简单的 HTTPS 抓包都会用, 就不说了, 无论
Fiddler还是Charles都很简单, 关于部分抓不到的, 是因为代码中开启了SSL Pinning
针对于 iOS 开发来说, 这篇文章关于
AF设置SSL Pinning, 个人没有经历过这种开发, 不是很了解, 取证困难, 使用简单哈哈哈哈哈-
想要抓取
SSL Pinning的包, 需要手机越狱, 越狱后在Cydia中添加以下插件- Debian Packager
- Cydia Substrate
- PreferenceLoader
-
安装完成后去
GitHub下载 ssl-kill-switch2 , 下载最新的就好, 已经支持 iOS10 以上, 然后将该文件拷贝到 iOS 设备中
ssh连接设备后执行如下命令进行安装
dpkg -i com.nablac0d3.sslkillswitch2_0.12.deb
killall -HUP SpringBoard
# ~ [14:03:52] C:255
$ ssh root@192.168.31.70
The authenticity of host '192.168.31.70 (192.168.31.70)' can't be established.
RSA key fingerprint is SHA256:kxf27A/LgYBQxVgfBl8GzVQ9sQzxEKm45aa2nqPXJgE.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '192.168.31.70' (RSA) to the list of known hosts.
root@192.168.31.70's password:
iPhone:~ root# dpkg -i com.nablac0d3.sslkillswitch2_0.12.deb
dpkg: error: cannot access archive 'com.nablac0d3.sslkillswitch2_0.12.deb': No such file or directory
iPhone:~ root# cd /User/Media
iPhone:/User/Media root# ls
AirFair DCIM PhotoData Radio iTunes_Control
Airlock Downloads Photos Recordings
Bookse:/ MediaAnalysist#PublicStaging
com.nablac0d3.sslkillswitch2_0.12.deb
iPhone:/User/Media root# dpkg -i com.nablac0d3.sslkillswitch2_0.12.deb
Selecting previously unselected package com.nablac0d3.sslkillswitch2.
(Reading database ... 5384 files and directories currently installed.)
Preparing to unpack com.nablac0d3.sslkillswitch2_0.12.deb ...
Unpacking com.nablac0d3.sslkillswitch2 (0.12-3+debug) ...
Setting up com.nablac0d3.sslkillswitch2 (0.12-3+debug) ...
iPhone:/User/Media root# killall -HUP SpringBoard
iPhone:/User/Media root#
安装结果
在设置中开启功能
至此, 就可以去抓包了, 我用的是饿了么练手的
至于想要是用非越狱的就抓包, 需要对想要抓包的APP进行逆向, 解包,HOOK设置SSL Pinning的相关代码, 关键词是trust, 犹豫比较困难不做介绍了哈哈哈
