148bc3887c
- Adaptive iPhone/iPad layout with NavigationSplitView sidebar - Auto-detect SSL-pinned domains, fall back to passthrough - Certificate install via local HTTP server (Safari profile flow) - App Group-backed CA, per-domain leaf cert LRU cache - DB-backed config repository, Darwin notification throttling - Rules engine, breakpoint rules, pinned domain tracking - os.Logger instrumentation across tunnel/proxy/mitm/capture/cert/rules/db/ipc/ui - Fix dyld framework embed, race conditions, thread safety
137 lines
25 KiB
JSON
137 lines
25 KiB
JSON
{
|
|
"permissions": {
|
|
"allow": [
|
|
"WebFetch(domain:docs.proxyman.com)",
|
|
"WebSearch",
|
|
"WebFetch(domain:freshbits.fi)",
|
|
"WebFetch(domain:forums.swift.org)",
|
|
"WebFetch(domain:github.com)",
|
|
"Bash(xcode-select -p)",
|
|
"Bash(xcodegen generate:*)",
|
|
"Bash(rm -rf ~/Library/Developer/Xcode/DerivedData/ProxyApp-*/)",
|
|
"Bash(rm -rf ~/Library/Developer/Xcode/DerivedData/ProxyApp-*)",
|
|
"Read(//Users/treyt/Library/Developer/Xcode/DerivedData/**)",
|
|
"Bash(pkill -f \"com.apple.dt.SKAgent\")",
|
|
"Bash(rm -rf ~/Library/Developer/Xcode/DerivedData/ProxyApp-*/SourcePackages)",
|
|
"Bash(rm -rf ~/Library/Caches/org.swift.swiftpm/repositories/GRDB*)",
|
|
"Bash(pkill -9 -f xcodebuild)",
|
|
"Bash(rm -rf ~/Library/Caches/org.swift.swiftpm)",
|
|
"Bash(pkill -9 -f swift-build)",
|
|
"Bash(pkill -9 -f \"com.apple.dt\")",
|
|
"Bash(ls ~/Library/Developer/Xcode/DerivedData/ProxyApp-*/SourcePackages/checkouts/)",
|
|
"Bash(cat ~/Library/Developer/Xcode/DerivedData/ProxyApp-*/SourcePackages/checkouts/swift-crypto/Package.swift)",
|
|
"Bash(cat ~/Library/Developer/Xcode/DerivedData/ProxyApp-*/SourcePackages/checkouts/swift-certificates/Package.swift)",
|
|
"Bash(git init:*)",
|
|
"Bash(git add:*)",
|
|
"Bash(git commit:*)",
|
|
"Bash(ls -la /private/tmp/claude-501/-Users-treyt-Desktop-code-proxy-ios/0757dced-e811-40bc-bec2-50228073acad/tasks/*.output)",
|
|
"Bash(grep -r \"fatalError\\\\|try!\\\\|force unwrap\\\\|!\\\\s*$\" /Users/treyt/Desktop/code/proxy_ios/ProxyCore/Sources --include=\"*.swift\")",
|
|
"Bash(grep:*)",
|
|
"Read(//Users/treyt/.claude/plugins/marketplaces/**)",
|
|
"Read(//Users/treyt/**)",
|
|
"Bash(pip3 install:*)",
|
|
"Bash(python3 -c ':*)",
|
|
"Bash(brew install:*)",
|
|
"Bash(python3)",
|
|
"Bash(/Users/treyt/.claude/plugins/marketplaces/axiom-marketplace/.claude-plugin/plugins/axiom/bin/xclog list:*)",
|
|
"Bash(log stream:*)",
|
|
"Bash(kill %1)",
|
|
"Bash(ls -la /Users/treyt/Desktop/code/proxy_ios/*.apk*)",
|
|
"Bash(ls -la /Users/treyt/Desktop/code/proxy_ios/*.apkm)",
|
|
"Bash(mkdir -p /tmp/aa_apk)",
|
|
"Read(//tmp/**)",
|
|
"Bash(rm -rf *)",
|
|
"Bash(unzip -o \"/Users/treyt/Desktop/code/proxy_ios/com.aa.android_2025.31-62650050_2arch_7dpi_24lang_1feat_7be620b8dcf290a0a741d5d9c13a5ad1_apkmirror.com.apkm\")",
|
|
"Read(//private/tmp/aa_apk/**)",
|
|
"Bash(mkdir -p /tmp/aa_base)",
|
|
"Bash(unzip -o /tmp/aa_apk/base.apk AndroidManifest.xml res/xml/network_security_config.xml)",
|
|
"Bash(unzip -l /tmp/aa_apk/base.apk)",
|
|
"Bash(unzip -o /tmp/aa_apk/base.apk classes.dex classes2.dex classes3.dex -d /tmp/aa_base)",
|
|
"Bash(xxd /tmp/aa_base/res/xml/network_security_config.xml)",
|
|
"Read(//private/tmp/**)",
|
|
"Bash(apktool d:*)",
|
|
"Bash(adb devices:*)",
|
|
"Bash(emulator -list-avds)",
|
|
"Bash(/Users/treyt/Library/Android/sdk/emulator/emulator -avd Pixel_6_API_34 -writable-system -no-snapshot-load -no-audio -gpu swiftshader_indirect)",
|
|
"Bash(/Users/treyt/Library/Android/sdk/platform-tools/adb wait-for-device:*)",
|
|
"Bash(/Users/treyt/Library/Android/sdk/platform-tools/adb shell:*)",
|
|
"Bash(/Users/treyt/Library/Android/sdk/platform-tools/adb devices:*)",
|
|
"Bash(/Users/treyt/Library/Android/sdk/platform-tools/adb root:*)",
|
|
"Bash(/Users/treyt/Library/Android/sdk/platform-tools/adb push:*)",
|
|
"Bash(frida-ps -U)",
|
|
"Bash(/Users/treyt/Library/Android/sdk/platform-tools/adb install-multiple:*)",
|
|
"WebFetch(domain:www.passrider.com)",
|
|
"WebFetch(domain:www.aa.com)",
|
|
"Bash(sort echo:*)",
|
|
"Bash(apktool b:*)",
|
|
"Bash(sed -i '' '/car_blue_700/d' /tmp/aa_patched/res/values-v34/colors.xml)",
|
|
"Bash(sed -i '' '/background_floating_device_default_dark/d' /tmp/aa_patched/res/values-v34/colors.xml)",
|
|
"Bash(java -jar /opt/homebrew/Cellar/apktool/*/libexec/smali*.jar)",
|
|
"Bash([ ! -f /tmp/smali.jar ])",
|
|
"Bash(curl -sL -o /tmp/smali.jar \"https://github.com/google/smali/releases/download/v2.5.2/smali-2.5.2.jar\")",
|
|
"Bash([ ! -f /tmp/baksmali.jar ])",
|
|
"Bash(curl -sL -o /tmp/baksmali.jar \"https://github.com/google/smali/releases/download/v2.5.2/baksmali-2.5.2.jar\")",
|
|
"Bash(mkdir -p dex_patch)",
|
|
"Bash(curl -sL -o /tmp/smali.jar \"https://bitbucket.org/JesusFreke/smali/downloads/smali-2.5.2.jar\")",
|
|
"Bash(curl -sL -o /tmp/baksmali.jar \"https://bitbucket.org/JesusFreke/smali/downloads/baksmali-2.5.2.jar\")",
|
|
"Bash(java -jar /tmp/baksmali.jar d classes17.dex -o smali_out)",
|
|
"Bash(java -jar /tmp/smali.jar a smali_out -o classes17_patched.dex)",
|
|
"Bash(curl -s 'https://www.aa.com/travelInformation/flights/status/detail?search=AA%7C2152%7CDFW%7CIAH%7C2026,4,7&ref=results' -X GET -H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' -H 'Sec-Fetch-Site: none' -H 'Cookie: ROUTEID=IKSS.green; akavpau_www_aafullsite=1775589136~id=90986786e82aef36e29f8c3e5d2dd3ec; _abck=E4AC90DFB34FA06D4454E17D13364D25~0~YAAQ7WjJF5/Ey2SdAQAAFrpUaQ+lgS46iEjAo+HEHSHm2uubPe4NcBhT0lbrxYI/E+fPLihSGmkV1T5vltIKmL/DrfrzNBJxSPbBHglGInSJNDAh6LaQk58bq2LvGtZsRaWxIx4KGTpRIG/ioME5xFZ5Hm/yMiizxAyW175nnXDlDhUAbi5KsRoIRCKIrOyZ68hFa2YbDnpEOBDggRti/AL5/cFkYa6t1t11HUOLGBGrDpL1jcce3cXuxHgFDqwrya5diir8SvyO2KBBWll/vt26Oph2vu/Ohi3X6093GycSSbgrvEtacjuCMeDqG5vluulMbQz8+nijXLqVoLcGSm3xM72SxtrFIUbsPWVcCeNyGFljaa28TghEw66bUO7M1z797bC8a9nCq1L61Czh9aZaKUPNUi6kMn/r6W5peA/G4jzNtW1UmOJNQ1wNgeUTpBD92/2L2t00Wpt1mPgWFLWaDK2ioT45JNO/BsfXizCxSrNtGfechJ7XcTV1tx/SpCJ1cHgif5QLxotNRoz3F69tXCMomT3nNYBkjghxrizCEJQL3Yw4TaKUYb241RKK7/e3jdtPVUlhIu/mZk+gyKQ+jsFOx2psxSprttmx61jkf/Cy7pWH5WNSGip25ZPkcas+Nsu48aaKugmfCNF9e2RFX899W2a9p04tOP4dBkqzi2NewIb8Eu6gA9YAAoVGoD8CN0kYro6UKucA5qCcOf/4880A8M6AVBChqM/yTlDYcePQWMljhrSYd+Jh7Sxk+73Qdzb9OPiLqaJsCPGmK5BZPFv4z/k8iI2x3asisPfbui+HTnzRp0oaZIMegiEGYpm1kgmvY5S6/ryHTMLJ0QlPRdwnesFHAPnM80Gu7T4=~-1~-1~1775592249~AAQAAAAF%2f%2f%2f%2f%2f99vF+lWahXC5f7aF9RVpxdEvGlYwPI6pe4+VSXBvfuW+Evyc3m8nBigym%2ftKwtoR8eudzpoqw1A%2fx6sZg0O7Cs3ZiXb+JrEJ6twZpv8U9YUn%2fCCc4K6zTpBOgg5H3ZUNOekCfAnJomiazN8Hn0EY3Z4NPreaKZWVBnYjpg75w%3d%3d~-1; bm_s=YAAQ7WjJF6DEy2SdAQAAFrpUaQX9Ecpy8ZiZTCRdjaC4xRLcZ/LHL+jZbFoeBR8FU0IsZZ/B3/UzijEkJdcFurm6eY0MIhY0QBkAtMY3z0XxiXLlLv+7BhAGeLWB84mFyfVmoigiTZ6rCW/08qffBLcjIta2ykDQ3hHbn4yWDLG/V6EXz9Uri+OHIdcBKrFndUd7OUkyUdXVt++uyQMpiOmlJmDx5rX8Vzjn6/c0SoWEg1btSaRi8nX3284U485KzmXnmOshjupnanyP2Tr9jIFj45LGRhxeRSaold0UtgpQ7/6fN/tB27owr8qA4r4UE9MVA5oqSUnhPlTjVibwhyOfa8plStY/wgsXfnGnwgKTK1Xtg2dooEutKsVpL2wgiqzIEK169L3IIjJzGj3/kRHxEWLXFBQDbANIsUoe3avi9hHHz29xDnNd0Fm4FQWa9STfhJZz4Ix3PhAopUrTt+p0tAODVFF5MVsX9AJ1P55Gd0/G/pQ9gVOFd4Wca1On/VJs/hk+2hlvZKpTWmueCZrvuOb2xQgIxanpfFHNoQySybmrql98YTpuHMS72PyVnIgdLSKjn1J8rrWsecF7Au34RcsKnsw8cQHFqZW7lnwrZV9GjlgEfpODYtQjocQg39yvPO/d6EGtWCPtnrC1lSPdbDjUhJpKdNYnVUG1Enok55qaQlI7uUsFdCMDxT4uezwrBUyQtHDVLSB47gLTz0wd7rbLUS1CzFzcKY0XixmzJI8MsCUgHG6V8xCI4lu9toSM1C5aUwLtEqQ4Izz6Y+KDAzLXMZ3czPim2P0gXbFGs8U00fxUtuJagmzrJ1oxm0XoC2aB+xmusGIzpzo3nPi3FxmUm7JdhqJiatgYWWHg4H8PL8S8uotq+yo=; bm_sz=DD1CE46143A5EE5D893DA08F96FD4EA6~YAAQ7WjJF6HEy2SdAQAAFrpUaR9wywpXCg9HhfQeGVExONxZ/sATBhi+9wCxSy6BHnCic5SuY7Xlnhq7UGbQwy4ZEAfXyjb4RPtIs5r7c2lNtxb/kFc7o8ybX4GVutCywi/OKTeOmLp2rzOkQih+VfG0J98ovX5+a1w8dwU6UEMCIYKJQQFql7lLXLyW+r/FcjabrV8q/ObcyQljICwn/t+b3QcYvKg0TN0XRqeUuLFyf5kX20mdZswa0eV/hE/9fmgZM7+It50GMqQxiH89dXdS0LTEZwrHQzwT9dYTLd1TPeuzCl6cj3sgob1oPMqdsjxNAveKfEeYgrz53xeJVLHw6Byr2DtuvZH74aL4daoGD6ErQTRNnFxh0h7UhRXhImxyg7h/G7ABi0P/6LWghBir1R626IxKNIdFC9bxTK9hGTvg/0p688dXvYe/yDrsY6OR14PsF7aatZKnXoO7Uh/rpOhFhvkMheVH3NB3UYJe/F0S9zA=~4600112~4473397; aka_lc_code=ML; bm_lso=6203F1CFB3302355CD9700A8CD9F01D143A5CE76C5FA533B757D3FF81B0494C7~YAAQ7WjJFzSuy2SdAQAAdXlUaQeMGqsI9VouEGoP2WgwFg9QVfG8hT+jGl2yUFM/dTDIDhRnaQP/avvSoGW8EcCur4MWAgG5fngUg0kA+QArkTnzLChWSFrT5o7wlURZQR+GTQiWJN/DXO+bsyMRGw0xEEE6DES1MY9Fy2BFG5RYw7u0el6zu399bVoVtVpBuOMOZASDedftzdzoTiCUk2RDPyoQy3asbiBqOnXIeXb/HFNxqIBCk8iH98S42+VW97Q8yk0L2w70e/IPIv9ZHyXVeleWNi0P/mW/7ZaRqOQIZH59O92Ir7vUV/SBsd+gA5hDiY2HPwUe5Kkxf8vQS/JEyab8PlQyXTa7FGI7pCdzBs5bxrzmCYj7ucLL44BzOipmPQKaB8afASsZ+wp59gEvEl4cKzvsblg1iK3eoIKgEOHhEQqgyYRZR/UBwukl8gddURlX0QYHfDbkhb/6~1775588638920; bm_so=6203F1CFB3302355CD9700A8CD9F01D143A5CE76C5FA533B757D3FF81B0494C7~YAAQ7WjJFzSuy2SdAQAAdXlUaQeMGqsI9VouEGoP2WgwFg9QVfG8hT+jGl2yUFM/dTDIDhRnaQP/avvSoGW8EcCur4MWAgG5fngUg0kA+QArkTnzLChWSFrT5o7wlURZQR+GTQiWJN/DXO+bsyMRGw0xEEE6DES1MY9Fy2BFG5RYw7u0el6zu399bVoVtVpBuOMOZASDedftzdzoTiCUk2RDPyoQy3asbiBqOnXIeXb/HFNxqIBCk8iH98S42+VW97Q8yk0L2w70e/IPIv9ZHyXVeleWNi0P/mW/7ZaRqOQIZH59O92Ir7vUV/SBsd+gA5hDiY2HPwUe5Kkxf8vQS/JEyab8PlQyXTa7FGI7pCdzBs5bxrzmCYj7ucLL44BzOipmPQKaB8afASsZ+wp59gEvEl4cKzvsblg1iK3eoIKgEOHhEQqgyYRZR/UBwukl8gddURlX0QYHfDbkhb/6; akavpau_www_aahomepage=1775588937~id=5ad8e153621b6719cd38360c07ebca3d; al=0; AKA_A2=A; bm_ss=ab8e18ef4e; JSESSIONID=907389089042E51D3C89B5E217F18849; KROUTEID=f18487af733dcee8e27007c99be2adf4|86b99df97e9306037645a42147508174; sessionLocale=en_US; spa_session_id=8d6acc64-bf69-4496-b9cb-f1f6f20b53f2; x-aka-exp=ssr-v10; dtCookie=v_4_srv_17_sn_E804A0E369F3E6FA46ADA74F2C5BACA0_perc_100000_ol_0_mul_1_app-3A8b2a7e44ceb3fcd4_1_rcs-3Acss_0; UAC=e0c5a06905ab42a690c7a3e515548581; XSRF-TOKEN=bcee4fcc-3bd2-4b61-9ea4-2eecb1018fa7; aka_cr_code=US-TX; aka_state_code=TX' -H 'Sec-Fetch-Dest: document' -H 'Accept-Language: en-US,en;q=0.9' -H 'Sec-Fetch-Mode: navigate' -H 'User-Agent: Mozilla/5.0 \\(Macintosh; Intel Mac OS X 10_15_7\\) AppleWebKit/605.1.15 \\(KHTML, like Gecko\\) Version/26.4 Safari/605.1.15' -H 'Accept-Encoding: gzip, deflate, br, zstd' -H 'Referer: https://www.aa.com/travelInformation/flights/status/result' -H 'Priority: u=0, i' --compressed -o /tmp/aa_flight_detail.html)",
|
|
"Bash(curl -s https://www.aa.com/ui/flightinfo/runtime.js -H 'User-Agent: Mozilla/5.0 \\(Macintosh; Intel Mac OS X 10_15_7\\) AppleWebKit/605.1.15 \\(KHTML, like Gecko\\) Version/26.4 Safari/605.1.15' -H 'Referer: https://www.aa.com/travelInformation/flights/status/detail' -o /tmp/aa_runtime.js)",
|
|
"Bash(curl -s https://www.aa.com/ui/flightinfo/main.js -H 'User-Agent: Mozilla/5.0 \\(Macintosh; Intel Mac OS X 10_15_7\\) AppleWebKit/605.1.15 \\(KHTML, like Gecko\\) Version/26.4 Safari/605.1.15' -H 'Referer: https://www.aa.com/travelInformation/flights/status/detail' -o /tmp/aa_main.js)",
|
|
"Bash(curl -s https://www.aa.com/ui/flightinfo/main.js -H 'User-Agent: Mozilla/5.0 \\(Macintosh; Intel Mac OS X 10_15_7\\) AppleWebKit/605.1.15 \\(KHTML, like Gecko\\) Version/26.4 Safari/605.1.15' -H 'Referer: https://www.aa.com/travelInformation/flights/status/detail?search=AA%7C2152%7CDFW%7CIAH%7C2026,4,7&ref=results' -H 'Cookie: ROUTEID=IKSS.green; akavpau_www_aafullsite=1775589136~id=90986786e82aef36e29f8c3e5d2dd3ec; JSESSIONID=907389089042E51D3C89B5E217F18849; KROUTEID=f18487af733dcee8e27007c99be2adf4|86b99df97e9306037645a42147508174; sessionLocale=en_US; spa_session_id=8d6acc64-bf69-4496-b9cb-f1f6f20b53f2; x-aka-exp=ssr-v10; UAC=e0c5a06905ab42a690c7a3e515548581; XSRF-TOKEN=bcee4fcc-3bd2-4b61-9ea4-2eecb1018fa7; _abck=E4AC90DFB34FA06D4454E17D13364D25~0~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~-1~-1~1775592249' --compressed -o /tmp/aa_main.js)",
|
|
"Bash(curl -s 'https://www.aa.com/flightinfo/v1.2/flights?flightNumber=2152&departureDate=2026-04-07&carrierCode=AA' -H 'User-Agent: Mozilla/5.0 \\(Macintosh; Intel Mac OS X 10_15_7\\) AppleWebKit/605.1.15 \\(KHTML, like Gecko\\) Version/26.4 Safari/605.1.15' -H 'Accept: application/json' -H 'Client-Details: aa-ct-aacom/flifoui' -H 'locale: en_US' -H 'Referer: https://www.aa.com/travelInformation/flights/status/detail' -H 'Cookie: ROUTEID=IKSS.green; JSESSIONID=907389089042E51D3C89B5E217F18849; sessionLocale=en_US; XSRF-TOKEN=bcee4fcc-3bd2-4b61-9ea4-2eecb1018fa7; _abck=E4AC90DFB34FA06D4454E17D13364D25~0~YAAQ7WjJF5/Ey2SdAQAAFrpUaQ+lgS46iEjAo+HEHSHm2uubPe4NcBhT0lbrxYI/E+fPLihSGmkV1T5vltIKmL/DrfrzNBJxSPbBHglGInSJNDAh6LaQk58bq2LvGtZsRaWxIx4KGTpRIG/ioME5xFZ5Hm/yMiizxAyW175nnXDlDhUAbi5KsRoIRCKIrOyZ68hFa2YbDnpEOBDggRti/AL5/cFkYa6t1t11HUOLGBGrDpL1jcce3cXuxHgFDqwrya5diir8SvyO2KBBWll/vt26Oph2vu/Ohi3X6093GycSSbgrvEtacjuCMeDqG5vluulMbQz8+nijXLqVoLcGSm3xM72SxtrFIUbsPWVcCeNyGFljaa28TghEw66bUO7M1z797bC8a9nCq1L61Czh9aZaKUPNUi6kMn/r6W5peA/G4jzNtW1UmOJNQ1wNgeUTpBD92/2L2t00Wpt1mPgWFLWaDK2ioT45JNO/BsfXizCxSrNtGfechJ7XcTV1tx/SpCJ1cHgif5QLxotNRoz3F69tXCMomT3nNYBkjghxrizCEJQL3Yw4TaKUYb241RKK7/e3jdtPVUlhIu/mZk+gyKQ+jsFOx2psxSprttmx61jkf/Cy7pWH5WNSGip25ZPkcas+Nsu48aaKugmfCNF9e2RFX899W2a9p04tOP4dBkqzi2NewIb8Eu6gA9YAAoVGoD8CN0kYro6UKucA5qCcOf/4880A8M6AVBChqM/yTlDYcePQWMljhrSYd+Jh7Sxk+73Qdzb9OPiLqaJsCPGmK5BZPFv4z/k8iI2x3asisPfbui+HTnzRp0oaZIMegiEGYpm1kgmvY5S6/ryHTMLJ0QlPRdwnesFHAPnM80Gu7T4=~-1~-1~1775592249' --compressed)",
|
|
"Bash(python3 -m json.tool)",
|
|
"Bash(curl -s 'https://www.aa.com/flightinfo/v1.2/flights?flightNumber=2152&departureDate=2026-04-07&carrierCode=AA' -H 'User-Agent: Mozilla/5.0 \\(Macintosh; Intel Mac OS X 10_15_7\\) AppleWebKit/605.1.15 \\(KHTML, like Gecko\\) Version/26.4 Safari/605.1.15' -H 'Accept: application/json' -H 'Client-Details: aa-ct-aacom/flifoui' -H 'Referer: https://www.aa.com/travelInformation/flights/status/detail' -H 'Cookie: ROUTEID=IKSS.green; JSESSIONID=907389089042E51D3C89B5E217F18849; sessionLocale=en_US; XSRF-TOKEN=bcee4fcc-3bd2-4b61-9ea4-2eecb1018fa7; _abck=E4AC90DFB34FA06D4454E17D13364D25~0~YAAQ7WjJF5/Ey2SdAQAAFrpUaQ+lgS46iEjAo+HEHSHm2uubPe4NcBhT0lbrxYI/E+fPLihSGmkV1T5vltIKmL/DrfrzNBJxSPbBHglGInSJNDAh6LaQk58bq2LvGtZsRaWxIx4KGTpRIG/ioME5xFZ5Hm/yMiizxAyW175nnXDlDhUAbi5KsRoIRCKIrOyZ68hFa2YbDnpEOBDggRti/AL5/cFkYa6t1t11HUOLGBGrDpL1jcce3cXuxHgFDqwrya5diir8SvyO2KBBWll/vt26Oph2vu/Ohi3X6093GycSSbgrvEtacjuCMeDqG5vluulMbQz8+nijXLqVoLcGSm3xM72SxtrFIUbsPWVcCeNyGFljaa28TghEw66bUO7M1z797bC8a9nCq1L61Czh9aZaKUPNUi6kMn/r6W5peA/G4jzNtW1UmOJNQ1wNgeUTpBD92/2L2t00Wpt1mPgWFLWaDK2ioT45JNO/BsfXizCxSrNtGfechJ7XcTV1tx/SpCJ1cHgif5QLxotNRoz3F69tXCMomT3nNYBkjghxrizCEJQL3Yw4TaKUYb241RKK7/e3jdtPVUlhIu/mZk+gyKQ+jsFOx2psxSprttmx61jkf/Cy7pWH5WNSGip25ZPkcas+Nsu48aaKugmfCNF9e2RFX899W2a9p04tOP4dBkqzi2NewIb8Eu6gA9YAAoVGoD8CN0kYro6UKucA5qCcOf/4880A8M6AVBChqM/yTlDYcePQWMljhrSYd+Jh7Sxk+73Qdzb9OPiLqaJsCPGmK5BZPFv4z/k8iI2x3asisPfbui+HTnzRp0oaZIMegiEGYpm1kgmvY5S6/ryHTMLJ0QlPRdwnesFHAPnM80Gu7T4=~-1~-1~1775592249' --compressed)",
|
|
"Bash(curl -s -X POST https://www.aa.com/flightinfo/v1.2/ -H 'Content-Type: application/json' -H 'Client-Details: aa-ct-aacom/flifoui' -H 'locale: en_US' -H 'Accept: application/json' -H 'User-Agent: Mozilla/5.0 \\(Macintosh; Intel Mac OS X 10_15_7\\) AppleWebKit/605.1.15 \\(KHTML, like Gecko\\) Version/26.4 Safari/605.1.15' -H 'Referer: https://www.aa.com/travelInformation/flights/status/detail?search=AA%7C2152%7CDFW%7CIAH%7C2026,4,7&ref=results' -H 'Origin: https://www.aa.com' -H 'Cookie: ROUTEID=IKSS.green; JSESSIONID=907389089042E51D3C89B5E217F18849; sessionLocale=en_US; XSRF-TOKEN=bcee4fcc-3bd2-4b61-9ea4-2eecb1018fa7; _abck=E4AC90DFB34FA06D4454E17D13364D25~0~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~-1~-1~1775592249' --compressed -d '[{\"airlineCode\":\"AA\",\"flightNumber\":\"2152\",\"orgAirportCode\":\"DFW\",\"destAirportCode\":\"IAH\",\"fltOrgDate\":\"2026-04-07\"}]')",
|
|
"Bash(mkdir -p /tmp/delta_apk)",
|
|
"Bash(unzip -o ~/Desktop/code/flights/apps/com.delta.mobile.android_6.7-24019_4arch_7dpi_1lang_1c4d6b7f98c910145859a9b6e55455d3_apkmirror.com.apkm)",
|
|
"Bash(unzip -l ../base.apk)",
|
|
"Bash(cd /tmp/delta_apk/extracted echo \"=== STANDBY/WAITLIST/UPGRADE REFERENCES ===\" strings classes*.dex)",
|
|
"Bash(cd /tmp/delta_apk/extracted echo \"=== AIRPORT STANDBY LIST REPOSITORY ===\" strings classes*.dex)",
|
|
"Bash(cd /tmp/delta_apk/extracted echo \"=== getUpgradeStandByServices ===\" strings classes*.dex)",
|
|
"Bash(python3 -m json.tool echo \"\" echo \"=== MORE properties ===\" cat /tmp/delta_decoded/assets/TLFConfigurableItems.properties)",
|
|
"Bash(ls -lh ~/Desktop/code/flights/apps/com.spirit.customerapp*.apk)",
|
|
"Bash(mkdir -p /tmp/spirit_apk/extracted)",
|
|
"Bash(unzip -o ~/Desktop/code/flights/apps/com.spirit.customerapp*.apk classes.dex classes2.dex classes3.dex classes4.dex classes5.dex classes6.dex res/xml/network_security_config.xml)",
|
|
"Bash(unzip -l ~/Desktop/code/flights/apps/com.spirit.customerapp*.apk)",
|
|
"Bash(cd /tmp/spirit_apk/extracted echo \"=== STANDBY/WAITLIST/UPGRADE REFERENCES ===\" strings classes*.dex)",
|
|
"Bash(cd /tmp/spirit_apk/extracted echo \"=== SPIRIT PROD API BASE ===\" echo \"https://api.spirit.com/customermobileprod/2.8.0/\" echo \"\" echo \"=== ALL API PATHS UNDER THE BASE ===\" strings classes*.dex)",
|
|
"Bash(ls:*)",
|
|
"Bash(mkdir -p /tmp/united_apk/extracted)",
|
|
"Bash(unzip -o ~/Desktop/code/flights/apps/united-airlines.apk classes*.dex)",
|
|
"Bash(unzip -l ~/Desktop/code/flights/apps/united-airlines.apk)",
|
|
"Bash(unzip -o ~/Desktop/code/flights/apps/united-airlines.apk \"classes*.dex\")",
|
|
"Bash(SEARCH=\"availableSeats|openSeats|seatCount|seatsAvailable|seatsRemaining|capacity|loadFactor|standbyCount|waitlistCount|numStandby|availableCount|cabinAvail|numberOfStandby|standbyPassenger|standbyList|upgradeList|availableInventory|seatInventory|emptySeats|bookedSeats|totalSeats|remainingSeats|openCount|standbyTotal|waitlistTotal|upgradeCount|upgradeTotal|paxOnStandby|standbyPax|numOnList\" echo \"==================== DELTA ====================\" cd /tmp/delta_apk/extracted strings classes*.dex)",
|
|
"Bash(sort -u echo \"---\" strings classes*.dex)",
|
|
"Bash(sort -u echo \"---\")",
|
|
"Bash(cd /tmp/united_apk/extracted echo \"=== UNITED API DOMAINS ===\" strings classes*.dex)",
|
|
"Bash(cd /tmp/united_apk/extracted echo \"=== UNITED PROD API BASE URLs ===\" strings classes*.dex)",
|
|
"Bash(cd /tmp/united_apk/extracted echo \"=== ALL UNITED FLIGHT STATUS SERVICE ENDPOINTS ===\" strings classes*.dex)",
|
|
"Bash(cd /tmp/united_apk/extracted echo \"=== STANDBY LIST SERVICE ===\" strings classes*.dex)",
|
|
"Bash(curl -s -X POST https://mobileapi.united.com/standbylistservice/api/GetStandbyList -H 'Content-Type: application/json' -H 'User-Agent: United/6.0 \\(Android\\)' -H 'Accept: application/json' -d '{\"flightNumber\":\"1429\",\"flightDate\":\"2026-04-07\",\"origin\":\"IAH\",\"destination\":\"AUS\"}' -o /tmp/united_standby.json -w 'HTTP %{http_code} Size: %{size_download}')",
|
|
"Bash(curl -s -X POST https://mobileapi.united.com/upgradelistservice/api/GetUpgradeList -H 'Content-Type: application/json' -H 'User-Agent: United/6.0 \\(Android\\)' -H 'Accept: application/json' -d '{\"flightNumber\":\"1429\",\"flightDate\":\"2026-04-07\",\"origin\":\"IAH\",\"destination\":\"AUS\"}' -o /tmp/united_upgrade.json -w 'HTTP %{http_code} Size: %{size_download}')",
|
|
"Bash(curl -s 'https://mobileapi.united.com/flightstatusservice/api/GetFlightStatus_UAandStar?flightNumber=1429&flightDate=2026-04-07&carrierCode=UA' -H 'User-Agent: United/6.0 \\(Android\\)' -H 'Accept: application/json' -o /tmp/united_status.json -w 'HTTP %{http_code} Size: %{size_download}')",
|
|
"Bash(curl -s -X POST https://www.delta.com/api/mobile/asl -H 'Content-Type: application/json' -H 'User-Agent: Delta/6.7 \\(Android\\)' -H 'Accept: application/json' -d '{\"flightNumber\":\"2152\",\"departureDate\":\"2026-04-07\",\"origin\":\"DFW\",\"destination\":\"IAH\"}' -o /tmp/delta_asl.json -w 'HTTP %{http_code} Size: %{size_download}')",
|
|
"Bash(curl -s -X POST https://www.delta.com/api/mobile/getFlightStatus -H 'Content-Type: application/json' -H 'User-Agent: Delta/6.7 \\(Android\\)' -H 'Accept: application/json' -d '{\"flightNumber\":\"2152\",\"departureDate\":\"2026-04-07\",\"origin\":\"DFW\",\"destination\":\"IAH\"}' -o /tmp/delta_status.json -w 'HTTP %{http_code} Size: %{size_download}')",
|
|
"Bash(curl -s -X POST https://api.spirit.com/customermobileprod/2.8.0/v1/getboastatus -H 'Content-Type: application/json' -H 'User-Agent: Spirit/4.7.0 \\(Android\\)' -H 'Accept: application/json' -d '{\"flightNumber\":\"123\",\"departureDate\":\"2026-04-07\"}' -o /tmp/spirit_boa.json -w 'HTTP %{http_code} Size: %{size_download}')",
|
|
"Bash(curl -s https://api.spirit.com/customermobileprod/2.8.0/v1/init -H 'User-Agent: Spirit/4.7.0 \\(Android\\)' -H 'Accept: application/json' -o /tmp/spirit_init.json -w 'HTTP %{http_code} Size: %{size_download}')",
|
|
"Bash(curl -sv https://mobileapi.united.com/standbylistservice/api/GetStandbyList -X POST -H 'Content-Type: application/json' -d '{}')",
|
|
"Bash(cd /tmp/spirit_apk/extracted echo \"=== SPIRIT SUBSCRIPTION KEY / API KEY ===\" strings classes*.dex)",
|
|
"Bash(head -10 echo \"---\" strings classes*.dex)",
|
|
"Bash(/Users/treyt/Library/Android/sdk/platform-tools/adb install:*)",
|
|
"Bash(mitmdump --version)",
|
|
"Bash(mitmdump -p 9999)",
|
|
"Bash(/Users/treyt/Library/Android/sdk/platform-tools/adb pull:*)",
|
|
"Bash(curl -sv -X POST https://api.spirit.com/customermobileprod/2.8.0/v2/Token -H 'Content-Type: application/json' -H 'Ocp-Apim-Subscription-Key: c6567af50d544dfbb3bc5dd99c6bb177' -H 'User-Agent: GuestMobileApp/4.7.0 \\(Android 28\\)' -d '{\"applicationName\":\"customerMobileApp\",\"credentials\":{\"alternativeIdentifier\":\"\",\"channelType\":\"\",\"domain\":\"\",\"location\":\"\",\"password\":\"\",\"username\":\"\"}}' -o /tmp/spirit_token_test.json -w '\\\\nHTTP %{http_code}' --max-time 10)",
|
|
"WebFetch(domain:yoghurtbot.github.io)",
|
|
"WebFetch(domain:rapidapi.com)",
|
|
"WebFetch(domain:deepwiki.com)",
|
|
"Bash(chmod +x ~/Desktop/code/flights/frida/run.sh)",
|
|
"Bash(curl -s -X POST https://api.spirit.com/customermobileprod/2.8.0/v3/GetFlightInfoBI -H 'Content-Type: application/json' -H 'Ocp-Apim-Subscription-Key: c6567af50d544dfbb3bc5dd99c6bb177' -H 'X-Bearer-Token: eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.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.LRAb8KWJUWXebolXf7cDjxvDZMVrGLU73SjaZSeTBYrOMViENlysOZa86Qny2p5tRDTQjzMo2zTClGiwUCuiqliimSj2vvGlbalyQGxPV2Ke0X2MhFnWsgxnAk5CNh5gtkwg9dH3kcW6TkfyXi8aDZAZPI8GXcl8jreX3HFIh2g0Y6lFvnMm17X8snDkngAyO_ejN3U1LkgKhbNJng_QnvzAknhb4c9X6ltCoxCAS0Lo-a1E0EkWYRTZfPpb4NF0Cdzxe_9CgZ7SrRQj6Q-8NpAq98YW9lhUfQQQUL9lTbRDvGzxLvcmI7BASSgG-K6zYCABidTJ85DJ2W_XaAoPWtTxes8cdor_1HQKiFuOFAyKx_n0JfHuDZ7ThPWRLZgJc3ZtwzrktnkTyoEZcMavpuIMaX-dPg-T6jVprnkXhpNnPeW04Mq1l40X5bCakFqoStQhFzZwpnmC740eCD5BDNniypVCIJF_SZRNVGwW2T8ru3SO-YzwLr3ys5YsRBZp' -H 'User-Agent: GuestMobileApp/4.7.0 \\(Android 28\\)' -H 'Cache-Control: no-cache' -H 'Platform: Android' -H 'App-Version: 4.7.0 \\(1340\\)' -H 'accept-language: en-US' -d '{\"flightNumber\":\"371\",\"departureDate\":\"2026-04-07\"}' --max-time 10 -o /tmp/spirit_flight_response.json -w '\\\\nHTTP %{http_code} Size: %{size_download}')",
|
|
"Bash(curl -s -X POST https://api.spirit.com/customermobileprod/2.8.0/v3/Token -H 'Content-Type: application/json' -H 'Ocp-Apim-Subscription-Key: c6567af50d544dfbb3bc5dd99c6bb177' -H 'User-Agent: GuestMobileApp/4.7.0 \\(Android 28\\)' -H 'Platform: Android' -d '{\"applicationName\":\"customerMobileApp\",\"credentials\":{\"alternativeIdentifier\":\"\",\"channelType\":\"\",\"domain\":\"\",\"location\":\"\",\"password\":\"\",\"username\":\"\"}}' --max-time 10 -o /tmp/v3token.json -w 'HTTP %{http_code}')",
|
|
"Bash(git rm:*)"
|
|
]
|
|
}
|
|
}
|