3 ms·
At work we use OneLogin, set to require the app. However, it stores a regular TOTP code in the app, it's just encrypted with the android keystore. I had to hook
by mid-kid 1y ago
At work we use OneLogin, set to require the app. However, it stores a regular TOTP code in the app, it's just encrypted with the android keystore.
I had to hook the base64 decoding function on my rooted phone to extract it, and put it in my password manager instead. I've been unable to figure out how to decrypt keystore-encrypted secrets in any other way.
- patrakov 1y agoYou could have also used "fridump" [0] to dump the app memory and search for strings that look like TOTP secrets. [0] https://github.com/rootbsd/fridump3 https://github.com/rootbsd/fridump3