pandora_mitm_gui

Pandora MITM

A Pandora app reverse-engineering toolbox.

Features

• Dynamic decryption, analysis and modification of Pandora JSON API messages
• Extensibility through a Dart plugin API
• Built-in plugins that enable:
  • Message recording with (some) response previews
  • API message object definition inference (+ iapetus code generation)
  • Feature unlocking
  • Fake authentication token expiration
  • mitmproxy UI enhancements

Getting started

Setup

1. Follow the pandora_mitm setup instructions.

2. Download the latest desktop build. Alternatively, try out the Web version.

   Note that:

   • The Web version has reduced performance and may not connect in some browsers
   • It should be trivial to add builds for other platforms - there's no OS-specific code in use. PRs are welcome.

Usage

Plugins can be added, configured, and removed using the plugin selection panel on the left-hand side.
Useful templates can be accessed through the drop-down menu next to the add button.

Technologies

A rough overview of the technology stack used in this project is as follows:

Python

• mitmproxy
• mitmproxy Remote Interceptions

Dart

• mitmproxy_ri_client
• iapetus
• pandora_mitm

Flutter

• pandora_mitm_gui_core

Also see

• pandora_mitm_cli