Download From Google play to pc directly.

By -


DOWNLOAD APK FILE FROM PLAY.GOOGLE TO YOUR PC



APK Downloader is a Google Chrome extension that allows you to download Android APK files from Android Market to your PC





Download and Install:

Copy this link and paste in new tab to install the Plugin:->

http://codekiem.com/apk-downloader/crx/1.2.1.crx

If your Chrome doesn't allow you to install this plugin then

do this:

1st download the plugin after clicking the above link. Open the downloaded Folder
Click on wrench at google chrome
go to tool >then extensions
drag and drop the download file there.

Requirement: Chrome 17 or later (I suggest Google Chrome 19)
* Please read and follow this instruction carefully before using, or it WON’T WORK *
After installed APK Downloader, you’ll need to

follow these steps in able to use it

I. Disable SSL error warnings
If you don’t do this step, the extension WILL NEVER WORK.

( replace –remote-debugging-port=9222 in the example with -ignore-certificate-errors )



1. Right click on Chrome shortcut, select “Properties”
2. Switch to “Shortcut” tab. In “Target” field, after chrome.exe press space and add below code

–ignore-certificate-errors –allow-running-insecure-content

at the end. Once you have that finished, click “OK” .
It will look something like this:

C:\.\.\…\chrome.exe –ignore-certificate-errors –allow-running-insecure-content

or

“C:\…\chrome.exe” –ignore-certificate-errors –allow-running-insecure-content


Close Chrome and open it again with that shortcut
3. Open APK Downloader Options page. If your screen looks like the right

picture ( the warning box is gone ), then you disabled SSL error warnings successfully




II. Enter email and device ID on Options page


1. How to get Email and Device ID??
a. Open dial pad, call *#*#8255#*#* ( 8255 = TALK ).
it opens “GTalk Service Monitor”, find lines that begin with JID and Device ID. Your email is JID like example@gmail.com (in some mobile it dont show the real gmail id. so ignore that JID showing in cell. enter ur real gmail id in OPTION page), and your device id is a string that after android- prefix
For example: if it shows android-1234567890abcdef , then your device ID is 1234567890abcdef

Do not type in random email or device ID, it won’t work
2. Enter your email’s password, then press Login. If everything is ok, now you can use APK Downloader


III. Start using
After finished two steps above, you can start using APK Downloader. Open



Android Market, view any FREE apps ( for example:
Simple Text ),then press the APK Downloader icon on address bar ( see screenshot )




Comments

Post a Comment

Popular posts from this blog

GRANDING UTime Master - IDOR (CVE-2023-45393)

By -
Image
  Hi All, I was able to identify IDOR Vulnerability in one online attendance system i.e. GRANDING UTime Master (v  UTime Master_9.0.7-Build:Apr 4,2023 ).  CVE ID: CVE-2023-45393 UTime Master is a powerful web-based time and attendance management software that provides a stable connection to GRANDING’s standalone push communication devices by Ethernet/Wi-Fi/GPRS/3G and working as a private cloud to offer employee self-service by mobile application and web browser. Using IDOR any user of the application can fetch Logs which are only meant to be accessible to administrators only. These logs also contains sensitive information like user password which is used to do the attendance by employees. Login to UTime Master using any account. Capture the request in burpsuite with the valid cookies. modify the URL to "/base/adminlog/table/?page=1&limit=200" Forward the request and it will fetch all the admin logs. IDOR has been fixed in latest versions after 9.0.7-Build:Apr 4,2023.
Read more

GRANDING UTime Master - Stored XSS (CVE-2023-45391)

By -
Image
  Hi All, I was able to identify stored XSS in one online attendance system i.e. GRANDING UTime Master (v  UTime Master_9.0.7-Build:Apr 4,2023 ). CVE ID: CVE-2023-45391 UTime Master is a powerful web-based time and attendance management software that provides a stable connection to GRANDING’s standalone push communication devices by Ethernet/Wi-Fi/GPRS/3G and working as a private cloud to offer employee self-service by mobile application and web browser. Login to UTime Master using admin account Click on Personnel > Employee Management >Employee Select Any employee or create a new employee In First name Section embed you payload. For test case I used "/><img src=a onerror=alert(22)> XSS payload embedded in EMP NAME field. Save the employee details, Once the page refreshed it will execute your payload. our payload executed successfully. I have also observed multiple other fields are also vulnerable to XSS e.g. Device Name, Department etc. XSS has been fixed in la
Read more

Ericsson BSCS iX R18 Billing & Rating (ADMX, MX) - Stored XSS (CVE-2020-29144, CVE-2020-29145)

By -
Image
Dear Reader, I was able to identify stored XSS in multiple web base modules of Ericsson BSCS iX R18 Billing & Rating platform  Below are its details: # Software description: Ericsson Billing is a convergent billing solution for telecoms that combines an unrivaled combination of out-of-the box features and high configurability. As an evolution of the widely-installed Ericsson BSCS iX, Ericsson Billing provides a low-risk but effective route to capture and secure revenue streams and take advantage of business opportunities from both traditional telecom services as well as digital services, 5G and IoT. # Technical Details & Impact: There are multiple web base modules in BSCS iX e.g. ADMX, MX (monitoring center), CX etc. It was observed that ADMX and MX are vulnerable to stored XSS, In most test cases session hijacking was also possible by utilizing the XSS vulnerability. This potentially allows for full account takeover, or exploiting admin's browsers using beef
Read more