-
-
[分享]iOS HTTPS流量分析
-
发表于: 2015-1-9 12:23
-
ios-ssl-kill-switch
b73K9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6Y4K9i4c8Z5N6h3u0Q4x3X3g2U0L8$3#2Q4x3V1k6A6f1@1g2o6f1r3q4J5N6r3&6W2M7Y4y4Q4x3V1k6A6L8%4y4Q4x3X3c8K6M7$3I4Q4x3X3c8C8K9h3I4D9i4K6u0V1M7%4N6A6N6r3y4Z5i4K6u0r3
Burp FreeEdition 1.6
2daK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6i4m8G2M7Y4c8K6N6$3W2Y4k6$3g2J5i4K6u0W2L8X3g2@1i4K6u0r3j5Y4g2J5M7q4)9J5c8X3c8G2N6$3&6D9L8$3q4V1i4K6u0W2K9s2c8E0L8l9`.`.
遇到一个app是https的，找了半天工具，网上很多朋友说ios-ssl-kill-switch在iOS6以后没用，但是我测试的时候发现Fiddler居然可以解出明文的数据，burp 1.5.2没成功，换了个最新版的1.6免费版，居然狗血的成功了，一直不明白burp为啥偶尔抽风抓不到https。
抓个App Store的流量，有图有真相
b73K9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6Y4K9i4c8Z5N6h3u0Q4x3X3g2U0L8$3#2Q4x3V1k6A6f1@1g2o6f1r3q4J5N6r3&6W2M7Y4y4Q4x3V1k6A6L8%4y4Q4x3X3c8K6M7$3I4Q4x3X3c8C8K9h3I4D9i4K6u0V1M7%4N6A6N6r3y4Z5i4K6u0r3
Burp FreeEdition 1.6
2daK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6i4m8G2M7Y4c8K6N6$3W2Y4k6$3g2J5i4K6u0W2L8X3g2@1i4K6u0r3j5Y4g2J5M7q4)9J5c8X3c8G2N6$3&6D9L8$3q4V1i4K6u0W2K9s2c8E0L8l9`.`.
遇到一个app是https的，找了半天工具，网上很多朋友说ios-ssl-kill-switch在iOS6以后没用，但是我测试的时候发现Fiddler居然可以解出明文的数据，burp 1.5.2没成功，换了个最新版的1.6免费版，居然狗血的成功了，一直不明白burp为啥偶尔抽风抓不到https。
抓个App Store的流量，有图有真相
|
|
|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
