Skip to content

Misconfigured third-party scripts #2

@TheProdigyLeague

Description

@TheProdigyLeague

#1

Debugging API Calls

Executing tasks: [:app:assembleDebug] in project /home/qenmity/AndroidStudioProjects/openapi_pyGlobalSpec

> Task :app:preBuild UP-TO-DATE
> Task :app:preDebugBuild UP-TO-DATE
> Task :app:mergeDebugNativeDebugMetadata NO-SOURCE
...
> Task :app:compileDebugShaders NO-SOURCE
> Task :app:generateDebugAssets UP-TO-DATE
...
> Task :app:mergeDebugNativeLibs NO-SOURCE
> Task :app:compileDebugKotlin NO-SOURCE
> Task :app:compileDebugJavaWithJavac NO-SOURCE
> Task :app:processDebugJavaRes NO-SOURCE
> Task :app:stripDebugDebugSymbols NO-SOURCE

BUILD SUCCESSFUL in 32s
...

Produced the Following Errors:

2025-08-07 11:05:30.944   450-499   PackageManager          system_server                        E  ERROR: could not load root hash from incremental install
2025-08-07 11:05:31.230 22604-22984 AbstractLogEventBuilder com.android.vending                  E  The provided ProductIdOrigin 3 is not one of the process-level expected values: 1 or 2

Debugging Global JS Modules.

Upon loading webpage:

// gtag.js

if (f)
                        throw d(e, {}, "Logging is not enabled in all environments");
                },
                T: a
            }
        })
    }();

Upon debugging CDN:

// fbevents.js
b[d] = function() {
                                return this
                            }
                            ,
                            Array.from(b, function() {
                                throw 2
                            })
// uwt.js

e.getTwclidFromCookie = function() {
                try {
                    return JSON.parse(decodeURIComponent(a.Cookies.getCookie(e.TWCLID_COOKIE_NAME) || "")).twclid
                } catch (t) {
                    return
                }
            }
// tfa.js

, Pe = function e(t, n) {
        try {
            return void 0 !== t && void 0 !== n && t.indexOf(n) > 0
        } catch (e) {
            return !1
        }
    }
// scevent.js

function Ya(t) {
        var n = /^.*(%26|%3F|\?|&)ScTestModeId(%3D|=)([0-9A-F]{8}-[0-9A-F]{4}-[1-5][0-9A-F]{3}-[89AB][0-9A-F]{3}-[0-9A-F]{12}).*$/i;
        return J(y((function() {
            return n.exec(t)[3]
        }
        )))
    }
// wblibs.js

}
            get(e, t) {
                e = this.namespace ? this.namespace + "." + e : e;
                let n = this.cache.getItem(e);
                try {
                    if (!this.serialize)
                        return n ? JSON.parse(n) : t;
                    return r.default && (n = window.atob(n)),
                    n ? JSON.parse(n) : t
                } catch (t) {
                    this.cache.removeItem(e)
                }
                return t
            }

Results in Set-Cookie

web_act_source=seo-direct-home; Domain=webull.com; Path=/; Expires=Fri, 08 Aug 2025 15:23:44 GMT; Secure; SameSite=None

Further Investigation of CDN reveals CloudFront Server Cache:

3029	160.055480600	18.173.166.5	100.115.92.202	TCP	66	443  43622 [ACK] Seq=1 Ack=518 Win=67072 Len=0 TSval=2886402064 TSecr=761475246
3030	160.055934551	18.173.166.5	100.115.92.202	TLSv1	73	Alert (Level: Fatal, Description: Handshake Failure)

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions