corellium-utils

Corellium Utility Scripts

A collection of scripts written in JavaScript designed to interact with the Corellium API with the aim of facilitating pentesting activities.

Currently comprises of:

• sslPinning.js: Allows querying the current status of SSL pinning as well as switching SSL pinning on/off.
• takeScreenshot.js: Facilitates screenshot taking by directly dropping screenshots within the local screenshots folder.

Installation

1. Install Node.js.

2. Download this repository:

   git clone https://github.com/aress31/corellium-utils
   cd .\corellium-utils

3. Install the dependencies:

   [!IMPORTANT] The command below is to be executed in the root folder of this project.

   npm install

4. Create an .env file in the root folder containing the following constants:

   [!NOTE] Replace the placeholder values with your values.

   API_TOKEN="XXX"
   ENDPOINT="https://app.corellium.com"
   INSTANCE="XXX"
   PROJECT="Default Project"
   

Usage

• To take a screenshot:

  node .\takeScreenshot.js

• To query the status of SSL pinning:

  node .\sslPinning.js -c status

• To enable SSL pinning bypass:

  node .\sslPinning.js -c enable

• To disable SSL pinning bypass:

  node .\sslPinning.js -c disable

Roadmap

• Improve the argparsing logic.
• Merge the scripts into a master script with more function modularity, e.g., login.
• Automate proxying to Burp Suite, so far it seems that the current version of the Corellium API does not export any function that could enable us implementing this feature.
• Implement additional features - open to suggestions.

Sponsor 💖

If you want to support this project and appreciate the time invested in developping, maintening and extending it; consider donating toward my next cup of coffee. ☕

It is easy, all you got to do is press the Sponsor button at the top of this page or alternatively click this link. 💸

Reporting Issues

Found a bug? I would love to squash it! 🐛

Please report all issues on the GitHub issues tracker.

Contributing

You would like to contribute to better this project? 🤩

Please submit all PRs on the GitHub pull requests tracker.

License

See LICENSE.