Tim Perry
6279e6e7a6
This isn't required, because our system certificate injection prepopulates the index used by all trust managers anyway, so they trust our cert regardless. As configured, the previous hook just trusted _all_ certificates, exposing 3rd party MitM risk - better to keep it strict for just our certificate where we can.
Frida Mobile Interception Scripts
Part of HTTP Toolkit: powerful tools for building, testing & debugging HTTP(S)
This repo contains a selection of Frida scripts that can be used independently, or as a set for interception of HTTP(S) traffic on Android & iOS.
The scripts are:
android-proxy-override.js
A script to override the proxy configuration of a target application, allowing capture of HTTP traffic without changing device settings, using a VPN, or any other techniques.
Note that this only works for plain HTTP - you will also need a method to trust your CA certificate (either device-wide or using another script) if you would like to intercept HTTPS.
android-certificate-unpinning.js
A script to defeat SSL certificate pinning in a target application, by hooking & disabling all commonly known pinning techniques. For more information and detailed setup instructions for unpinning specifically, take a look at https://httptoolkit.com/blog/frida-certificate-pinning/
Each of these scripts can be used with HTTP Toolkit or any other HTTP debugging proxies to capture traffic.