😎 Bypassing SSL in order to get bhvrSession (4.0.0)
A lot of you have problem in getting your bhvrSession, since 3.0.0 is patched.
Here is a tutorial that should be very simple for you to understand and works on the Newest version 4.0.0
Here is a tutorial that should be very simple for you to understand and works on the Newest version 4.0.0
Part 1: Starting
1. Bypass SSL Pinning through this tutorial: https://www.mpgh.net/forum/showthread.php?t=1496827
2. Download attached Rules.rar
3. Put the Rules folder directly in your C:\ drive

2. Download attached Rules.rar
3. Put the Rules folder directly in your C:\ drive

Part 2: Fiddler Setup
1. Download & Install the Latest version of Fiddler Web Debugging Proxy, i recommend to only download from official website.
2. Launch Fiddler, click on Tools, then Options

3. Click on HTTPS, then check "Capture HTTPS CONNECTs" and "Decrypt HTTPS traffic". If needed, install a certificate.

4. Click on the blue text after "Protocols" and replace it with this:
2. Launch Fiddler, click on Tools, then Options

3. Click on HTTPS, then check "Capture HTTPS CONNECTs" and "Decrypt HTTPS traffic". If needed, install a certificate.

4. Click on the blue text after "Protocols" and replace it with this:
Code:
<client>;ssl3;tls1.2

5. Close Fiddler, Download & Install an Addon for Fiddler called "CertMaker for iOS and Android", download is available at the official Telerik website.
6. After installing CertMaker, go to Tools>Options>HTTPs>Actions>Reset All Certificates and agree with all upcoming windows.

7. Close out of Options, go to AutoResponder and Import "importme_v3.farx" you have saved on your C:\ drive before. Make sure you have checked "Enable rules" and "Unmatched requests passthrough".

8. Go to Filters, check "Use Filters" and click on Actions>Load Filterpreset and import the file attached in Filters.rar

9. Close Fiddler
Stealing Session
1. Launch Fiddler, and then open DBD, proceed to main menu.
2. If you did everything correctly, you should see this:

3. Doubleclick on /api/v1/inventories, Inspectors tab will show up.
4. Navigate to tab "Cookies" and there is your bhvrSession. Copy out everything after "bhvrSession=", now you can use the newest Injector.
2. If you did everything correctly, you should see this:

3. Doubleclick on /api/v1/inventories, Inspectors tab will show up.
4. Navigate to tab "Cookies" and there is your bhvrSession. Copy out everything after "bhvrSession=", now you can use the newest Injector.
Credits
Expiker - Rules, PAK file
mguserman - SSL Pinning Bypass
mguserman - SSL Pinning Bypass
Virus Total
Rules Folder
https://www.virustotal.com/gui/file/...3276/detection
Session Filter
https://www.virustotal.com/gui/file/...e43c/detection
pakchunk1
https://www.virustotal.com/gui/file/...7df4/detection
https://www.virustotal.com/gui/file/...3276/detection
Session Filter
https://www.virustotal.com/gui/file/...e43c/detection
pakchunk1
https://www.virustotal.com/gui/file/...7df4/detection

