抓不到的包? SSL Pinning 的锅~!....

简单的 HTTPS 抓包都会用, 就不说了, 无论 Fiddler 还是 Charles 都很简单, 关于部分抓不到的, 是因为代码中开启了 SSL Pinning

• 针对于 iOS 开发来说, 这篇文章关于 AF 设置 SSL Pinning, 个人没有经历过这种开发, 不是很了解, 取证困难, 使用简单哈哈哈哈哈

• 想要抓取 SSL Pinning 的包, 需要手机越狱, 越狱后在 Cydia 中添加以下插件

  • Debian Packager
  • Cydia Substrate
  • PreferenceLoader
  

• 安装完成后去 GitHub 下载 ssl-kill-switch2 , 下载最新的就好, 已经支持 iOS10 以上, 然后将该文件拷贝到 iOS 设备中
  

  

• ssh 连接设备后执行如下命令进行安装

dpkg -i com.nablac0d3.sslkillswitch2_0.12.deb
killall -HUP SpringBoard

# ~ [14:03:52] C:255
$ ssh [email protected]
The authenticity of host '192.168.31.70 (192.168.31.70)' can't be established.
RSA key fingerprint is SHA256:kxf27A/LgYBQxVgfBl8GzVQ9sQzxEKm45aa2nqPXJgE.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '192.168.31.70' (RSA) to the list of known hosts.
[email protected]'s password:
iPhone:~ root# dpkg -i com.nablac0d3.sslkillswitch2_0.12.deb
dpkg: error: cannot access archive 'com.nablac0d3.sslkillswitch2_0.12.deb': No such file or directory
iPhone:~ root# cd /User/Media
iPhone:/User/Media root# ls
AirFair  DCIM       PhotoData      Radio                      iTunes_Control
Airlock  Downloads  Photos         Recordings
Bookse:/ MediaAnalysist#PublicStaging  
com.nablac0d3.sslkillswitch2_0.12.deb

iPhone:/User/Media root# dpkg -i com.nablac0d3.sslkillswitch2_0.12.deb
Selecting previously unselected package com.nablac0d3.sslkillswitch2.
(Reading database ... 5384 files and directories currently installed.)
Preparing to unpack com.nablac0d3.sslkillswitch2_0.12.deb ...
Unpacking com.nablac0d3.sslkillswitch2 (0.12-3+debug) ...
Setting up com.nablac0d3.sslkillswitch2 (0.12-3+debug) ...
iPhone:/User/Media root# killall -HUP SpringBoard
iPhone:/User/Media root#

安装结果

在设置中开启功能

至此, 就可以去抓包了, 我用的是饿了么练手的
至于想要是用非越狱的就抓包, 需要对想要抓包的 APP 进行逆向, 解包, HOOK 设置 SSL Pinning 的相关代码, 关键词是 trust, 犹豫比较困难不做介绍了哈哈哈