samrum/OnStarJS

How to derive onStarAppConfig?

Closed this issue · 2 comments

ddmore commented

Hi there,

First off, amazing project. Thank you for your continuing commitment and it's so neat having this configured with my Home Assistant.

However, I am confused:

OnStarJS/src/onStarAppConfig.json

Lines 2 to 3 in 884b87c

"appId": "OMB_CVY_AND_5U0",
"appSecret": "NZbzagcuvTceQScyRTb6tiE78qzfBJVnHV7u",

How was this derived? It looks like it is an Android key, so I'm guessing load the APK in an enumerator and use tcpdump - is the key just in plaintext? Or.... how would one update this key, if the project ceased operations?

samrum commented

Hi, they're encrypted within the APK! There's actually a java class someone created to pull the values from the APK available here: #208 (comment)

You can also grab them at runtime using an instrumentation tool like Frida.

  • ❤️1