httptoolkit/frida-interception-and-unpinning
1
0
Fork 0
mirror of https://github.com/httptoolkit/frida-interception-and-unpinning.git synced 2026-09-24 18:12:25 +02:00
Code Issues Packages Projects Releases Wiki Activity
267 Commits 5 Branches 1 Tag
fa9ed69a36dcd97fa5f18969005d34f72cd447e9
Commit Graph
267 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Tim Perry fa9ed69a36 Avoid duplicate work & logging in the native TLS hook 
This reduces log noise in serious failure scenarios, and improves
performance by not hitting a native function repeatedly in the loop.
 2026-08-28 17:38:22 +01:00
Tim Perry 9c56acd8c8 Fix native TLS hook, by calling callback only for cronet 
Previously we blacklisted boringssl, but did call it for others,
including Conscrypt, where it seems that this can actually result in JNI
crashes on Android due to exception side effects. We now whitelist
cronet instead - everywhere else, the callback is skipped and we
override the result directly.
 2026-08-28 16:21:21 +01:00
Tim Perry fb2e3cb162 Add a legacy path to support Android 26 in native TLS hook 2026-08-28 16:20:56 +01:00
Tim Perry 535b5a1c8c Wait for libnetwork on iOS in case to make connect script more reliable 
This notably applied in simulator testing, but presumably could also be
required on devices in some real scenarios too.
 2026-08-27 18:18:55 +01:00
Tim Perry ad96df8386 Tighten up native TLS hook especially for iOS 26 2026-08-27 18:18:54 +01:00
Tim Perry 628b00e69c Don't swallow errors in waitForModule callback 2026-08-27 18:18:39 +01:00
Tim PerryandGitHub 3b2a9b9296 Merge pull request #226 from httptoolkit/dependabot/npm_and_yarn/test/android/js-yaml-4.3.1 
Bump js-yaml from 4.2.0 to 4.3.1 in /test/android
 2026-08-21 11:49:28 +01:00
Tim PerryandGitHub 4c0a1980ee Merge pull request #224 from b1gb1t/fix/ios-fcntl-native-hook 
Fix native-connect-hook on iOS: resolve libc symbols via global fallback
 2026-08-20 11:45:33 +02:00
b1gb1t 7e4951d15d Resolve libc symbols by scanning known system modules 
Replace the global export lookup with a fixed list of system
libraries (libc.so, libc.so.6, libsystem_c/kernel/pthread), using
whichever are present, to avoid matching same-named exports from the
app's own code, per review feedback.
 2026-08-15 12:43:51 +02:00
dependabot[bot]andGitHub 1fca6f0cec Bump js-yaml from 4.2.0 to 4.3.1 in /test/android 
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.2.0 to 4.3.1.
- [Changelog](https://github.com/nodeca/js-yaml/blob/4.3.1/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/4.2.0...4.3.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.3.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-11 19:13:42 +00:00
b1gb1t b2c72f66d1 Fix native-connect-hook on iOS: resolve libc symbols via global fallback 
fcntl is not exported by libsystem_c.dylib on Darwin (it lives in
libsystem_kernel.dylib), so the setup block threw and aborted all
native hooks, leaving connect() uninstrumented. Resolve each symbol
from the module first, then fall back to a global lookup.
 2026-08-05 16:36:01 +02:00
Tim PerryandGitHub 92f2ab3384 Merge pull request #221 from httptoolkit/dependabot/npm_and_yarn/test/android/brace-expansion-2.1.4 
Bump brace-expansion from 2.0.3 to 2.1.4 in /test/android
 2026-08-04 11:10:05 +02:00
dependabot[bot]andGitHub 9b6dee00e7 Bump brace-expansion from 2.0.3 to 2.1.4 in /test/android 
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 2.0.3 to 2.1.4.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](https://github.com/juliangruber/brace-expansion/compare/v2.0.3...v2.1.4)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 2.1.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-04 08:53:04 +00:00
Tim PerryandGitHub 8b0eec01ae Merge pull request #220 from httptoolkit/dependabot/npm_and_yarn/test/android/ip-address-10.4.0 
Bump ip-address from 10.2.0 to 10.4.0 in /test/android
 2026-08-04 10:51:58 +02:00
dependabot[bot]andGitHub 13ab9ca5c7 Bump ip-address from 10.2.0 to 10.4.0 in /test/android 
Bumps [ip-address](https://github.com/beaugunderson/ip-address) from 10.2.0 to 10.4.0.
- [Release notes](https://github.com/beaugunderson/ip-address/releases)
- [Commits](https://github.com/beaugunderson/ip-address/compare/v10.2.0...v10.4.0)

---
updated-dependencies:
- dependency-name: ip-address
  dependency-version: 10.4.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-04 00:01:20 +00:00
Tim PerryandGitHub 0a915656f9 Merge pull request #219 from httptoolkit/dependabot/npm_and_yarn/test/android/path-to-regexp-0.1.13 
Bump path-to-regexp from 0.1.12 to 0.1.13 in /test/android
 2026-08-03 16:48:33 +02:00
Tim Perry 425f09ccd0 Update assorted outdated GHA steps 2026-08-03 16:32:45 +02:00
dependabot[bot]andGitHub c6ceec0851 Bump path-to-regexp from 0.1.12 to 0.1.13 in /test/android 
Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp) from 0.1.12 to 0.1.13.
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/v.0.1.13/History.md)
- [Commits](https://github.com/pillarjs/path-to-regexp/compare/v0.1.12...v.0.1.13)

---
updated-dependencies:
- dependency-name: path-to-regexp
  dependency-version: 0.1.13
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-03 14:29:01 +00:00
Tim Perry ec34453530 Clean up test code Android dialog/ANR handling 2026-08-03 16:27:04 +02:00
Tim Perry 55684f9cd1 Move waitForModule to Frida's attachModuleObserver API 
This fixes Flutter for Android 26, drops a load of awkward workaround
code, and probably fixes bugs in various other cases too.
 2026-08-03 15:53:43 +02:00
Tim Perry bc73628efc More test hardening to make CI reliable 2026-07-31 19:46:44 +02:00
Tim Perry 3696f6674f Massive Flutter script update so it now works on release versions 2026-07-31 19:43:51 +02:00
Tim Perry f77528bc91 Pre-init classes to fix OkHttp tests on API 30 2026-07-31 19:42:14 +02:00
Tim Perry afc72eef34 Tighten up the tests further, try to get them passing on the full matrix 2026-07-31 18:53:34 +02:00
Tim Perry 123745265d Improve TrustedCertificateIndex hook 2026-07-31 18:46:31 +02:00
Tim Perry ac2f1645f6 Add android 35 into the CI test matrix 2026-07-31 16:38:23 +02:00
Tim Perry f1e6267ead Pin specific Frida version in the tests 2026-07-31 16:18:15 +02:00
Tim Perry e15232271d Update pinning app & clean up test framework 
This notably drops Appium etc entirely (too much weird & dep noise, very
annoying) and uses raw ADB instead. Improves reliability in a few other
ways, and updates to properly track the current state of the pinning
app.
 2026-07-31 16:18:09 +02:00
Tim Perry 5be0bcde8a Speed up ProxySelector override hook 2026-07-31 16:12:48 +02:00
Tim Perry 5c8d593f97 Fix config PinSet unpinning script for Android 15+ 2026-07-31 16:12:48 +02:00
Tim Perry 6efeaa21e3 Fix config PinSet unpinning script for Android 15+ 2026-07-31 16:12:47 +02:00
Tim PerryandGitHub d4e783feee Merge pull request #217 from httptoolkit/dependabot/npm_and_yarn/test/android/multi-be700a2db9 
Bump body-parser and express in /test/android
 2026-07-27 12:39:30 +02:00
dependabot[bot]andGitHub 1b9c4bd591 Bump body-parser and express in /test/android 
Bumps [body-parser](https://github.com/expressjs/body-parser) and [express](https://github.com/expressjs/express). These dependencies needed to be updated together.

Updates `body-parser` from 1.20.3 to 1.20.6
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](https://github.com/expressjs/body-parser/compare/1.20.3...1.20.6)

Updates `express` from 4.21.2 to 4.22.2
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/v4.22.2/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.21.2...v4.22.2)

---
updated-dependencies:
- dependency-name: body-parser
  dependency-version: 1.20.6
  dependency-type: indirect
- dependency-name: express
  dependency-version: 4.22.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-27 10:31:58 +00:00
Tim PerryandGitHub e40328021c Merge pull request #214 from httptoolkit/dependabot/npm_and_yarn/test/android/multi-213e40e946 
Bump shell-quote and appium in /test/android
 2026-07-27 12:25:06 +02:00
Tim PerryandGitHub eeba8c58ba Merge pull request #213 from httptoolkit/dependabot/npm_and_yarn/test/android/fast-uri-3.1.4 
Bump fast-uri from 3.1.2 to 3.1.4 in /test/android
 2026-07-27 12:19:44 +02:00
dependabot[bot]andGitHub 7c6d815224 Bump shell-quote and appium in /test/android 
Bumps [shell-quote](https://github.com/ljharb/shell-quote) to 1.10.0 and updates ancestor dependency [appium](https://github.com/appium/appium/tree/HEAD/packages/appium). These dependencies need to be updated together.


Updates `shell-quote` from 1.8.3 to 1.10.0
- [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/shell-quote/compare/v1.8.3...v1.10.0)

Updates `appium` from 3.5.2 to 3.6.0
- [Release notes](https://github.com/appium/appium/releases)
- [Changelog](https://github.com/appium/appium/blob/master/packages/appium/CHANGELOG.md)
- [Commits](https://github.com/appium/appium/commits/appium@3.6.0/packages/appium)

---
updated-dependencies:
- dependency-name: shell-quote
  dependency-version: 1.10.0
  dependency-type: indirect
- dependency-name: appium
  dependency-version: 3.6.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-25 16:05:36 +00:00
dependabot[bot]andGitHub 9083e0e5f4 Bump fast-uri from 3.1.2 to 3.1.4 in /test/android 
Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.2 to 3.1.4.
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.2...v3.1.4)

---
updated-dependencies:
- dependency-name: fast-uri
  dependency-version: 3.1.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-25 12:20:08 +00:00
Tim PerryandGitHub 9334420a50 Merge pull request #212 from httptoolkit/dependabot/npm_and_yarn/test/android/multi-5e08f520ef 
Bump form-data and appium in /test/android
 2026-06-22 14:13:22 +02:00
dependabot[bot]andGitHub 2a7ca26bc0 Bump form-data and appium in /test/android 
Bumps [form-data](https://github.com/form-data/form-data) to 4.0.6 and updates ancestor dependency [appium](https://github.com/appium/appium/tree/HEAD/packages/appium). These dependencies need to be updated together.


Updates `form-data` from 4.0.4 to 4.0.6
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md)
- [Commits](https://github.com/form-data/form-data/compare/v4.0.4...v4.0.6)

Updates `appium` from 3.5.0 to 3.5.2
- [Release notes](https://github.com/appium/appium/releases)
- [Changelog](https://github.com/appium/appium/blob/master/packages/appium/CHANGELOG.md)
- [Commits](https://github.com/appium/appium/commits/appium@3.5.2/packages/appium)

---
updated-dependencies:
- dependency-name: form-data
  dependency-version: 4.0.6
  dependency-type: indirect
- dependency-name: appium
  dependency-version: 3.5.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-22 12:09:21 +00:00
Tim PerryandGitHub 93031d1d21 Merge pull request #211 from httptoolkit/dependabot/npm_and_yarn/test/android/multi-10b1db676f 
Bump undici in /test/android
 2026-06-22 14:08:12 +02:00
dependabot[bot]andGitHub e08bd45c00 Bump undici in /test/android 
Bumps  and [undici](https://github.com/nodejs/undici). These dependencies needed to be updated together.

Updates `undici` from 7.24.2 to 7.28.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v7.24.2...v7.28.0)

Updates `undici` from 6.24.1 to 6.27.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v7.24.2...v7.28.0)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 7.28.0
  dependency-type: indirect
- dependency-name: undici
  dependency-version: 6.27.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-20 11:22:58 +00:00
Tim PerryandGitHub 9fb8692ef7 Merge pull request #209 from httptoolkit/dependabot/npm_and_yarn/test/android/multi-e2f88599bf 
Bump ws and appium in /test/android
 2026-06-16 20:07:41 +02:00
Tim PerryandGitHub 247920b1f8 Merge pull request #210 from httptoolkit/dependabot/npm_and_yarn/test/android/js-yaml-4.2.0 
Bump js-yaml from 4.1.1 to 4.2.0 in /test/android
 2026-06-16 20:07:20 +02:00
dependabot[bot]andGitHub 3b01159810 Bump js-yaml from 4.1.1 to 4.2.0 in /test/android 
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.1 to 4.2.0.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/commits)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.2.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-16 17:18:35 +00:00
dependabot[bot]andGitHub 421de1d3f5 Bump ws and appium in /test/android 
Bumps [ws](https://github.com/websockets/ws) to 8.21.0 and updates ancestor dependency [appium](https://github.com/appium/appium/tree/HEAD/packages/appium). These dependencies need to be updated together.


Updates `ws` from 8.20.0 to 8.21.0
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](https://github.com/websockets/ws/compare/8.20.0...8.21.0)

Updates `appium` from 3.4.2 to 3.5.0
- [Release notes](https://github.com/appium/appium/releases)
- [Changelog](https://github.com/appium/appium/blob/master/packages/appium/CHANGELOG.md)
- [Commits](https://github.com/appium/appium/commits/appium@3.5.0/packages/appium)

---
updated-dependencies:
- dependency-name: ws
  dependency-version: 8.21.0
  dependency-type: indirect
- dependency-name: appium
  dependency-version: 3.5.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-16 17:13:47 +00:00
Tim PerryandGitHub 631ce0d9a6 Merge pull request #208 from httptoolkit/dependabot/npm_and_yarn/test/android/multi-c08e63791c 
Bump esbuild and tsx in /test/android
 2026-06-16 19:11:50 +02:00
dependabot[bot]andGitHub 61e11c172d Bump esbuild and tsx in /test/android 
Bumps [esbuild](https://github.com/evanw/esbuild) to 0.28.1 and updates ancestor dependency [tsx](https://github.com/privatenumber/tsx). These dependencies need to be updated together.


Updates `esbuild` from 0.25.5 to 0.28.1
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2025.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.25.5...v0.28.1)

Updates `tsx` from 4.20.3 to 4.22.4
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](https://github.com/privatenumber/tsx/compare/v4.20.3...v4.22.4)

---
updated-dependencies:
- dependency-name: esbuild
  dependency-version: 0.28.1
  dependency-type: indirect
- dependency-name: tsx
  dependency-version: 4.22.4
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-14 06:40:17 +00:00
Tim Perry 8472f2ca05 Hook google play services Conscrypt too 2026-05-11 13:38:11 +02:00
Tim Perry f6a328cfff Protect against failures in Android system hooks setup 
This may very likely result in some broken interception setup, but still
better than actually crashing the script.
 2026-05-11 13:21:19 +02:00
Tim Perry ecf9f429f3 Disable CT in native Conscrypt as well in Frida hooks 
This is going to become more important in Android 17, which enables CT
far more aggressively.
 2026-05-11 13:20:07 +02:00