HN Explorer

8 comments

[ 5.0 ms ] story [ 28.0 ms ] thread
thenthenthen
What is the advantage to for example Burpsuite Proxy (+burp ca certificate)? Is it possible to decrypt packets found in the air (aka open wireless network you control)?
benmmurphy
a lot of iOS apps will use certificate pinning so this avoids having to bypass that. the disadvantage is you can't easily modify requests. i actually have an extension to mitproxy that pulls the secrets from keylog file and then performs an MITM attack on the connection based on that. this way you can modify requests without trusting an evil root certificate. but you do need the key material either via keylog file or via an attack on TLS key sharing (like solving DLP on EC). also i've only implemented this for TLS1.2.
thenthenthen
Ah nice, I was put off by the use of an jailbroken idevice, thinking they were using ssl kill switch.
Manouchehri
That’s awesome, I’ve wanted that to be a feature for years!

It’s unfortunately really hard to Google for, since results keep returning on how to get mitmproxy to export SSLKEYLOG, not ingesting it.

Did you open source it by any chance? =)

c7DJTLrn
Why do this over installing a root CA and using mitmproxy as a proxy server?
inickt
As mentioned below, lots of iOS apps will use certificate pinning to verify they aren’t being MITM’ed.
youngtaff
In addition to the cert pinning issue, I found it handy when I wanted to look at the Safari's HTTP/2 implementation and proxies can get in the way

I believe this method can also be used to decrypt traffic going over the cellular interface too

[dead] m0rbz
Is this still working in iOS14/15?