aryma/Ares-mythic
1
0
Fork 0
mirror of https://github.com/Aryma-f4/Ares-mythic.git synced 2026-08-15 13:31:09 +00:00
Code Issues Packages Projects Releases Wiki Activity

first commit

Browse Source
This commit is contained in:
Aryma
2026-04-14 12:17:24 +07:00
commit 2f05f67733
799 changed files with 531884 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
malleable-profile-examples/cdn-asset-delivery.json
+133
View File
@@ -0,0 +1,133 @@
{
"name": "CDN Asset Delivery Service",
"get": {
"verb": "GET",
"uris": [
"/assets/bootstrap-5.3.2.min.css",
"/cdn/bootstrap/5.3.2/css/bootstrap.min.css",
"/static/libs/bootstrap/css/bootstrap.min.css"
],
"client": {
"headers": {
"Accept": "text/css,*/*;q=0.1",
"Accept-Encoding": "gzip, deflate, br",
"Accept-Language": "en-US,en;q=0.9",
"Connection": "keep-alive",
"Cache-Control": "no-cache",
"Pragma": "no-cache",
"Referer": "https://cdn.example.net/",
"User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
},
"parameters": {
"v": "5.3.2",
"t": "20240415"
},
"message": {
"location": "cookie",
"name": "__cdn_session"
},
"transforms": [
{
"action": "xor",
"value": "cdnAssetDelivery2024"
},
{
"action": "base64url",
"value": ""
}
]
},
"server": {
"headers": {
"Cache-Control": "public, max-age=31536000, immutable",
"Connection": "keep-alive",
"Content-Type": "text/css; charset=utf-8",
"Content-Encoding": "gzip",
"ETag": "\"5.3.2-abc123\"",
"Server": "Cloudflare",
"CF-Ray": "8a1b2c3d4e5f6789-ORD"
},
"transforms": [
{
"action": "prepend",
"value": "/*! Bootstrap v5.3.2 | MIT License */"
},
{
"action": "xor",
"value": "cdnResponseKey2024"
},
{
"action": "base64url",
"value": ""
},
{
"action": "append",
"value": "/* End Bootstrap */"
}
]
}
},
"post": {
"verb": "POST",
"uris": [
"/assets/bootstrap-5.3.2.min.css",
"/cdn/bootstrap/5.3.2/css/bootstrap.min.css",
"/static/libs/bootstrap/css/bootstrap.min.css"
],
"client": {
"headers": {
"Accept": "text/css,*/*;q=0.1",
"Accept-Encoding": "gzip, deflate, br",
"Accept-Language": "en-US,en;q=0.9",
"Connection": "keep-alive",
"Content-Type": "application/x-www-form-urlencoded",
"Origin": "https://cdn.example.net",
"Referer": "https://cdn.example.net/",
"User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
},
"parameters": null,
"message": {
"location": "body",
"name": ""
},
"transforms": [
{
"action": "xor",
"value": "cdnPostDelivery2024"
},
{
"action": "base64",
"value": ""
}
]
},
"server": {
"headers": {
"Cache-Control": "no-cache, no-store, must-revalidate",
"Connection": "keep-alive",
"Content-Type": "text/css; charset=utf-8",
"Server": "Cloudflare",
"CF-Ray": "8a1b2c3d4e5f6790-ORD",
"X-Content-Type-Options": "nosniff"
},
"transforms": [
{
"action": "prepend",
"value": "/*! Bootstrap v5.3.2 | MIT License */"
},
{
"action": "xor",
"value": "cdnPostResponse2024"
},
{
"action": "base64",
"value": ""
},
{
"action": "append",
"value": "/* End Bootstrap */"
}
]
}
}
}
malleable-profile-examples/cloud-analytics.json
+141
View File
@@ -0,0 +1,141 @@
{
"name": "Cloud Analytics Platform",
"get": {
"verb": "GET",
"uris": [
"/v1/analytics/metrics/dashboard",
"/v1/reports/performance/export",
"/api/v2/events/aggregate"
],
"client": {
"headers": {
"Accept": "application/json, text/plain, */*",
"Accept-Encoding": "gzip, deflate, br",
"Accept-Language": "en-US,en;q=0.9",
"Authorization": "Bearer eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ",
"Connection": "keep-alive",
"Origin": "https://analytics.example.com",
"Referer": "https://analytics.example.com/dashboard",
"User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36",
"X-Requested-With": "XMLHttpRequest",
"X-Client-Version": "2.15.3"
},
"parameters": {
"startDate": "2024-04-01",
"endDate": "2024-04-15",
"timezone": "UTC",
"format": "json"
},
"message": {
"location": "query",
"name": "filter"
},
"transforms": [
{
"action": "xor",
"value": "analyticsQueryKey2024"
},
{
"action": "base64url",
"value": ""
}
]
},
"server": {
"headers": {
"Content-Type": "application/json; charset=utf-8",
"Server": "nginx/1.24.0",
"X-Content-Type-Options": "nosniff",
"X-Frame-Options": "DENY",
"X-XSS-Protection": "1; mode=block",
"Cache-Control": "private, no-cache, no-store, must-revalidate",
"Pragma": "no-cache",
"Expires": "0"
},
"transforms": [
{
"action": "prepend",
"value": "{\"status\":\"success\",\"data\":"
},
{
"action": "xor",
"value": "analyticsResponseKey2024"
},
{
"action": "base64url",
"value": ""
},
{
"action": "append",
"value": "}"
}
]
}
},
"post": {
"verb": "POST",
"uris": [
"/v1/analytics/events/track",
"/v1/reports/generate",
"/api/v2/batch"
],
"client": {
"headers": {
"Accept": "application/json",
"Accept-Encoding": "gzip, deflate, br",
"Authorization": "Bearer eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ",
"Connection": "keep-alive",
"Content-Type": "application/json",
"Origin": "https://analytics.example.com",
"Referer": "https://analytics.example.com/dashboard",
"User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36",
"X-Requested-With": "XMLHttpRequest",
"X-Client-Version": "2.15.3"
},
"parameters": null,
"message": {
"location": "body",
"name": ""
},
"transforms": [
{
"action": "xor",
"value": "trackEventSecret2024"
},
{
"action": "base64",
"value": ""
}
]
},
"server": {
"headers": {
"Content-Type": "application/json; charset=utf-8",
"Server": "nginx/1.24.0",
"X-Content-Type-Options": "nosniff",
"X-Frame-Options": "DENY",
"X-Request-Id": "req-abc123def456",
"Cache-Control": "private, no-cache, no-store, must-revalidate"
},
"transforms": [
{
"action": "prepend",
"value": "{\"status\":\"success\",\"message\":\"Events processed\",\"data\":"
},
{
"action": "xor",
"value": "trackResponseSecret2024"
},
{
"action": "base64",
"value": ""
},
{
"action": "append",
"value": "}"
}
]
}
}
}
malleable-profile-examples/enterprise-data-management.json
+133
View File
@@ -0,0 +1,133 @@
{
"name": "Enterprise Data Management",
"get": {
"verb": "GET",
"uris": [
"/v3/storage/datasets/list",
"/v3/analytics/reports/export",
"/v3/inventory/assets/query"
],
"client": {
"headers": {
"Accept": "application/json, text/xml",
"Accept-Encoding": "gzip, deflate, br",
"Authorization": "Basic dXNlcm5hbWU6cGFzc3dvcmQ=",
"Connection": "keep-alive",
"X-API-Version": "3.2",
"X-Client-ID": "enterprise-client-v2.4.1",
"User-Agent": "EnterpriseDataClient/2.4.1 (Java/17.0.2; Windows Server 2022)"
},
"parameters": {
"limit": "50",
"offset": "0",
"sort": "desc"
},
"message": {
"location": "header",
"name": "X-Request-ID"
},
"transforms": [
{
"action": "xor",
"value": "enterpriseDataKey2024"
},
{
"action": "base64url",
"value": ""
}
]
},
"server": {
"headers": {
"Content-Type": "application/json; charset=utf-8",
"Server": "Apache/2.4.57",
"X-Request-ID": "req-xyz789abc123",
"X-Page-Count": "15",
"X-Total-Count": "750",
"Cache-Control": "private, max-age=300",
"Expires": "Wed, 15 Apr 2025 12:05:00 GMT"
},
"transforms": [
{
"action": "prepend",
"value": "{\"result\":"
},
{
"action": "xor",
"value": "enterpriseResponseKey2024"
},
{
"action": "base64url",
"value": ""
},
{
"action": "append",
"value": "}"
}
]
}
},
"post": {
"verb": "POST",
"uris": [
"/v3/storage/backup/create",
"/v3/logging/events/submit",
"/v3/notifications/broadcast"
],
"client": {
"headers": {
"Accept": "application/json",
"Accept-Encoding": "gzip, deflate, br",
"Authorization": "Basic dXNlcm5hbWU6cGFzc3dvcmQ=",
"Connection": "keep-alive",
"Content-Type": "application/json",
"X-API-Version": "3.2",
"X-Client-ID": "enterprise-client-v2.4.1",
"User-Agent": "EnterpriseDataClient/2.4.1 (Java/17.0.2; Windows Server 2022)"
},
"parameters": null,
"message": {
"location": "body",
"name": ""
},
"transforms": [
{
"action": "xor",
"value": "backupCreateSecret2024"
},
{
"action": "base64",
"value": ""
}
]
},
"server": {
"headers": {
"Content-Type": "application/json; charset=utf-8",
"Server": "Apache/2.4.57",
"X-Request-ID": "req-abc456def789",
"Location": "/v3/storage/backup/status/backup-xyz123",
"Cache-Control": "no-cache, no-store",
"X-Operation-ID": "op-backup-xyz123"
},
"transforms": [
{
"action": "prepend",
"value": "{\"status\":\"accepted\",\"operationId\":\"backup-xyz123\",\"data\":"
},
{
"action": "xor",
"value": "backupResponseSecret2024"
},
{
"action": "base64",
"value": ""
},
{
"action": "append",
"value": "}"
}
]
}
}
}
malleable-profile-examples/github-api.json
+135
View File
@@ -0,0 +1,135 @@
{
"name": "GitHub API Integration",
"get": {
"verb": "GET",
"uris": [
"/api/graphql",
"/api/v4/graphql",
"/api/v3/repos/octocat/Hello-World/commits"
],
"client": {
"headers": {
"Accept": "application/vnd.github.v3+json",
"Accept-Encoding": "gzip, deflate, br",
"Authorization": "token ghp_16C7e42F292c6912E7710c8C0E2b8E1",
"Connection": "keep-alive",
"User-Agent": "GitHub-Hookshot/461e8be",
"X-GitHub-Event": "push",
"X-GitHub-Delivery": "f246e7f4-8fd8-11eb-bffc-f2216662c3f0"
},
"parameters": {
"per_page": "30",
"page": "1",
"sort": "updated"
},
"message": {
"location": "header",
"name": "X-GitHub-Request-Id"
},
"transforms": [
{
"action": "xor",
"value": "ghubSecret2024"
},
{
"action": "base64url",
"value": ""
}
]
},
"server": {
"headers": {
"Content-Type": "application/json; charset=utf-8",
"Server": "GitHub.com",
"X-GitHub-Request-Id": "A1B2:C3D4:E5F6:1234:5678",
"X-RateLimit-Limit": "5000",
"X-RateLimit-Remaining": "4999",
"X-RateLimit-Reset": "1619999999",
"Strict-Transport-Security": "max-age=31536000; includeSubdomains"
},
"transforms": [
{
"action": "prepend",
"value": "{\"data\":"
},
{
"action": "xor",
"value": "ghubResponse2024"
},
{
"action": "base64url",
"value": ""
},
{
"action": "append",
"value": "}"
}
]
}
},
"post": {
"verb": "POST",
"uris": [
"/api/v3/repos/owner/repo/issues",
"/api/v3/repos/owner/repo/pulls",
"/api/v3/orgs/owner/teams"
],
"client": {
"headers": {
"Accept": "application/vnd.github.v3+json",
"Accept-Encoding": "gzip, deflate, br",
"Authorization": "token ghp_16C7e42F292c6912E7710c8C0E2b8E1",
"Connection": "keep-alive",
"Content-Type": "application/json",
"User-Agent": "GitHub-Hookshot/461e8be",
"X-GitHub-Event": "issues",
"X-GitHub-Delivery": "f246e7f4-8fd8-11eb-bffc-f2216662c3f0"
},
"parameters": null,
"message": {
"location": "body",
"name": ""
},
"transforms": [
{
"action": "xor",
"value": "ghubPostSecret"
},
{
"action": "base64",
"value": ""
}
]
},
"server": {
"headers": {
"Content-Type": "application/json; charset=utf-8",
"Server": "GitHub.com",
"X-GitHub-Request-Id": "A1B2:C3D4:E5F6:1234:5678",
"X-RateLimit-Limit": "5000",
"X-RateLimit-Remaining": "4998",
"Location": "https://api.github.com/repos/owner/repo/issues/123",
"Strict-Transport-Security": "max-age=31536000; includeSubdomains"
},
"transforms": [
{
"action": "prepend",
"value": "{\"id\":12345,\"url\":\"https://api.github.com/repos/owner/repo/issues/123\",\"body\":"
},
{
"action": "xor",
"value": "ghubServerKey"
},
{
"action": "base64",
"value": ""
},
{
"action": "append",
"value": "}"
}
]
}
}
}
malleable-profile-examples/windows-update-service.json
+133
View File
@@ -0,0 +1,133 @@
{
"name": "Windows Update Service",
"get": {
"verb": "GET",
"uris": [
"/update/v6/download/package/cab",
"/update/v6/wsusscan/package.cab",
"/update/v6/content/download/package.cab"
],
"client": {
"headers": {
"Accept": "application/vnd.microsoft.update.cab, application/octet-stream, */*",
"Accept-Encoding": "gzip, deflate, br",
"Accept-Language": "en-US,en;q=0.9",
"Connection": "Keep-Alive",
"Cache-Control": "no-cache",
"User-Agent": "Windows-Update-Agent/10.0.19041.3880 Client-Protocol/2.0"
},
"parameters": {
"pid": "100",
"pidver": "10.0",
"bld": "19041",
"arch": "x64"
},
"message": {
"location": "query",
"name": "rev"
},
"transforms": [
{
"action": "xor",
"value": "windowsUpdateKey2025"
},
{
"action": "base64url",
"value": ""
}
]
},
"server": {
"headers": {
"Content-Type": "application/vnd.microsoft.update.cab",
"Server": "Microsoft-HTTPAPI/2.0",
"X-MicrosoftUpdate-Version": "10.0.19041.3880",
"Connection": "keep-alive",
"Cache-Control": "public, max-age=86400",
"X-Powered-By": "ASP.NET",
"Content-Disposition": "attachment; filename=update.cab"
},
"transforms": [
{
"action": "prepend",
"value": "MSCF"
},
{
"action": "xor",
"value": "windowsUpdateResponse2025"
},
{
"action": "base64url",
"value": ""
},
{
"action": "append",
"value": "\u0000\u0000"
}
]
}
},
"post": {
"verb": "POST",
"uris": [
"/update/v6/wsusscan/report.aspx",
"/update/v6/content/submit.aspx",
"/update/v6/telemetry/report.aspx"
],
"client": {
"headers": {
"Accept": "text/html, application/xhtml+xml, application/xml;q=0.9,*/*;q=0.8",
"Accept-Encoding": "gzip, deflate, br",
"Accept-Language": "en-US,en;q=0.9",
"Connection": "Keep-Alive",
"Content-Type": "application/x-www-form-urlencoded",
"User-Agent": "Windows-Update-Agent/10.0.19041.3880 Client-Protocol/2.0"
},
"parameters": null,
"message": {
"location": "body",
"name": "data"
},
"transforms": [
{
"action": "xor",
"value": "wsusReportKey2025"
},
{
"action": "base64",
"value": ""
}
]
},
"server": {
"headers": {
"Content-Type": "text/html; charset=utf-8",
"Server": "Microsoft-HTTPAPI/2.0",
"X-MicrosoftUpdate-Version": "10.0.19041.3880",
"X-Powered-By": "ASP.NET",
"Connection": "keep-alive",
"Cache-Control": "no-cache, no-store, must-revalidate",
"Pragma": "no-cache",
"Expires": "0"
},
"transforms": [
{
"action": "prepend",
"value": "<!DOCTYPE html><html><body><div>"
},
{
"action": "xor",
"value": "wsusResponseKey2025"
},
{
"action": "base64",
"value": ""
},
{
"action": "append",
"value": "</div></body></html>"
}
]
}
}
}