Skip to content

mon16 - AkamGHost Illegal Invocations (jQuery-CDN) #89

@TheProdigyLeague

Description

@TheProdigyLeague

What did I do?

When navigating the Business-API-Sdk docs:

 python3 setup.py install
running install
/usr/lib/python3/dist-packages/setuptools/command/install.py:34: SetuptoolsDeprecationWarning: setup.py install is deprecated. Use build and pip and other standards-based tools.
  warnings.warn(
/usr/lib/python3/dist-packages/setuptools/command/easy_install.py:146: EasyInstallDeprecationWarning: easy_install command is deprecated. Use build and pip and other standards-based tools.
  warnings.warn(
error: cant create or remove files in install directory

The following error occurred while trying to add or remove files in the
installation directory:

    [Errno 13] Permission denied: '/usr/local/lib/python3.11/dist-packages/test-easy-install-30892.write-test'

The installation directory you specified (via --install-dir, --prefix, or
the distutils default setting) was:

    /usr/local/lib/python3.11/dist-packages/

Perhaps your account does not have write access to this directory?  If the
installation directory is a system-owned directory, you may need to sign in
as the administrator or "root" account.  If you do not have administrative
access to this machine, you may wish to choose a different installation
directory, preferably one that is listed in your PYTHONPATH environment
variable.

For information on other options, you may wish to consult the
documentation at:

  https://setuptools.pypa.io/en/latest/deprecated/easy_install.html

Please make the appropriate changes for your system and try again.

The PYTHONPATH environment variable is deprecated and does not build successfully.

ModuleNotFoundError

Traceback (most recent call last):
  File "/home/qenmity/AndroidStudioProjects/openapi_pyGlobalSpec/tiktok-business-api-sdk/python_sdk/business_api_client/__init__.py", line 14, in <module>
    from business_api_client.api.app_management_api import APPManagementApi
ModuleNotFoundError: No module named 'business_api_client'
qenmity@penguin:~/AndroidStudioProjects/openapi_pyGlobalSpec/tiktok-business-api-sdk/python_sdk/business_api_client$ python3 rest.py
Traceback (most recent call last):
  File "/home/qenmity/AndroidStudioProjects/openapi_pyGlobalSpec/tiktok-business-api-sdk/python_sdk/business_api_client/rest.py", line 17, in <module>
    import certifi
ModuleNotFoundError: No module named 'certifi'

The API relies on the certifi dependency when tested against the rest.py which indicates the mainframe is located and utilized with swagger api

Monitoring Front-End UI's

/** 
m=X3N0Bf,attn,cdos,gwc,hsm,jsa,mb4ZUb,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl,YV5bee,d,csi
x-goog-api-key | AIzaSyBGb5fGAyC-pRcRU6MUHb__b_vKha71HRE
**/

return b
        }
        ;
        var raa, saa, taa, uaa, vaa, waa, qaa;
        _.ja = function(a) {
            return a.trim()
        }

An error occurred upon search

/** 
tfa.js

typescript-eslint

npm-builtins

**/
var Rn = function(n) {
        try {
            var t = localStorage.getItem(n)
              , e = t
              , r = e = t && "string" == typeof t ? JSON.parse((u = t,
            bn() ? decodeURI(atob(u)) : u)) : e
              , o = r.expires
              , i = function(n, t) {
                var e = {};
                for (o in n)
                    Object.prototype.hasOwnProperty.call(n, o) && t.indexOf(o) < 0 && (e[o] = n[o]);
                if (null != n && "function" == typeof Object.getOwnPropertySymbols)
                    for (var r = 0, o = Object.getOwnPropertySymbols(n); r < o.length; r++)
                        t.indexOf(o[r]) < 0 && Object.prototype.propertyIsEnumerable.call(n, o[r]) && (e[o[r]] = n[o[r]]);
                return e

Error from TikTok Third-Party Vendor Scripts

When using curl to FETCH globals

curl --path-as-is -s -k -X GET -O https://lf16-cdn-tos.tiktokcdn-us.com/obj/static-tx/slardar/fe/sdk-web/browser.oci.js?bid=tiktok_webapp&globalName=SlardarClient browser.oci.js
[2] 1441
-bash: browser.oci.js: command not found
[1]   Done                    curl --path-as-is -s -k -X GET -O https://lf16-cdn-tos.tiktokcdn-us.com/obj/static-tx/slardar/fe/sdk-web/browser.oci.js?bid=tiktok_webapp

TikTok JavaScript Module not found.

When testing AndroidSDK builds:

2025-08-07 14:44:47.221 22151-22227 TrustedTimeHelper       com.google.android.gms.persistent    W  TrustedTime initialization task failed (Ask Gemini)
                                                                                                    ayor: 17: API: TrustedTime.API is not available on this device. Connection failed with: ConnectionResult{statusCode=API_UNAVAILABLE, resolution=null, message=null}
                                                                                                    	at azlk.a(:com.google.android.gms@253031032@25.30.31 (190800-786424874):15)
                                                                                                    	at ayqg.a(:com.google.android.gms@253031032@25.30.31 (190800-786424874):1)
                                                                                                    	at ayqd.c(:com.google.android.gms@253031032@25.30.31 (190800-786424874):5)
                                                                                                    	at ayss.q(:com.google.android.gms@253031032@25.30.31 (190800-786424874):48)
                                                                                                    	at ayss.d(:com.google.android.gms@253031032@25.30.31 (190800-786424874):10)
                                                                                                    	at ayss.g(:com.google.android.gms@253031032@25.30.31 (190800-786424874):185)
                                                                                                    	at ayss.onConnectionFailed(:com.google.android.gms@253031032@25.30.31 (190800-786424874):2)
                                                                                                    	at azms.ig(:com.google.android.gms@253031032@25.30.31 (190800-786424874):3)
                                                                                                    	at azlw.a(:com.google.android.gms@253031032@25.30.31 (190800-786424874):7)
                                                                                                    	at azln.c(:com.google.android.gms@253031032@25.30.31 (190800-786424874):77)
                                                                                                    	at azlq.handleMessage(:com.google.android.gms@253031032@25.30.31 (190800-786424874):261)
                                                                                                    	at android.os.Handler.dispatchMessage(Handler.java:106)
                                                                                                    	at cjwv.mH(:com.google.android.gms@253031032@25.30.31 (190800-786424874):1)
                                                                                                    	at cjwv.dispatchMessage(:com.google.android.gms@253031032@25.30.31 (190800-786424874):144)
                                                                                                    	at android.os.Looper.loopOnce(Looper.java:201)
                                                                                                    	at android.os.Looper.loop(Looper.java:288)
                                                                                                    	at android.os.HandlerThread.run(HandlerThread.java:67)

Suggests Slardar-Client is failing to connect to TrustedTime.API

When testing against my local client

Found indirect, however, relevant information to the jQuery Invocations:

a248.e.akamai.net | AkamaiGHost using webmssdk.js

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions