bash(mkdir -p dex_patch)", "Bash(curl -sL -o /tmp/smali.jar \"https://bitbucket.org/JesusFreke/smali/downloads/smali-2.5.2.jar\")", "Bash(curl -sL -o /tmp/baksmali.jar \"https://bitbucket.org/JesusFreke/smali/downloads/baksmali-2.5.2.jar\")", "Bash(java -jar /tmp/baksmali.jar d classes17.dex -o smali_out)", "Bash(java -jar /tmp/smali.jar a smali_out -o classes17_patched.dex)", "Bash(curl -s 'https://www.aa.com/travelInformation/flights/status/detail?search=AA%7C2152%7CDFW%7CIAH%7C2026,4,7&ref=results' -X GET -H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' -H 'Sec-Fetch-Site: none' -H 'Cookie: ROUTEID=IKSS.green; akavpau_www_aafullsite=1775589136~id=90986786e82aef36e29f8c3e5d2dd3ec; _abck=E4AC90DFB34FA06D4454E17D13364D25~0~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~-1~-1~1775592249~AAQAAAAF%2f%2f%2f%2f%2f99vF+lWahXC5f7aF9RVpxdEvGlYwPI6pe4+VSXBvfuW+Evyc3m8nBigym%2ftKwtoR8eudzpoqw1A%2fx6sZg0O7Cs3ZiXb+JrEJ6twZpv8U9YUn%2fCCc4K6zTpBOgg5H3ZUNOekCfAnJomiazN8Hn0EY3Z4NPreaKZWVBnYjpg75w%3d%3d~-1; bm_s=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; bm_sz=DD1CE46143A5EE5D893DA08F96FD4EA6~YAAQ7WjJF6HEy2SdAQAAFrpUaR9wywpXCg9HhfQeGVExONxZ/sATBhi+9wCxSy6BHnCic5SuY7Xlnhq7UGbQwy4ZEAfXyjb4RPtIs5r7c2lNtxb/kFc7o8ybX4GVutCywi/OKTeOmLp2rzOkQih+VfG0J98ovX5+a1w8dwU6UEMCIYKJQQFql7lLXLyW+r/FcjabrV8q/ObcyQljICwn/t+b3QcYvKg0TN0XRqeUuLFyf5kX20mdZswa0eV/hE/9fmgZM7+It50GMqQxiH89dXdS0LTEZwrHQzwT9dYTLd1TPeuzCl6cj3sgob1oPMqdsjxNAveKfEeYgrz53xeJVLHw6Byr2DtuvZH74aL4daoGD6ErQTRNnFxh0h7UhRXhImxyg7h/G7ABi0P/6LWghBir1R626IxKNIdFC9bxTK9hGTvg/0p688dXvYe/yDrsY6OR14PsF7aatZKnXoO7Uh/rpOhFhvkMheVH3NB3UYJe/F0S9zA=~4600112~4473397; aka_lc_code=ML; bm_lso=6203F1CFB3302355CD9700A8CD9F01D143A5CE76C5FA533B757D3FF81B0494C7~YAAQ7WjJFzSuy2SdAQAAdXlUaQeMGqsI9VouEGoP2WgwFg9QVfG8hT+jGl2yUFM/dTDIDhRnaQP/avvSoGW8EcCur4MWAgG5fngUg0kA+QArkTnzLChWSFrT5o7wlURZQR+GTQiWJN/DXO+bsyMRGw0xEEE6DES1MY9Fy2BFG5RYw7u0el6zu399bVoVtVpBuOMOZASDedftzdzoTiCUk2RDPyoQy3asbiBqOnXIeXb/HFNxqIBCk8iH98S42+VW97Q8yk0L2w70e/IPIv9ZHyXVeleWNi0P/mW/7ZaRqOQIZH59O92Ir7vUV/SBsd+gA5hDiY2HPwUe5Kkxf8vQS/JEyab8PlQyXTa7FGI7pCdzBs5bxrzmCYj7ucLL44BzOipmPQKaB8afASsZ+wp59gEvEl4cKzvsblg1iK3eoIKgEOHhEQqgyYRZR/UBwukl8gddURlX0QYHfDbkhb/6~1775588638920; bm_so=6203F1CFB3302355CD9700A8CD9F01D143A5CE76C5FA533B757D3FF81B0494C7~YAAQ7WjJFzSuy2SdAQAAdXlUaQeMGqsI9VouEGoP2WgwFg9QVfG8hT+jGl2yUFM/dTDIDhRnaQP/avvSoGW8EcCur4MWAgG5fngUg0kA+QArkTnzLChWSFrT5o7wlURZQR+GTQiWJN/DXO+bsyMRGw0xEEE6DES1MY9Fy2BFG5RYw7u0el6zu399bVoVtVpBuOMOZASDedftzdzoTiCUk2RDPyoQy3asbiBqOnXIeXb/HFNxqIBCk8iH98S42+VW97Q8yk0L2w70e/IPIv9ZHyXVeleWNi0P/mW/7ZaRqOQIZH59O92Ir7vUV/SBsd+gA5hDiY2HPwUe5Kkxf8vQS/JEyab8PlQyXTa7FGI7pCdzBs5bxrzmCYj7ucLL44BzOipmPQKaB8afASsZ+wp59gEvEl4cKzvsblg1iK3eoIKgEOHhEQqgyYRZR/UBwukl8gddURlX0QYHfDbkhb/6; akavpau_www_aahomepage=1775588937~id=5ad8e153621b6719cd38360c07ebca3d; al=0; AKA_A2=A; bm_ss=ab8e18ef4e; JSESSIONID=907389089042E51D3C89B5E217F18849; KROUTEID=f18487af733dcee8e27007c99be2adf4|86b99df97e9306037645a42147508174; sessionLocale=en_US; spa_session_id=8d6acc64-bf69-4496-b9cb-f1f6f20b53f2; x-aka-exp=ssr-v10; dtCookie=v_4_srv_17_sn_E804A0E369F3E6FA46ADA74F2C5BACA0_perc_100000_ol_0_mul_1_app-3A8b2a7e44ceb3fcd4_1_rcs-3Acss_0; UAC=e0c5a06905ab42a690c7a3e515548581; XSRF-TOKEN=bcee4fcc-3bd2-4b61-9ea4-2eecb1018fa7; aka_cr_code=US-TX; aka_state_code=TX' -H 'Sec-Fetch-Dest: document' -H 'Accept-Language: en-US,en;q=0.9' -H 'Sec-Fetch-Mode: navigate' -H 'User-Agent: Mozilla/5.0 \\(Macintosh; Intel Mac OS X 10_15_7\\) AppleWebKit/605.1.15 \\(KHTML, like Gecko\\) Version/26.4 Safari/605.1.15' -H 'Accept-Encoding: gzip, deflate, br, zstd' -H 'Referer: https://www.aa.com/travelInformation/flights/status/result' -H 'Priority: u=0, i' --compressed -o /tmp/aa_flight_detail.html)", "Bash(curl -s https://www.aa.com/ui/flightinfo/runtime.js -H 'User-Agent: Mozilla/5.0 \\(Macintosh; Intel Mac OS X 10_15_7\\) AppleWebKit/605.1.15 \\(KHTML, like Gecko\\) Version/26.4 Safari/605.1.15' -H 'Referer: https://www.aa.com/travelInformation/flights/status/detail' -o /tmp/aa_runtime.js)", "Bash(curl -s https://www.aa.com/ui/flightinfo/main.js -H 'User-Agent: Mozilla/5.0 \\(Macintosh; Intel Mac OS X 10_15_7\\) AppleWebKit/605.1.15 \\(KHTML, like Gecko\\) Version/26.4 Safari/605.1.15' -H 'Referer: https://www.aa.com/travelInformation/flights/status/detail' -o /tmp/aa_main.js)", "Bash(curl -s https://www.aa.com/ui/flightinfo/main.js -H 'User-Agent: Mozilla/5.0 \\(Macintosh; Intel Mac OS X 10_15_7\\) AppleWebKit/605.1.15 \\(KHTML, like Gecko\\) Version/26.4 Safari/605.1.15' -H 'Referer: https://www.aa.com/travelInformation/flights/status/detail?search=AA%7C2152%7CDFW%7CIAH%7C2026,4,7&ref=results' -H 'Cookie: ROUTEID=IKSS.green; akavpau_www_aafullsite=1775589136~id=90986786e82aef36e29f8c3e5d2dd3ec; JSESSIONID=907389089042E51D3C89B5E217F18849; KROUTEID=f18487af733dcee8e27007c99be2adf4|86b99df97e9306037645a42147508174; sessionLocale=en_US; spa_session_id=8d6acc64-bf69-4496-b9cb-f1f6f20b53f2; x-aka-exp=ssr-v10; UAC=e0c5a06905ab42a690c7a3e515548581; XSRF-TOKEN=bcee4fcc-3bd2-4b61-9ea4-2eecb1018fa7; _abck=E4AC90DFB34FA06D4454E17D13364D25~0~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~-1~-1~1775592249' --compressed -o /tmp/aa_main.js)", "Bash(curl -s 'https://www.aa.com/flightinfo/v1.2/flights?flightNumber=2152&departureDate=2026-04-07&carrierCode=AA' -H 'User-Agent: Mozilla/5.0 \\(Macintosh; Intel Mac OS X 10_15_7\\) AppleWebKit/605.1.15 \\(KHTML, like Gecko\\) Version/26.4 Safari/605.1.15' -H 'Accept: application/json' -H 'Client-Details: aa-ct-aacom/flifoui' -H 'locale: en_US' -H 'Referer: https://www.aa.com/travelInformation/flights/status/detail' -H 'Cookie: ROUTEID=IKSS.green; JSESSIONID=907389089042E51D3C89B5E217F18849; sessionLocale=en_US; XSRF-TOKEN=bcee4fcc-3bd2-4b61-9ea4-2eecb1018fa7; _abck=E4AC90DFB34FA06D4454E17D13364D25~0~YAAQ7WjJF5/Ey2SdAQAAFrpUaQ+lgS46iEjAo+HEHSHm2uubPe4NcBhT0lbrxYI/E+fPLihSGmkV1T5vltIKmL/DrfrzNBJxSPbBHglGInSJNDAh6LaQk58bq2LvGtZsRaWxIx4KGTpRIG/ioME5xFZ5Hm/yMiizxAyW175nnXDlDhUAbi5KsRoIRCKIrOyZ68hFa2YbDnpEOBDggRti/AL5/cFkYa6t1t11HUOLGBGrDpL1jcce3cXuxHgFDqwrya5diir8SvyO2KBBWll/vt26Oph2vu/Ohi3X6093GycSSbgrvEtacjuCMeDqG5vluulMbQz8+nijXLqVoLcGSm3xM72SxtrFIUbsPWVcCeNyGFljaa28TghEw66bUO7M1z797bC8a9nCq1L61Czh9aZaKUPNUi6kMn/r6W5peA/G4jzNtW1UmOJNQ1wNgeUTpBD92/2L2t00Wpt1mPgWFLWaDK2ioT45JNO/BsfXizCxSrNtGfechJ7XcTV1tx/SpCJ1cHgif5QLxotNRoz3F69tXCMomT3nNYBkjghxrizCEJQL3Yw4TaKUYb241RKK7/e3jdtPVUlhIu/mZk+gyKQ+jsFOx2psxSprttmx61jkf/Cy7pWH5WNSGip25ZPkcas+Nsu48aaKugmfCNF9e2RFX899W2a9p04tOP4dBkqzi2NewIb8Eu6gA9YAAoVGoD8CN0kYro6UKucA5qCcOf/4880A8M6AVBChqM/yTlDYcePQWMljhrSYd+Jh7Sxk+73Qdzb9OPiLqaJsCPGmK5BZPFv4z/k8iI2x3asisPfbui+HTnzRp0oaZIMegiEGYpm1kgmvY5S6/ryHTMLJ0QlPRdwnesFHAPnM80Gu7T4=~-1~-1~1775592249' --compressed)", "Bash(python3 -m json.tool)", "Bash(curl -s 'https://www.aa.com/flightinfo/v1.2/flights?flightNumber=2152&departureDate=2026-04-07&carrierCode=AA' -H 'User-Agent: Mozilla/5.0 \\(Macintosh; Intel Mac OS X 10_15_7\\) AppleWebKit/605.1.15 \\(KHTML, like Gecko\\) Version/26.4 Safari/605.1.15' -H 'Accept: application/json' -H 'Client-Details: aa-ct-aacom/flifoui' -H 'Referer: https://www.aa.com/travelInformation/flights/status/detail' -H 'Cookie: ROUTEID=IKSS.green; JSESSIONID=907389089042E51D3C89B5E217F18849; sessionLocale=en_US; XSRF-TOKEN=bcee4fcc-3bd2-4b61-9ea4-2eecb1018fa7; _abck=E4AC90DFB34FA06D4454E17D13364D25~0~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~-1~-1~1775592249' --compressed)", "Bash(curl -s -X POST https://www.aa.com/flightinfo/v1.2/ -H 'Content-Type: application/json' -H 'Client-Details: aa-ct-aacom/flifoui' -H 'locale: en_US' -H 'Accept: application/json' -H 'User-Agent: Mozilla/5.0 \\(Macintosh; Intel Mac OS X 10_15_7\\) AppleWebKit/605.1.15 \\(KHTML, like Gecko\\) Version/26.4 Safari/605.1.15' -H 'Referer: https://www.aa.com/travelInformation/flights/status/detail?search=AA%7C2152%7CDFW%7CIAH%7C2026,4,7&ref=results' -H 'Origin: https://www.aa.com' -H 'Cookie: ROUTEID=IKSS.green; JSESSIONID=907389089042E51D3C89B5E217F18849; sessionLocale=en_US; XSRF-TOKEN=bcee4fcc-3bd2-4b61-9ea4-2eecb1018fa7; _abck=E4AC90DFB34FA06D4454E17D13364D25~0~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~-1~-1~1775592249' --compressed -d '[{\"airlineCode\":\"AA\",\"flightNumber\":\"2152\",\"orgAirportCode\":\"DFW\",\"destAirportCode\":\"IAH\",\"fltOrgDate\":\"2026-04-07\"}]')", "Bash(mkdir -p /tmp/delta_apk)", "Bash(unzip -o ~/Desktop/code/flights/apps/com.delta.mobile.android_6.7-24019_4arch_7dpi_1lang_1c4d6b7f98c910145859a9b6e55455d3_apkmirror.com.apkm)", "Bash(unzip -l ../base.apk)", "Bash(cd /tmp/delta_apk/extracted echo \"=== STANDBY/WAITLIST/UPGRADE REFERENCES ===\" strings classes*.dex)", "Bash(cd /tmp/delta_apk/extracted echo \"=== AIRPORT STANDBY LIST REPOSITORY ===\" strings classes*.dex)", "Bash(cd /tmp/delta_apk/extracted echo \"=== getUpgradeStandByServices ===\" strings classes*.dex)", "Bash(python3 -m json.tool echo \"\" echo \"=== MORE properties ===\" cat /tmp/delta_decoded/assets/TLFConfigurableItems.properties)", "Bash(ls -lh ~/Desktop/code/flights/apps/com.spirit.customerapp*.apk)", "Bash(mkdir -p /tmp/spirit_apk/extracted)", "Bash(unzip -o ~/Desktop/code/flights/apps/com.spirit.customerapp*.apk classes.dex classes2.dex classes3.dex classes4.dex classes5.dex classes6.dex res/xml/network_security_config.xml)", "Bash(unzip -l ~/Desktop/code/flights/apps/com.spirit.customerapp*.apk)", "Bash(cd /tmp/spirit_apk/extracted echo \"=== STANDBY/WAITLIST/UPGRADE REFERENCES ===\" strings classes*.dex)", "Bash(cd /tmp/spirit_apk/extracted echo \"=== SPIRIT PROD API BASE ===\" echo \"https://api.spirit.com/customermobileprod/2.8.0/\" echo \"\" echo \"=== ALL API PATHS UNDER THE BASE ===\" strings classes*.dex)", "Bash(ls:*)", "Bash(mkdir -p /tmp/united_apk/extracted)", "Bash(unzip -o ~/Desktop/code/flights/apps/united-airlines.apk classes*.dex)", "Bash(unzip -l ~/Desktop/code/flights/apps/united-airlines.apk)", "Bash(unzip -o ~/Desktop/code/flights/apps/united-airlines.apk \"classes*.dex\")", "Bash(SEARCH=\"availableSeats|openSeats|seatCount|seatsAvailable|seatsRemaining|capacity|loadFactor|standbyCount|waitlistCount|numStandby|availableCount|cabinAvail|numberOfStandby|standbyPassenger|standbyList|upgradeList|availableInventory|seatInventory|emptySeats|bookedSeats|totalSeats|remainingSeats|openCount|standbyTotal|waitlistTotal|upgradeCount|upgradeTotal|paxOnStandby|standbyPax|numOnList\" echo \"==================== DELTA ====================\" cd /tmp/delta_apk/extracted strings classes*.dex)", "Bash(sort -u echo \"---\" strings classes*.dex)", "Bash(sort -u echo \"---\")", "Bash(cd /tmp/united_apk/extracted echo \"=== UNITED API DOMAINS ===\" strings classes*.dex)", "Bash(cd /tmp/united_apk/extracted echo \"=== UNITED PROD API BASE URLs ===\" strings classes*.dex)", "Bash(cd /tmp/united_apk/extracted echo \"=== ALL UNITED FLIGHT STATUS SERVICE ENDPOINTS ===\" strings classes*.dex)", "Bash(cd /tmp/united_apk/extracted echo \"=== STANDBY LIST SERVICE ===\" strings classes*.dex)", "Bash(curl -s -X POST https://mobileapi.united.com/standbylistservice/api/GetStandbyList -H 'Content-Type: application/json' -H 'User-Agent: United/6.0 \\(Android\\)' -H 'Accept: application/json' -d '{\"flightNumber\":\"1429\",\"flightDate\":\"2026-04-07\",\"origin\":\"IAH\",\"destination\":\"AUS\"}' -o /tmp/united_standby.json -w 'HTTP %{http_code} Size: %{size_download}')", "Bash(curl -s -X POST https://mobileapi.united.com/upgradelistservice/api/GetUpgradeList -H 'Content-Type: application/json' -H 'User-Agent: United/6.0 \\(Android\\)' -H 'Accept: application/json' -d '{\"flightNumber\":\"1429\",\"flightDate\":\"2026-04-07\",\"origin\":\"IAH\",\"destination\":\"AUS\"}' -o /tmp/united_upgrade.json -w 'HTTP %{http_code} Size: %{size_download}')", "Bash(curl -s 'https://mobileapi.united.com/flightstatusservice/api/GetFlightStatus_UAandStar?flightNumber=1429&flightDate=2026-04-07&carrierCode=UA' -H 'User-Agent: United/6.0 \\(Android\\)' -H 'Accept: application/json' -o /tmp/united_status.json -w 'HTTP %{http_code} Size: %{size_download}')", "Bash(curl -s -X POST https://www.delta.com/api/mobile/asl -H 'Content-Type: application/json' -H 'User-Agent: Delta/6.7 \\(Android\\)' -H 'Accept: application/json' -d '{\"flightNumber\":\"2152\",\"departureDate\":\"2026-04-07\",\"origin\":\"DFW\",\"destination\":\"IAH\"}' -o /tmp/delta_asl.json -w 'HTTP %{http_code} Size: %{size_download}')", "Bash(curl -s -X POST https://www.delta.com/api/mobile/getFlightStatus -H 'Content-Type: application/json' -H 'User-Agent: Delta/6.7 \\(Android\\)' -H 'Accept: application/json' -d '{\"flightNumber\":\"2152\",\"departureDate\":\"2026-04-07\",\"origin\":\"DFW\",\"destination\":\"IAH\"}' -o /tmp/delta_status.json -w 'HTTP %{http_code} Size: %{size_download}')", "Bash(curl -s -X POST https://api.spirit.com/customermobileprod/2.8.0/v1/getboastatus -H 'Content-Type: application/json' -H 'User-Agent: Spirit/4.7.0 \\(Android\\)' -H 'Accept: application/json' -d '{\"flightNumber\":\"123\",\"departureDate\":\"2026-04-07\"}' -o /tmp/spirit_boa.json -w 'HTTP %{http_code} Size: %{size_download}')", "Bash(curl -s https://api.spirit.com/customermobileprod/2.8.0/v1/init -H 'User-Agent: Spirit/4.7.0 \\(Android\\)' -H 'Accept: application/json' -o /tmp/spirit_init.json -w 'HTTP %{http_code} Size: %{size_download}')", "Bash(curl -sv https://mobileapi.united.com/standbylistservice/api/GetStandbyList -X POST -H 'Content-Type: application/json' -d '{}')", "Bash(cd /tmp/spirit_apk/extracted echo \"=== SPIRIT SUBSCRIPTION KEY / API KEY ===\" strings classes*.dex)", "Bash(head -10 echo \"---\" strings classes*.dex)", "Bash(/Users/treyt/Library/Android/sdk/platform-tools/adb install:*)", "Bash(mitmdump --version)", "Bash(mitmdump -p 9999)", "Bash(/Users/treyt/Library/Android/sdk/platform-tools/adb pull:*)", "Bash(curl -sv -X POST https://api.spirit.com/customermobileprod/2.8.0/v2/Token -H 'Content-Type: application/json' -H 'Ocp-Apim-Subscription-Key: c6567af50d544dfbb3bc5dd99c6bb177' -H 'User-Agent: GuestMobileApp/4.7.0 \\(Android 28\\)' -d '{\"applicationName\":\"customerMobileApp\",\"credentials\":{\"alternativeIdentifier\":\"\",\"channelType\":\"\",\"domain\":\"\",\"location\":\"\",\"password\":\"\",\"username\":\"\"}}' -o /tmp/spirit_token_test.json -w '\\\\nHTTP %{http_code}' --max-time 10)", "WebFetch(domain:yoghurtbot.github.io)", "WebFetch(domain:rapidapi.com)", "WebFetch(domain:deepwiki.com)", "Bash(chmod +x ~/Desktop/code/flights/frida/run.sh)", "Bash(curl -s -X POST https://api.spirit.com/customermobileprod/2.8.0/v3/GetFlightInfoBI -H 'Content-Type: application/json' -H 'Ocp-Apim-Subscription-Key: c6567af50d544dfbb3bc5dd99c6bb177' -H 'X-Bearer-Token: eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.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.LRAb8KWJUWXebolXf7cDjxvDZMVrGLU73SjaZSeTBYrOMViENlysOZa86Qny2p5tRDTQjzMo2zTClGiwUCuiqliimSj2vvGlbalyQGxPV2Ke0X2MhFnWsgxnAk5CNh5gtkwg9dH3kcW6TkfyXi8aDZAZPI8GXcl8jreX3HFIh2g0Y6lFvnMm17X8snDkngAyO_ejN3U1LkgKhbNJng_QnvzAknhb4c9X6ltCoxCAS0Lo-a1E0EkWYRTZfPpb4NF0Cdzxe_9CgZ7SrRQj6Q-8NpAq98YW9lhUfQQQUL9lTbRDvGzxLvcmI7BASSgG-K6zYCABidTJ85DJ2W_XaAoPWtTxes8cdor_1HQKiFuOFAyKx_n0JfHuDZ7ThPWRLZgJc3ZtwzrktnkTyoEZcMavpuIMaX-dPg-T6jVprnkXhpNnPeW04Mq1l40X5bCakFqoStQhFzZwpnmC740eCD5BDNniypVCIJF_SZRNVGwW2T8ru3SO-YzwLr3ys5YsRBZp' -H 'User-Agent: GuestMobileApp/4.7.0 \\(Android 28\\)' -H 'Cache-Control: no-cache' -H 'Platform: Android' -H 'App-Version: 4.7.0 \\(1340\\)' -H 'accept-language: en-US' -d '{\"flightNumber\":\"371\",\"departureDate\":\"2026-04-07\"}' --max-time 10 -o /tmp/spirit_flight_response.json -w '\\\\nHTTP %{http_code} Size: %{size_download}')", "Bash(curl -s -X POST https://api.spirit.com/customermobileprod/2.8.0/v3/Token -H 'Content-Type: application/json' -H 'Ocp-Apim-Subscription-Key: c6567af50d544dfbb3bc5dd99c6bb177' -H 'User-Agent: GuestMobileApp/4.7.0 \\(Android 28\\)' -H 'Platform: Android' -d '{\"applicationName\":\"customerMobileApp\",\"credentials\":{\"alternativeIdentifier\":\"\",\"channelType\":\"\",\"domain\":\"\",\"location\":\"\",\"password\":\"\",\"username\":\"\"}}' --max-time 10 -o /tmp/v3token.json -w 'HTTP %{http_code}')", "Bash(git rm:*)" ] } }