6 ms·
Is there a similar tool that a non-security expert could use on the Mac?
by spidey1 4y ago
Is there a similar tool that a non-security expert could use on the Mac?
- chasil 4y agoIf your application can also use clear text TCP sockets, then stunnel becomes an option.
- K0nserv 4y agoNot sure about the non-security expert bit but I've done stuff[0] similar to this for iOS using Frida[1] which supports macOS too. For apps that use unpinned certificates and the builtin networking libraries(NSURLSession et.al.) you can directly use mimtproxy[2] or Charles[3] 0: https://hugotunius.se/2020/08/07/stealing-tls-sessions-keys-from-ios-apps.html https://hugotunius.se/2020/08/07/stealing-tls-sessions-keys-... 1: https://frida.re/ https://frida.re/ 2: https://mitmproxy.org/ https://mitmproxy.org/ 3: https://www.charlesproxy.com/ https://www.charlesproxy.com/
- youngtaff 4y agoI think you need to disable SIP to get a Frida based approach to work on MacOS And while not MacOS this eBPF based approach is interesting https://mobile.twitter.com/quarkslab/status/1527726910997815296 https://mobile.twitter.com/quarkslab/status/1527726910997815...
- matheusmoreira 4y agoIf the application isn't pinning certificates, you should be able to add your own root certificate to your machine and intercept all encrypted traffic. Same method used by corporations to monitor their own networks. I successfully used this method on a mobile game years ago. Applications with pinned certificates don't use the system certificates at all which fixes the MITM vulnerability I described. You'd need to reverse engineer them in order to change the certificate to one under your control, difficulty can vary depending on how obfuscated the code is.
- mr_mitm 4y agoYou could try this, also Frida-based: https://github.com/SySS-Research/hallucinate https://github.com/SySS-Research/hallucinate