Use /v4 API about oprah-proxy

[tugrul]

https://chrome.google.com/webstore/detail/surfeasy-vpn-security-pri/odiddbcijempnhhobijfbggjogofdlgl

Looks like use same API but v3.

JavaScript code is not obfuscated and easy to understand.

[spaze]

@tugrul Thanks, I've used the extension as a reference when researching how Opera works. It's a different product and a paid service, though.

[GGGunrunner]

Yep, resistance is useless, but they keep on trying.

2017-05-29 09:17:38,345 DEBUG "POST /v2/register_subscriber HTTP/1.1" 200 None
2017-05-29 09:17:38,348 DEBUG ERROR: Unknown or invalid client type/product code provided.

Is there any fresh fix for that? Muchos gracias!

[nampud]

se0316 is the client id/username, 94938A583190AF928BC4FA2279DC10AE8FABB5E9E21826C9092B404D24B949A0 is the password. Dumped from RAM. v4 api is the same as v2 (at least for the api calls this script uses), but with digest auth. I have a working oprahProxy script, but it's ugly, as I had to copy the HTTPDigestAuth code from the requests library because I had to add a few lines for SHA-256 algorithm support.

[instagramlover]

@nampud nice work , can you share how you dump the RAM ? and may you share the python script , i will work on it to make it robust !

[instagramlover]

@nampud did you note : se0309 is available in the dump ! but i can not found the password :)

[nampud]

Sure, it's on my fork https://github.com/nampud/oprah-proxy
According to the digest auth specs, Opera must create the following string to create the hash necessary for digest auth: se0316:ApiDigest:passwordhere, so I opened Process Hacker and Opera, connected to VPN, and searched for the known part (se0316:ApiDigest:), and it gave me the full string including password. The string is not always there, but sometimes it is, it may help to switch VPN on and off multiple times before dumping. The password is stored obfuscated in the opera_browser.dll, so it's hard to get it directly from there.

[instagramlover]

i am doing the same , not even once this password appear :) lol
@nampud i note sometimes the generated password form oprah-proxy.py is not what API care about , try to change some characters from the password but keep the linth.

the connection will pass throw ! but the username you can not do such thing with,

did you note such !

[kekukui]

@instagramlover "may you share the python script , i will work on it to make it robust!"

script should be used in a browser extension so proxy server can be changed through a menubar button like this: https://addons.mozilla.org/en-US/firefox/addon/pac-reloader/

[hbakhtiyor]

@nampud none of the client's types/keys work

[nampud]

@hbakhtiyor It still seems to work for me, and it looks like the latest Opera still uses the same keys. Download my forked version ( https://github.com/nampud/oprah-proxy ), and if it doesn't work, please post the output.

[hbakhtiyor]

@nampud yeah, your forked version works, @spaze why still not merge to your repo?

something warning:

/usr/lib/python3/dist-packages/urllib3/connectionpool.py:794: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.org/en/latest/security.html
  InsecureRequestWarning)

[spaze]

@hbakhtiyor I'll happily merge a sensible pull request once there's any

[spaze]

Opera is making some nice progress, this tool has served it's purpose (to learn new stuff) and as such is now deprecated.