News for hackers. Stuff that matters.

A comment on Show HN: ParrotSnoop – Android TCP/UDP Packet Capture for IPv4/IPv6.

Re:Show HN: ParrotSnoop – Android TCP/UDP Packet Capture for... by lozaning on Wednesday June 19, 2019 @10:21PM (#20229274)
Would this let me see the full path of an https requests that an app is making? I've got a testing need for that, and am currently hampered because our secops team won't let us enable a feature flag to disable cert pinning so that Charles proxy will work.

WOuld this be a viable alternative because it runs on the actual phone itself?

[ Parent | on HN ]
Re:Show HN: ParrotSnoop – Android TCP/UDP Packet Capture for... by h4waii on Wednesday June 19, 2019 @11:38PM (#20229639)
No, this won't bypass certificate pinning, to do that you need to tamper the app or hook runtime calls using something like Xposed. There are modules [0] [1] that do this, support depends on the version of Android you're using.

[0]. https://github.com/ac-pm/SSLUnpinning_Xposed

[0]. https://github.com/Fuzion24/JustTrustMe

[ Parent | on HN ]
Re:Show HN: ParrotSnoop – Android TCP/UDP Packet Capture for... by madushan1000 on Thursday June 20, 2019 @12:29AM (#20229889)
Use frida(frida.re) with something like objection to disable certificate pining at runtime. You gotta have a rooted phone, or you'll have to patch the apk with Frida library.
[ Parent | on HN ]