reverse Engineering Opera Browser

Well the Project will aim on one thing ! Extract one information form a free program , which is Opera Browser , i am a security engineer and my team and i , have some suspicions about how Opera browsers . which is the vpn function may collect some private information from the user PC. Now we need to dig inside the binary file [login to view URL] in order to get one info. which is the key that opra use to encrypt the VPN request . Now in more details : Opera use to be used an old method to make HTTP Authentication and we use that method while we are studying opera ! Here is how we use to get the Authentication information Open opera://net-internals/#capture page in opera. Enable “Include the actual bytes sent/received.” Click events Click vpn in adress bar Off and reOn VPN Find “SOCKET ssl/[login to view URL]” in events Find SE-Client-Type and SE-Client-API-Key values in headers hex dump [[IMAGE ATTACHED]] Now the new Opera 45.0.2552.812 has switched to v4 API. That API uses HTTP Digest Authentication instead of SE-...HTTP headers. POST /v4/register_subscriber HTTP/1.1 Host: [login to view URL] Connection: keep-alive Content-Length: 128 Accept: application/json SE-Client-Version: Stable 45.0.2552.812 SE-Operating-System: Windows Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.81 Safari/537.36 OPR/45.0.2552.812 Accept-Encoding: gzip, deflate, br HTTP/1.1 401 Unauthorized Server: nginx/1.12.0 Date: Thu, 18 May 2017 20:32:04 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Status: 401 Unauthorized WWW-Authenticate: Digest realm="ApiDigest", qop="auth", algorithm=SHA-256, nonce="MTQ5NTEzOTUyNDozNDEyMjA0OWY0ZjE4ZDgwZDFjOGI5M2ZiNmUyMzYyMWI4Y2NiYTNiMDEwZTdmNzU0NzY2ZTNjOTA2NmYwYWM2", opaque="a6feff632d495616728c8ef3532064ca457e3d0badcfa2db349a0433dcc4520f" X-UA-Compatible: IE=Edge,chrome=1 Cache-Control: no-cache X-Request-Id: 66c73f05d6950077cfd83b58fc9f498e X-Runtime: 0.009371 X-Rack-Cache: invalidate, pass POST /v4/register_subscriber HTTP/1.1 Host: [login to view URL] Connection: keep-alive Content-Length: 128 Authorization: Digest username="se0316", realm="ApiDigest", nonce="MTQ5NTEzOTUyNDozNDEyMjA0OWY0ZjE4ZDgwZDFjOGI5M2ZiNmUyMzYyMWI4Y2NiYTNiMDEwZTdmNzU0NzY2ZTNjOTA2NmYwYWM2", uri="/v4/register_subscriber", algorithm=SHA-256, response="ff7f495b6dd7c0b53119f3f92e6f3dbb7607d6a4d0441ec77359437e8b958ee2", opaque="a6feff632d495616728c8ef3532064ca457e3d0badcfa2db349a0433dcc4520f", qop=auth, nc=00000001, cnonce="d186e18e5c7172fa" Accept: application/json SE-Client-Version: Stable 45.0.2552.812 SE-Operating-System: Windows Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.81 Safari/537.36 OPR/45.0.2552.812 Accept-Encoding: gzip, deflate, br To calculate correct response the password is needed, according to RFC 7616: 3.4.2. A1 If the algorithm parameter's value is "<algorithm>", e.g., "SHA-256", then A1 is: A1 = unq(username) ":" unq(realm) ":" passwd where passwd = < user's password > We need the " password " which is impeded inside opera application , and we need an easy way to extract it each time ! We need someone who can work with low level of programing , such C++ and Assembly and familiar with ollydbg ([login to view URL])