Hacking ProxSwitch

[Ac_K]

Hi, I'm glad to bring you a little proxy tool.

v0.1
- Initial Release

v0.2
- Add a Spoof of User Agent. For more see: https://udger.com/resources/ua-list and copy/paste string in the box.
- Add a WebKit Switch PoC by LiveOverflow. Use at your own risk!

ProxSwitch v0.2 by Ac_K
.NET Framework 4.6.1
------------------------

Go to the setting of your Switch wifi connection and set up a proxy with the informations in ProxSwitch. After that, connect to the network, it will ask for a registration, validate and...
Enjoy!
Sometimes the Switch web browser ask for confirm the certificate, said yes.
Don't forget to remove the proxy on your wifi connection when you have finished.

About the Qihoo false positive on VirusTotal.com:
http://www.tomsguide.com/us/qihoo-cheat-accusations,news-20867.html

Credits :
---------
- Titanium Web Proxy by justcoding121
- Webkit Switch PoC by LiveOverflow

v0.1
----
- Initial Release

v0.2
----
- Add a Spoof of User Agent. For more see: https://udger.com/resources/ua-list and copy/paste string in the box.
- Add a WebKit Switch PoC by LiveOverflow. Use at your own risk!

You are free to ask for ideas, bugs or anything else Thanks.

Download v0.2
Download v0.1

 

[sweis12]

So this is just to open the browser?

 

[EpicLPer]

VirusTotal reports one "Malware Gen" in there but not sure if false positive or not... I rather trust one detection over several "Okays".
https://www.virustotal.com/de/file/...84016cd36cee332937302ac6/analysis/1489240480/

 

[Qsypoq]

VirusTotal reports one "Malware Gen" in there but not sure if false positive or not... I rather trust one detection over several "Okays".
https://www.virustotal.com/de/file/...84016cd36cee332937302ac6/analysis/1489240480/

This, i'm not gonna exec anything without the source code.

 

[punderino]

It works fine on my end.

 

[SomeGamer]

VirusTotal reports one "Malware Gen" in there but not sure if false positive or not... I rather trust one detection over several "Okays".
https://www.virustotal.com/de/file/...84016cd36cee332937302ac6/analysis/1489240480/

Yep and Qihoo isn't the worst. Source please, OP.

 

[Ac_K]

I probably fix this problem of false positive tomorrow! If I'll don't have the time, I'll release the source code !
It's not my first app, I code tools since the first PSP so you feel free to trust me about false positive!

https://gbatemp.net/threads/wiinand.187982/
https://gbatemp.net/threads/wbfsdriive.180750/
https://gbatemp.net/threads/wadediit-v0-1.138517/

 

[Kioku]

False positive. Usually happens when you build with visual Studio apparently.

 

[DarkIrata]

It's clean. Looked with ILSpy through the code.

//Edit: I only checked v0.1

 

[Ac_K]

Hi,

v0.2
----
- Add a Spoof of User Agent. For more see: https://udger.com/resources/ua-list and copy/paste string in the box.
- Add a WebKit Switch PoC by LiveOverflow. Use at your own risk!

 

[Joom]

VirusTotal reports one "Malware Gen" in there but not sure if false positive or not... I rather trust one detection over several "Okays".
https://www.virustotal.com/de/file/...84016cd36cee332937302ac6/analysis/1489240480/

It's a false positive. Note the "HEUR" signature. This stands for "heuristic", which just means that the application possibly behaves in the same way certain malware does. I seriously wish people would start doing their own research, though. VirusTotal is incredibly inaccurate. Since it's a .Net application you can use Reflector to drudge through the code or you can setup Cuckoo Sandbox and get an actual analysis.

 

[tunip3]

pls share an image with an example of a user agent

 

[driverdis]

Why does this mess with the certs, Fiddler can redirect with one Autoresponder line and it handles certs fine. also, I cannot get to my local Plex server with this. I think it attached to one the virtual NICs I have since the IP address is wrong (also there is a typo, it says ip adress)

Fast.com SpeedTest is broken using this
Spoofing user-agent to see the normal Google.com page works now since it can spoof user-agent for SSL pages.
YouTube video playback is broken, this is one big thing I have working with the Fidder Browse Anywhere method I wrote a tutorial for.

 

[zirogx2]

IT gets the wrong local ip and i cant use

 

[Marxally]

Tried loading a game I did in Construct 2 using HTML5.
I tried by loading it from a website (Itch.io and BitBalloon) and tried it loading from the Web folder using the index.html option.

In both cases, I just got a little square where the game should be. Let's hope that this exploit doesn't get fixed and ProxSwitch keeps expanding.

 

[dpad_5678]

This is really cool. Could you add a feature (checkbox, probably) to disable the proxy altogether? I don't mean stopping it, for say. I mean letting the Switch access the correct URL's for normal operation when said checkbox is ticked. Stopping the proxy will prevent the Switch from connecting at all. This is so we don't have to keep going back into our WiFi settings and adding/removing the proxy.

 

[ElyosOfTheAbyss]

I'm assuming youtube videos dont play with this? When I try to it just says "This video cannot be played." and it fails when I try to use that PoC thing.

 

[:-infern:]

False positive. Usually happens when you build with visual Studio apparently.

Yeah it does unfortunately.

 

[Tonydaexpert]

Is it possible to add video playback support?

 

[patientx]

This and fiddler method definately not working anymore at the latest firmware. Tried countless times.