httptoolkit/frida-interception-and-unpinning
1
0
Fork 0
mirror of https://github.com/httptoolkit/frida-interception-and-unpinning.git synced 2026-10-08 00:42:39 +02:00
Code Issues Packages Projects Releases Wiki Activity
173 Commits 5 Branches 1 Tag
ad449d4d96bb48d45149a0cc423cc2cc1a0fa8af
Commit Graph
173 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Tim PerryandGitHub ad449d4d96 Merge pull request #168 from httptoolkit/dependabot/npm_and_yarn/test/android/multi-d758dca6e7 
Bump undici in /test/android
 2026-01-16 14:16:25 +01:00
dependabot[bot]andGitHub 87d58f4f99 Bump undici in /test/android 
Bumps  and [undici](https://github.com/nodejs/undici). These dependencies needed to be updated together.

Updates `undici` from 7.11.0 to 7.18.2
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v7.11.0...v7.18.2)

Updates `undici` from 6.21.3 to 6.23.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v7.11.0...v7.18.2)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 7.18.2
  dependency-type: indirect
- dependency-name: undici
  dependency-version: 6.23.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-14 21:13:23 +00:00
Tim PerryandGitHub ef035897f9 Merge pull request #166 from xehpuk/patch-1 
Patch com.android.org.conscrypt.ct.CertificateTransparency->checkCT
 2025-12-22 13:21:07 +01:00
xehpukandGitHub 73b2597239 Patch com.android.org.conscrypt.ct.CertificateTransparency->checkCT 
I had this error:

```
 !!! --- Unexpected TLS failure --- !!!
      CertificateException: Certificate chain does not conform to required transparency policy: NOT_ENOUGH_SCTS
      Thrown by com.android.org.conscrypt.ct.CertificateTransparency->checkCT
      [ ] Unrecognized TLS error - this must be patched manually
```

This patch fixes it.
 2025-12-20 01:00:57 +01:00
Tim PerryandGitHub d92220dedd Merge pull request #165 from httptoolkit/dependabot/npm_and_yarn/test/android/multi-d7778cba75 
Bump glob and @appium/support in /test/android
 2025-12-15 13:54:32 +01:00
dependabot[bot]andGitHub a617e565e7 Bump glob and @appium/support in /test/android 
Bumps [glob](https://github.com/isaacs/node-glob) and [@appium/support](https://github.com/appium/appium/tree/HEAD/packages/support). These dependencies needed to be updated together.

Updates `glob` from 10.4.5 to 10.5.0
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/node-glob/compare/v10.4.5...v10.5.0)

Updates `@appium/support` from 7.0.3 to 7.0.4
- [Release notes](https://github.com/appium/appium/releases)
- [Changelog](https://github.com/appium/appium/blob/master/packages/support/CHANGELOG.md)
- [Commits](https://github.com/appium/appium/commits/@appium/support@7.0.4/packages/support)

---
updated-dependencies:
- dependency-name: glob
  dependency-version: 10.5.0
  dependency-type: indirect
- dependency-name: "@appium/support"
  dependency-version: 7.0.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-12-15 12:08:19 +00:00
Tim PerryandGitHub b0cd780092 Merge pull request #163 from AnyISalIn/main 
fix potential null pointer issue to make TikTok works
 2025-11-18 12:02:18 +01:00
AnyISalIn dd05b46cab fix potential null pointer issue 
Signed-off-by: AnyISalIn <anyisalin@gmail.com>
 2025-11-18 18:47:49 +08:00
Tim PerryandGitHub dfb9e4f679 Merge pull request #162 from httptoolkit/dependabot/npm_and_yarn/test/android/npm_and_yarn-6586b794db 
Bump the npm_and_yarn group across 1 directory with 2 updates
 2025-11-17 12:49:04 +01:00
dependabot[bot]andGitHub a5c0a435f8 Bump the npm_and_yarn group across 1 directory with 2 updates 
Bumps the npm_and_yarn group with 2 updates in the /test/android directory: [axios](https://github.com/axios/axios) and [js-yaml](https://github.com/nodeca/js-yaml).


Updates `axios` from 1.11.0 to 1.13.2
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](https://github.com/axios/axios/compare/v1.11.0...v1.13.2)

Updates `js-yaml` from 4.1.0 to 4.1.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.0...4.1.1)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.13.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: js-yaml
  dependency-version: 4.1.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-15 11:13:16 +00:00
Tim PerryandGitHub 74f48af8d6 Merge pull request #156 from httptoolkit/dependabot/npm_and_yarn/test/android/multi-d207b655cc 
Bump on-headers, appium and appium-uiautomator2-driver in /test/android
 2025-09-25 10:27:51 +02:00
dependabot[bot]andGitHub 528716eb15 Bump on-headers, appium and appium-uiautomator2-driver in /test/android 
Bumps [on-headers](https://github.com/jshttp/on-headers) to 1.1.0 and updates ancestor dependencies [on-headers](https://github.com/jshttp/on-headers), [appium](https://github.com/appium/appium/tree/HEAD/packages/appium) and [appium-uiautomator2-driver](https://github.com/appium/appium-uiautomator2-driver). These dependencies need to be updated together.


Updates `on-headers` from 1.0.2 to 1.1.0
- [Release notes](https://github.com/jshttp/on-headers/releases)
- [Changelog](https://github.com/jshttp/on-headers/blob/master/HISTORY.md)
- [Commits](https://github.com/jshttp/on-headers/compare/v1.0.2...v1.1.0)

Updates `appium` from 2.19.0 to 3.0.2
- [Release notes](https://github.com/appium/appium/releases)
- [Changelog](https://github.com/appium/appium/blob/master/packages/appium/CHANGELOG.md)
- [Commits](https://github.com/appium/appium/commits/appium@3.0.2/packages/appium)

Updates `appium-uiautomator2-driver` from 4.2.4 to 5.0.3
- [Release notes](https://github.com/appium/appium-uiautomator2-driver/releases)
- [Changelog](https://github.com/appium/appium-uiautomator2-driver/blob/master/CHANGELOG.md)
- [Commits](https://github.com/appium/appium-uiautomator2-driver/compare/v4.2.4...v5.0.3)

---
updated-dependencies:
- dependency-name: on-headers
  dependency-version: 1.1.0
  dependency-type: indirect
- dependency-name: appium
  dependency-version: 3.0.2
  dependency-type: direct:production
- dependency-name: appium-uiautomator2-driver
  dependency-version: 5.0.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-09-25 07:43:30 +00:00
Tim PerryandGitHub f6f31e3536 Merge pull request #155 from httptoolkit/dependabot/npm_and_yarn/test/android/tar-fs-3.1.1 
Bump tar-fs from 3.1.0 to 3.1.1 in /test/android
 2025-09-25 09:42:17 +02:00
dependabot[bot]andGitHub 7b268b10b3 Bump tar-fs from 3.1.0 to 3.1.1 in /test/android 
Bumps [tar-fs](https://github.com/mafintosh/tar-fs) from 3.1.0 to 3.1.1.
- [Commits](https://github.com/mafintosh/tar-fs/compare/v3.1.0...v3.1.1)

---
updated-dependencies:
- dependency-name: tar-fs
  dependency-version: 3.1.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-09-24 20:57:59 +00:00
Tim PerryandGitHub 1ff1a8c05a Fix typo in README android commant 2025-09-02 14:59:49 +02:00
Tim PerryandGitHub 169d11e4bd Mark flutter script as experimental & drop from default list 2025-09-02 14:59:24 +02:00
Tim Perry 30bd013cb9 Limit Flutter scanning to r-x ranges 
This doesn't matter much for anonymous module cases AFAICT, but when the
module is loaded normally by name (on real devices, not emulators I
think) then the range can include some protected non r-x ranges, which
we can't scan. This ensures we only scan possible code ranges.
 2025-07-31 16:50:27 +02:00
Tim Perry 48fd909ed5 Fix two tiny but fundamental breakages in config.js 
Due to this, concatenating scripts broke (missing semi-colon meant
latest IIFEs were treated as arguments and totally broke) and anonymous
module handling failed and threw various errors due to unavailable
handles.
 2025-07-31 15:38:03 +02:00
Tim Perry 70d8e301dd Fix & improve native connect hook 
Previously SOCKS interception didn't work without DEBUG_MODE (whoops)
and tried to intercept UDP even though that wouldn't work either. We no
longer intercept UDP at all (although we can block it for HTTP/3) and
everything should work correctly the rest of the time, with some other
improvements around logging en route.
 2025-07-29 19:52:02 +02:00
Tim Perry 69b78d0599 Fixes for iOS with new changes & Frida 17 
Since the global Java bridge isn't available, Java.available doesn't
generally work. In the native connect script, our new approach was
incomplete due to using raw kernel APIs instead of the libc compatible
layer (which seems to be the standard API).
 2025-07-29 19:07:30 +02:00
Tim Perry 97c53f4b35 Correct comment in native connect hook 2025-07-24 16:26:38 +02:00
Tim Perry 68d465f4bf Add new Flutter script to README & tests 2025-07-18 18:01:37 +02:00
Tim Perry 31503685c7 Add a working Android Flutter unpinning script 2025-07-18 17:58:26 +02:00
Tim Perry 04a565cafd Merge branch 'automated-tests' 2025-07-08 16:13:06 +02:00
Tim Perry 101b6b463c Pick a shorter simple set of CI test targets 2025-07-08 16:12:51 +02:00
Tim Perry f884bfdace Make test Frida setup work on older Android versions 2025-07-08 16:12:51 +02:00
Tim Perry 688deefd65 Automatically retry tests in CI by default 2025-07-08 16:12:51 +02:00
Tim Perry d6be767a36 Improve test automatic webview button retry 2025-07-08 16:12:50 +02:00
Tim Perry b1dd2c81ef Skip cert-but-no-unpinning test in Android <10 2025-07-08 16:12:50 +02:00
Tim Perry 4d52126c63 Widen the testing API version range further 2025-07-08 16:12:49 +02:00
Tim Perry 51715cd4b6 Tighten up tests's "wait for app" check further 2025-07-08 16:12:49 +02:00
Tim Perry 69e6622952 Increase test's default button response timeout 2025-07-08 16:12:49 +02:00
Tim Perry f6adff234d Improve test app-loaded check 2025-07-08 16:12:48 +02:00
Tim Perry 9dd42f3a61 Improve Mockttp test logging 2025-07-08 16:12:48 +02:00
Tim Perry 44cad4f7a6 Refactor & simplify CI testing approach 
Don't bother trying to count individual TLS errors & requests - it's
fragile (e.g. webview favicons, CT refreshes), messy & unnecessary. We
focus on red/green buttons and that's enough.
 2025-07-08 16:12:47 +02:00
Tim Perry 8fe643f69c Reduce flakiness of CI tests 2025-07-08 16:12:47 +02:00
Tim Perry 029569835e If webview buttons in tests don't respond, click again 2025-07-08 16:12:47 +02:00
Tim Perry 290a7d7520 Tidy up some test setup 2025-07-08 16:12:46 +02:00
Tim Perry 936e3761f3 Set options to try to avoid CI test system UI crashes 2025-07-08 16:12:46 +02:00
Tim Perry 1065a613a9 Add hierarchy logging to test failures 2025-07-08 16:12:40 +02:00
Tim Perry 88ac21a3d5 Disable fast-fail to further debug test failures 2025-07-08 10:59:44 +02:00
Tim Perry d55979f5a4 Make the tests cover all the API versions, to see where we are 2025-07-04 10:29:30 +02:00
Tim Perry 7722e20adc Use a large screen test device in CI 
Previously not all buttons were being detected by Appium - I strongly
suspect that's becuase the default profile is some tiny phone.

Also added another API test level (just to confirm) and switched arch
because it turns out modern API levels don't support x86, only _64.
 2025-07-04 10:02:41 +02:00
Tim Perry bb0356ac34 Build out a complete set of automated Android tests 2025-07-03 20:30:22 +02:00
Tim Perry 1e9aa02640 Run a minimal test in CI 2025-07-03 20:26:40 +02:00
Tim PerryandTim Perry 8902cfd399 Try setting up an emulator in CI 2025-07-03 20:26:39 +02:00
Tim PerryandGitHub a07671fbe9 Merge pull request #146 from acomerlatto/main 
feat(native-connect-hook): enhance support for system connection hooks
 2025-07-03 15:27:41 +02:00
Alisson Comerlatto 09cd59b728 feat(native-connect-hook): enhance support for system connection hooks 
- Declare system module as a constant.
- Add `conn` variable for cleaner `Interceptor.attach` initialization.
- Improve error handling.
 2025-07-03 10:14:24 -03:00
Tim PerryandGitHub 426bd4e2ab Merge pull request #145 from acomerlatto/main 
fix(native-connect-hook): adjust scope of `systemModule` declaration
 2025-07-03 14:01:23 +02:00
Alisson Comerlatto ad465d0044 fix(native-connect-hook): adjust scope of systemModule declaration 
- Move `systemModule` declaration outside `try` block for proper scope management.
 2025-07-02 17:30:59 -03:00