Charles Proxy now available on iOS

Post by zuck9 » Wed, Mar 28, 2018, 5:16 AM UTC

simcop2387 wrote: post #35

yodon wrote: post #34

Genuine question here: How is it not absolutely terrifying that an iOS App Store app can man in the middle HTTPS communications made by other apps? Is there some way in which this isn’t poking a hole in exactly the sort of security sandbox that iOS tends to be good at? (And yes there probably is some part of what’s going on that I don’t understand, that’s why I’m asking the question)

Can't say much about the security, but I suspect it's working by pretending to be a VPN provider and then proxying the traffic. It's then able to install a CA root to generate any certs it needs to MITM traffic. Cert pinning will prevent this from working, but that's the only thing that will.

Post by ktta » Wed, Mar 28, 2018, 5:20 AM UTC

zuck9 wrote: post #41

simcop2387 wrote: post #35

Earlier quoted context omitted.

Can't say much about the security, but I suspect it's working by pretending to be a VPN provider and then proxying the traffic. It's then able to install a CA root to generate any certs it needs to MITM traffic. Cert pinning will prevent this from working, but that's the only thing that will.

How do you intercept traffic from apps that use cert pinning? Is the only way to patch the app binary and reinstall the patched binary using a dev certificate? How exactly does one go about patching the binary – is there a tutorial somewhere?

Post by joshenders » Wed, Mar 28, 2018, 5:22 AM UTC

thisacctforreal wrote: post #5

joshenders wrote: post #3

mitmproxy has worked on iOS and Android for years now and is OSS and easy to use

It seems to include SSL support as well https://jasdev.me/intercepting-ios-traffic

Post by saagarjha » Wed, Mar 28, 2018, 5:23 AM UTC

dannyw wrote: post #32

saagarjha wrote: post #31

Earlier quoted context omitted.

Certificate pinning is inherently security by obscurity; it's intended as an annoyance for anyone trying to reverse-engineer the service, rather than an insurmountable barrier.

Certificate pinning is also a secure way of protecting against MITM attacks, mis-issued certs, and enterprise proxies.

Post by jawngee » Wed, Mar 28, 2018, 5:24 AM UTC

yodon wrote: post #34

Genuine question here: How is it not absolutely terrifying that an iOS App Store app can man in the middle HTTPS communications made by other apps? Is there some way in which this isn’t poking a hole in exactly the sort of security sandbox that iOS tends to be good at? (And yes there probably is some part of what’s going on that I don’t understand, that’s why I’m asking the question)