4 ms·
Can use frida-sslkeylog to extract the keys on Android, and put it into Wireshark: https://github.com/saleemrashid/frida-sslkeylog https://github.com/saleemrash
by punnerud 5y ago
Can use frida-sslkeylog to extract the keys on Android, and put it into Wireshark:
https://github.com/saleemrashid/frida-sslkeylog https://github.com/saleemrashid/frida-sslkeylog
This require a rooted phone.
Or you can patch the app with objection, so you don’t need the root:
https://github.com/sensepost/objection/wiki/Patching-Android-Applications https://github.com/sensepost/objection/wiki/Patching-Android...
Can download the APK from places like https://apkpure.com/ https://apkpure.com/
- almog 5y agoapkpure.com has a track record of serving malicious APKs. If you run it in a sandbox environment it's probably okay-ish, but if you already have the app installed from a trusted source on your phone, you can grab the APK file with `adb pull`.
- punnerud 5y agoDid not know that. Thanks
- dylanowen 5y agoYeah I've had good success with patching apps. If the app complains the phone is an emulator, just patch the byte code that is checking for emulators too :)
- ravishi 5y agoUnfortunately I could not patch any apps yet. They open with a blank screen and crash after a few seconds. objection can't connect to the server. My phone doesn't seem to be easily rootable, so I'm kinda stuck for a while.