4 ms·
I don't specialize in InfoSec work, but I was recently asked to do some pentesting/auditing for a mobile app without being given a debug build where I could add
by fareesh 6y ago
I don't specialize in InfoSec work, but I was recently asked to do some pentesting/auditing for a mobile app without being given a debug build where I could add MITM certs, etc.
I wasn't familiar with the latest tooling, but I was able to accomplish this by running an Android Emulator on a low-ish version (5 I think) and using Burp suite.
This method seems like it will quickly become obsolete. Going forward will the only way to accomplish this type of work be via rooting the device?
- alias_neo 6y agoIt depends on a few factors; is the application pinning certificates? If not, can you load a CA onto the device. If not, can you issue a trusted cert to your MITM proxy? Then you get into modifying the application itself by patching out checks, replacing embedded certs... It's also very handy to have a rooted device or emulator to hand too for times when you might want to poke around in the private storage of an app.