3 ms·
Thanks! The tool has a built in certificate authority (CA) to generate TLS certificates. So to intercept TLS traffic from a phone, you export the CA's root cert
by pipeline_tux 3y ago
Thanks! The tool has a built in certificate authority (CA) to generate TLS certificates. So to intercept TLS traffic from a phone, you export the CA's root certificate and import it onto your phone. If you're on PC, you can also launch a browser preconfigured to intercept traffic.
This is the standard pattern for these kinds of tools.
As it's not always a straightforward process for people who haven't done it before, there's instructions for a variety of platforms in the documentation: https://docs.pakikiproxy.com/#/getting_started/intercepting https://docs.pakikiproxy.com/#/getting_started/intercepting
- Fnoord 3y agoWon't work with certificate pinning. Although if you have root, you can even work around that. See this recently on HN mentioned article by Kaspersky [1], using mitmproxy. [1] https://news.ycombinator.com/item?id=38034269 https://news.ycombinator.com/item?id=38034269
- RockRobotRock 3y agoUsing Frida has worked well for me in the past :)