4 ms·
-If you are doing tracking in real time, you can see what's happening. If you want to, say, explore what happens when your phone goes to a website, you can't do
by punnerud 7y ago
-If you are doing tracking in real time, you can see what's happening. If you want to, say, explore what happens when your phone goes to a website, you can't do that if you don't have a jailbreak because Apple doesn't give you the specific permissions that you need to see things happening at such a low level on your phone.
How is this different than MITMproxy, Burp Suite, Charles combined with setting iPhone to proxy the traffic through your machine?
- tptacek 7y agoThose all depend on the phone software honoring proxy settings.
- eat 7y agoWell, to accomplish that with HTTPS traffic, you'd have to tell your device to accept (for example) Burp's CA certificate. Many applications (especially sensitive applications such as banking) nowadays use certificate pinning to verify the expected certificate and prevent this kind of MITM from happening. So you'd still need to do some sort of lower-level manipulation, such as manually hooking the certificate validation functions, to even be able to get this proxying to work. It's becoming increasingly difficult to really see what's going on without a jailbroken iPhone, or rooted Android device.