iOS and Android demos added

Author: federicodotta

Demo/Android/HIP2021_demo.apk

@@ -0,0 +1,93 @@
+# Android Demo
+
+In this folder there is the Android demo application used to show Brida features during **Hack In Paris 2021** conference. 
+
+The backend is a simple Flask Python application.
+
+The application implements **SSL Pinning**, that can be bypassed using Brida scripts.
+
+## Run the Flask backend
+
+1. Install dependencies
+
+	```
+	pip install flask
+	pip install pycrypto
+	pip install pycryptodome
+	```
+
+2. Run the server
+
+	```
+	export FLASK_APP=server
+	export FLASK_ENV=development
+	flask run --cert=certs/server-cert.pem --key=certs/server-key.pem -h <IP_ADDRESS_TO_BIND> -p <PORT_TO_BIND>
+	```
+
+## Run the application
+
+1. Install APK
+2. Run the application
+3. Set the URL of the backend in the upper part
+
+**Note**: it is necessary to bypass pinning in order to be able to use the application. If you want to try the application without Burp Suite in the middle and without bypassing the pinning read the next paragraph.
+
+## Make the application work without bypassing the pinning and without Burp Suite in the middle
+
+If you really want to try the demo application without bypassing the pinning (and consequently also without Burp Suite in the middle), you can install the CA we used to sign the server certificate and add "demo.hnsecfakedomain.it" to the /etc/hosts file of the device (because otherwise TLS hostname check will fail). 
+
+**Note**: it is **not** necessary to execute this procedure to run the demo. Simply run the application and use Brida or something else to bypass TLS checks! ;)
+
+1. Install the supplied CA certificate (*certs/9e487db2.0* is the DER convertion of *certs/ca-cert.pem* with the correct name for installing in Android with the following procedure) in your device (**PAY ATTENTION: remove that CA certificate after using the demo**)
+
+	This procedure can be executed in many ways. One is the following one. **Pay attention if you don't understand what you are doing because you may damage your device!**
+
+	```
+	adb push 9e487db2.0 /data/local/tmp
+	adb shell
+	```
+
+	From the device:
+
+	```
+	su
+	mount -o rw,remount /system
+	cp /data/local/tmp/9e487db2.0 /system/etc/security/cacerts/
+	chmod 644 /system/etc/security/cacerts/9e487db2.0
+	chown root:root /system/etc/security/cacerts/9e487db2.0
+	sync
+	mount -o ro,remount /system
+	reboot
+	```
+
+2. Add demo.hnsecfakedomain.it to the /etc/hosts file of your Android device (necessary, otherwise hostname TLS checks will fail)
+
+	```
+	su
+	mount -o rw,remount /system
+	cat >> /system/etc/hosts
+	```
+	
+	Now type and entry of the hosts that points to demo.hnsecfakedomain.it (es. 192.168.12.1 demo.hnsecfakedomain.it) and then exit with CTRL+D. Then:
+
+	```
+	sync
+	mount -o ro,remount /system
+	```
+
+3. Set the URL of the backend in the upper part of the application, using the hostname demo.hnsecfakedomain.it, that now points to your backend server, and the port in which the server is listening
+
+4. 	After you used the demo, the certificate can be removed **from the device** as follows:
+
+	```
+	su
+	mount -o rw,remount /system
+	rm /system/etc/security/cacerts/9e487db2.0
+	sync
+	mount -o ro,remount /system
+	reboot
+	```
+
+## Disclaimer
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

Demo/Android/README.md

@@ -0,0 +1,34 @@
+-----BEGIN CERTIFICATE-----
+MIIF7zCCA9egAwIBAgIUVOR2kvWGY22ZZsQXwT8cBk35upYwDQYJKoZIhvcNAQEL
+BQAwgYYxCzAJBgNVBAYTAklUMQ0wCwYDVQQIDARSb21lMQ0wCwYDVQQHDARSb21l
+MRQwEgYDVQQKDAtITiBTZWN1cml0eTELMAkGA1UECwwCUFQxDjAMBgNVBAMMBWhu
+c2VjMSYwJAYJKoZIhvcNAQkBFhd0ZXN0QGhuc2VjZmFrZWRvbWFpbi5pdDAeFw0y
+MTExMjMxODE4NDlaFw0yMjExMjMxODE4NDlaMIGGMQswCQYDVQQGEwJJVDENMAsG
+A1UECAwEUm9tZTENMAsGA1UEBwwEUm9tZTEUMBIGA1UECgwLSE4gU2VjdXJpdHkx
+CzAJBgNVBAsMAlBUMQ4wDAYDVQQDDAVobnNlYzEmMCQGCSqGSIb3DQEJARYXdGVz
+dEBobnNlY2Zha2Vkb21haW4uaXQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK
+AoICAQCU/6o5+bqOAHDy6Cg+qxAj5+8Y3T0cexedrxIycugjVGyYhHafCN39R0Qw
+KjctEN0iSJGxq6S7uPkdAuMFe0ow5HLNRLzQ2cP+I8nrZfaCLV0t+xkK9Z7Pkn1r
+zujDaJQB7tnuMwwkkOPmav8cdWgUZIYfMkFGuBcPreVFiW9b6jGhzGBpN6JgWQLm
+3WhXKf7KQ+2R/4d7rkXWuHE9eRmFiFMF79nUYqcHJzIA3iYLiz/db+y1fmdKuBne
+fzUm15Yo40/lvP+4BkGh4maJ1VsUlArfouFhRTzIVnZJSxzB/IHE+CanoCx1Nkqh
+xyV0MsLYbSfRZ1kbrno/3yz1/zbZd7Y44XeCC6fSG11fgnQt/Tcf/zPJ1J2pFJ1v
+oorUyxe3tyB8MIDcswrBGafTmYtM5llarex65xkKFEIAxGMQyGFZjIuW0VDME+DM
+y19YeWVZqbRBTst5bRuAeQsyZyDjkeODY/ySUoBvgPHvLR9BudJJtIGswogQZ0wd
+oSnBz+evt4Z8wXFqDwG4Z06i1M7O4LjjyDZPw922AOYwEx5UJ5b6hZ9tdRrsrwKE
+nVftJgmqLpe6VbKXu5H00oQ3Ztq+ykSOM6DkG5avEs6ZnRc08vEwrzTNekH6eGtw
+B35rcFO0P1ZllkQDyJBPIVOfgt5DfJIUpGlnkXKLuMyPBKjy4QIDAQABo1MwUTAd
+BgNVHQ4EFgQUXJrZKFHDhmaNvAeS9jOgLib6frgwHwYDVR0jBBgwFoAUXJrZKFHD
+hmaNvAeS9jOgLib6frgwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOC
+AgEATZWqoWU4+GyUzBR5JFzSt8zdpAw9nK7EvRkXJ6P9YiqzE7dIXr05YzFsGQbn
+b/J2w+uiBgdcdnuSk3pVvuO/vCFTpmHCeX6prk+kqRarWsnGzVIRL78OePrV+mzy
+n0n2NUqjTf6QCioII+egR+K85iRkw30Fjpv/mrl+M9qF7QPRHIhi1ksJ+KFwQjQv
+dkh7277IFd2/J/Bj/szR01iyXuhbjgla6ptU+OeL7XLO3bKH2p+GKRSM7LvIl+1O
+cZLZp2TQ6Hyud6NGznOT0FxPJf2M4S/rNa9pGXo/Ri76MMn13o9Nfxx91kJzHtSc
+9EhhHq9LjzWnTpiKey7XSb9e8uPUC5XZLbH/LbehUdKtlYBxGQZMv9TExAFTFWj6
+tP243MsI9+IKDzdhM5OTCU29xyTwH+3l+mpslT+qyXXPIIZ9ZIvUdPQWImh6Ii3R
+zd+gaPLof577K5YUnyZlVsLMu288A9yYolb3wBYoluPQwbmaRHw5Bzxv9jFVlWTl
+ObncpcQNAaN4wxrsJyYpFb3XX95AZDCJ7xXtHtDNiD2frq6zf298c6SDKHk+E1oa
+MXNbsJ0lNJ+43xfJqONWMhlq7++R69IGkjuIR5dJANyzxkK3O6aqA0Yzvmak19iD
+fej//5CvIsf0Zq3NPHMkvX3x1omqe6M641t9rMOxkFz1CW4=
+-----END CERTIFICATE-----

Demo/Android/certs/9e487db2.0

@@ -0,0 +1,33 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

Demo/Android/certs/ca-cert.pem

@@ -0,0 +1,52 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

Demo/Android/certs/server-cert.pem

@@ -0,0 +1,32 @@
+import flask
+import base64
+from flask import request
+from Crypto.Cipher import AES
+from Crypto import Random
+from Crypto.Util.Padding import pad
+import random
+
+key = b"1234567890123456"
+plain = b"Here's your secret!"
+plain2 = b"Here's your data!"
+
+iv = b"jvHJ1XFt0IXBrxxx"
+
+app = flask.Flask(__name__)
+
+@app.route('/', methods=['GET', 'POST'])
+def handle_request():
+    cipher = AES.new(key, AES.MODE_CBC, iv)
+    print(request.data)
+    fulldata = cipher.decrypt(base64.urlsafe_b64decode(request.data))
+    print(fulldata)
+    if b"getSecret" not in fulldata:
+        cipher = AES.new(key, AES.MODE_CBC, iv)
+        encoded = base64.urlsafe_b64encode(cipher.encrypt(pad(plain2, AES.block_size)))
+    else:
+        ciphere = AES.new(key, AES.MODE_CBC, iv)
+        encoded = base64.urlsafe_b64encode(ciphere.encrypt(pad(plain, AES.block_size)))
+    print(encoded)
+    return encoded
+
+app.run(host="0.0.0.0", port=5000, debug=True)