3 ms·
Not sure about the non-security expert bit but I've done stuff[0] similar to this for iOS using Frida[1] which supports macOS too. For apps that use unpinned ce
by K0nserv 4y ago
Not sure about the non-security expert bit but I've done stuff[0] similar to this for iOS using Frida[1] which supports macOS too. For apps that use unpinned certificates and the builtin networking libraries(NSURLSession et.al.) you can directly use mimtproxy[2] or Charles[3]
0: https://hugotunius.se/2020/08/07/stealing-tls-sessions-keys-from-ios-apps.html https://hugotunius.se/2020/08/07/stealing-tls-sessions-keys-...
1: https://frida.re/ https://frida.re/
2: https://mitmproxy.org/ https://mitmproxy.org/
3: https://www.charlesproxy.com/ https://www.charlesproxy.com/
- youngtaff 4y agoI think you need to disable SIP to get a Frida based approach to work on MacOS And while not MacOS this eBPF based approach is interesting https://mobile.twitter.com/quarkslab/status/1527726910997815296 https://mobile.twitter.com/quarkslab/status/1527726910997815...