Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: ParrotSnoop – Android TCP/UDP Packet Capture for IPv4/IPv6

github.com

Post reply on HN
Print view View original

1–8 of 8 posts

Re: Show HN: ParrotSnoop – Android TCP/UDP Packet Capture for IPv4/IPv6

#2

Post by DivestTrump »

I appreciate the traction this received. I'd like to note that I am not a developer by trade and I'm certainly not a designer. Java isn't even my primary language. I am just somebody interested in privacy and security and this was a fun project that should be useful. Any contributions to the code or design are very welcome. I hope this helps others and thank you.

Re: Show HN: ParrotSnoop – Android TCP/UDP Packet Capture for IPv4/IPv6

#3

Post by lozaning »

Would this let me see the full path of an https requests that an app is making? I've got a testing need for that, and am currently hampered because our secops team won't let us enable a feature flag to disable cert pinning so that Charles proxy will work.

WOuld this be a viable alternative because it runs on the actual phone itself?

Re: Show HN: ParrotSnoop – Android TCP/UDP Packet Capture for IPv4/IPv6

#4

Post by [deleted] »

lozaning wrote: post #3

Would this let me see the full path of an https requests that an app is making? I've got a testing need for that, and am currently hampered because our secops team won't let us enable a feature flag to disable cert pinning so that Charles proxy will work. WOuld this be a viable alternative because it runs on the actual phone itself?

[deleted]

Re: Show HN: ParrotSnoop – Android TCP/UDP Packet Capture for IPv4/IPv6

#5

Post by h4waii »

lozaning wrote: post #3

Would this let me see the full path of an https requests that an app is making? I've got a testing need for that, and am currently hampered because our secops team won't let us enable a feature flag to disable cert pinning so that Charles proxy will work. WOuld this be a viable alternative because it runs on the actual phone itself?

No, this won't bypass certificate pinning, to do that you need to tamper the app or hook runtime calls using something like Xposed. There are modules [0] [1] that do this, support depends on the version of Android you're using.

[0]. https://github.com/ac-pm/SSLUnpinning_Xposed

[0]. https://github.com/Fuzion24/JustTrustMe

Re: Show HN: ParrotSnoop – Android TCP/UDP Packet Capture for IPv4/IPv6

#6

Post by madushan1000 »

lozaning wrote: post #3

Would this let me see the full path of an https requests that an app is making? I've got a testing need for that, and am currently hampered because our secops team won't let us enable a feature flag to disable cert pinning so that Charles proxy will work. WOuld this be a viable alternative because it runs on the actual phone itself?

Use frida(frida.re) with something like objection to disable certificate pining at runtime. You gotta have a rooted phone, or you'll have to patch the apk with Frida library.
Post reply on HN