Reverse engineering the commonly used 3utools software to make it more open and learn about it.
Download 3uTools Download 3uTools Latest Version – 3uTools 2017/ 2018 is a tool for flashing and jailbreaking Apple’s apple iphone, iPad, iPod touch, gives three methods: Easy Setting, Expert Mode or Numerous Flash to flash Apple mobile devices, chooses the ideal firmware automatically as well as sustains a quick downloading and install rate. 3uTools Free Download. PiratePC Provides World Famous Cracks, Serial Keys, Patches for any PC software without surveys. PiratePC is a New Way Of Tech for absolutely free.
3utools Dmg Download MacWhy
3utools is amazingly great software for managing iOS devices.
Not only does it show you a lot information about hardware integrity of your devices, it also helps you fix problems and jailbreak them. 3utools is not opensource but has an API for most of their functionality. For the freedom of development I wanted to see if this API can be reused by developers as that would make the life of security researchers easier. The Research
3utools has the ability to specify a proxy in the settings.
Since the traffic of 3utools is encrypted via TLS, I am using fiddler with its own CA certificate. After launching fiddler I simply set the proxy server in the settings to be localhost with port 8888, which is what fiddler runs on. Burpsuite is also possible the same way which is amazing for debugging API calls and reproducing / interacting with API calls. First 0-day vulnerability reported
Crack rar password free. Without even using any research tools like burpsuite and fiddler I expected that most of the content loaded in 3utools is actually just a webpage with a lot of javascript, this due to the delays in rendering certain userinterface graphics because that could mean and turned out to be loaded over the network.
3utools Dmg File
3utools was vulnerable to a low-risk cross site scripting vulnerability which I found by simply entering '<script>alert(1)</script>' in almost any of the input fields a user could access in the software.With that I also found the domain where their UI is located at.
Without further interruption or waiting, I immediately reported the vulnerability to 3utools and it got patched the same day.
However, I did not get any bounty. After all 3utools is free software anyway. Amazing infrastructure![]()
3utools seems to have amazing infrastructure.
They have a persitant file storage server where they store almost any iOS firmware related files, such as developer dmgs and jailbreaks. This makes their service faster than Apple's and able to download files even when Apple's servers are down. What is where and where is what is yet to be found out, but at least I discovered that when clicking the 'view screen' button you can see that the corresponding developer dmg image is downloaded for your device and mounted. Probably because they use the 'screenshotr' xpc service to get the live screen. For developers and researchers this means it is amazingly easy to quickly download the developer dmg from their servers as they are all named logically. 3utools Free Download
Aside the filestorage they also have a REST json API with one can retrieve information about firmware.
One can ask the API to only give jailbreakable or jailbreakable and signed firmware or just any firmware for specific devices and OS versions. Great feature if you ask me, again for developers and researchers a good way to automate their work a few more.
NOTE FOR DEVELOPERS: You can see the full documentation being developed when clicking the 'wiki' here on GitHub.
TLDR:Reverse engineering 3utools pays off and the first vulnerability has been fixed.
Developers and researchers benefit from 3utools rest API and filestorage. ![]()
iTools for Mac download is a simple and powerful tool for iPad, iPhone, iPod touch users. It is 100% freeware and green, even do not need to install onto your Mac, it has no ads or plugins in it. iTools for Mac is powerful, can easily manage media, iBooks, pictures and other files in your iDevices; it can help install, uninstall and backup your apps; it also can backup and restore your folders.
Hide your real IP address and protect your privacy while online! Check out HMA! Pro VPN for Mac! Features and Highlights Details interface The app Details Interface is similar to iTunes first interface. But little bit informative and advanced that iTunes. This screen shows your iPhone's Type, Serial number, Jailbrokes status, Region, Warranty details, Activated status, Memory details and Battery life details. It also provides you a button to switch on WiFi. Applications Applications screen gives you all facilities to Install, Uninstall and browse Phone memory's Application area via the app. Update tab of the top of iTools windows shows notifications which require updates. Another tab to upload/download documents assigned to specific an app. Ex. Media players, document readers, Etc. Media manager Media section shows all media files on your iPhone under categories of Ringtones, Video, Podcasts, iTunes U, TV shows, Music and Voice memos. You can Add media files to your iPhone or download them to Mac. Also gives you facilities to Delete, Play and Set as Ringtone. Playlist manager is also included in this section. Photos, iBooks sections Photos and iBooks areas allows you to access Picture files and iBook files on Apple device and manage them. Information This is a great facility. You can view iPhones contact book, Call records and Messages from the program. Also, send Text messages from Mac via iTools for Mac. Manage contacts and many more. Desktop manager Drag and arrange icons through the app. Just like iTunes desktop option. File System browser Allows you to browse into the File system of iPhone or iPad via the tool. Advanced details interface Includes features to System cleanup, Restart, Shutdown, Error logs, Crash logs and many more. Note: Requires 64-bit processor. Limited functionality. Also Available: Download iTools for Windows Comments are closed.
|
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |