Tutorial Atlas Fitness Tracker S.E

zorrophreak · 05-12-2017, 12:01 PM

(05-12-2017, 10:56 AM)Bish0pQ Wrote: @zorrophreak @Darkbyte Thank you for the help, I'm not that good in Social Engineering, but willing to learn aznd I think I'm going to try this out.

So they do not check your name on delivery, because I don't understand what it matters, they still have your address so in the end they have your name either way. Or don't they double-check that? I'm sorry for the many questions. Don't want one of my first SE's to fail.

The reason for not using a real name, is if you are caught, you can prove your caze that you didn't order it, and its just a wrong address.

Sure The post has your name, but The company doesnt have to. Best to keep it that way.

Bish0pQ · 05-12-2017, 12:16 PM

@zorrophreak Okay man, thank you for helping me. I will be trying this today!

Lagx · 05-14-2017, 01:53 AM

Thanks for this, i'll test it out soon. WIll update Smile

Bish0pQ · 05-14-2017, 11:00 PM

Just tried this out. Hope it'll work. I hope they even ship to Belgium. Also won't they notice that multiple people use the same API key?

Darkbyte · 05-14-2017, 11:15 PM

(05-14-2017, 11:00 PM)Bish0pQ Wrote: Just tried this out. Hope it'll work. I hope they even ship to Belgium. Also won't they notice that multiple people use the same API key?

Nahh the api key / secret is from there apk and is hard coded into the app itself.

[Image: 0j0qctj.png]

Shadow.walker · 05-14-2017, 11:21 PM

(05-14-2017, 11:15 PM)Darkbyte Wrote:
(05-14-2017, 11:00 PM)Bish0pQ Wrote: Just tried this out. Hope it'll work. I hope they even ship to Belgium. Also won't they notice that multiple people use the same API key?

Nahh the api key / secret is from there apk and is hard coded into the app itself.

hey ma8 what u have used to Decompile this apk? simply Apktool or something else?

Darkbyte · 05-14-2017, 11:25 PM

(05-14-2017, 11:21 PM)Shadow.walker Wrote:
(05-14-2017, 11:15 PM)Darkbyte Wrote:
(05-14-2017, 11:00 PM)Bish0pQ Wrote: Just tried this out. Hope it'll work. I hope they even ship to Belgium. Also won't they notice that multiple people use the same API key?

Nahh the api key / secret is from there apk and is hard coded into the app itself.

hey ma8 what u have used to Decompile this apk? simply Apktool or something else?

Hey yeah i use jadx u can do it online here too:
http://www.javadecompilers.com/apk

Shadow.walker · 05-14-2017, 11:40 PM

(05-14-2017, 11:25 PM)Darkbyte Wrote:
(05-14-2017, 11:21 PM)Shadow.walker Wrote:
(05-14-2017, 11:15 PM)Darkbyte Wrote: Nahh the api key / secret is from there apk and is hard coded into the app itself.

hey ma8 what u have used to Decompile this apk? simply Apktool or something else?

Hey yeah i use jadx u can do it online here too:
http://www.javadecompilers.com/apk

i Already use this it uses a lot of memory tho! Thanks anyway

Bish0pQ · 05-15-2017, 09:34 AM

Okay thank you for your help @Darkbyte. I thought it was a developer key.

Darkbyte · 05-15-2017, 01:45 PM

(05-14-2017, 11:40 PM)Shadow.walker Wrote:
(05-14-2017, 11:25 PM)Darkbyte Wrote:
(05-14-2017, 11:21 PM)Shadow.walker Wrote: hey ma8 what u have used to Decompile this apk? simply Apktool or something else?

Hey yeah i use jadx u can do it online here too:
http://www.javadecompilers.com/apk

i Already use this it uses a lot of memory tho! Thanks anyway

Out of intrest , have you.used gikdbg? Its a edited olly dbg for android good for finding stuff like oauth keys if they are buried in source.