71–80 of 87 posts
Earlier quoted context omitted.
I recently used Fiddler along with Frida[1] to deal with cert pinning in the app I was looking into. [1] https://github.com/httptoolkit/frida-android-unpinning
Sweet, thanks for the link. I was looking for something like this. Tried mitmproxy but it was useless against cert pinning. So I went with decompiling the app to extract the auth keys and urls for the internal API it was using.
You are an inspiration to me.
This looks great! Congratulations. I particularly like the "shortcuts" to common actions like "Insert JS/CSS". That's very useful! I want to also give a shoutout to https://proxyman.io/ . Proxyman is a native Mac App that also works as a local proxy and is a pleasure to use. I've been using it for similar workflows and can highly recommend it over Charles (the SSL handling alone is 100x simpler).
I too used to use paid-version of Charles and then moved to Proxyman. I particularly like the scripting ability in Proxyman.
Earlier quoted context omitted.
Lightrun looks really interesting. Have you personally used lightrun to debug anything directly in production? I saw the video on landing page and very curious to know how it works under the hood.
Sure. It works differently for every language/platform e.g. for Java it uses a JVMTI agent. This connects to the backend server which then connects to the IDE. This lets you send action commands to production without having a debug session into you K8S cloud.
Earlier quoted context omitted.
Sure. It works differently for every language/platform e.g. for Java it uses a JVMTI agent. This connects to the backend server which then connects to the IDE. This lets you send action commands to production without having a debug session into you K8S cloud.
Very Interesting that you brought K8s. In the K8s cluster, an API request could be hitting one of the multiple PODs so how does the JVMTI agent know which pod to connect to? I am definitely missing something here.
So you can add a conditional snapshot (a breakpoint that doesn't break) to the set of green containers. E.g. I can add a snapshot that has a condition to only grab the data for user X. I'll get the result regardless of the container that actually handles the request.
I'm interested in this for its potential reverse engineering apps on Android. I've had some success with `mitmproxy` but I'm wondering what other HN-ers use for this purpose.
I've been building a list of apps and libraries in this space. In no particular order: https://requestly.io/ https://portswigger.net/burp https://dutzi.github.io/tamper/ https://anyproxy.io/en/ https://wproxy.org/whistle/ https://www.telerik.com/fiddler https://github.com/alibaba/lightproxy https://httptoolkit.tech/ https://mitmproxy.org/ https://wiki.squid-cache.org/Features/SslPeekAndSplice https://www.charlesproxy…
Could you compare Requestly with Proxyman in terms of mobile debugging capabilities? Proxyman has especially well developed flow for installing certificates that allow the proxying without having to change the app's source code. I have not see other apps match that and it is incredibly helpful for only semi-technical QA workers who might not always have a dev team willing to integrate random SDKs only to make their l…
I would love to have this capability for iOS apps.
There's a site I use that checks for membership only on the client side and I use requestly to spoof premium status. Just had to write a simple script like this to modify the response body of the request that gets membership status: function modifyResponse(args) { const {method, url, response, responseType, requestHeaders, requestData} = args; const responseDataParsed = JSON.parse(response); responseDataParsed.result…
function modifyResponse(args) { const {method, url, response, responseType, requestHeaders, requestData, responseJSON} = args;
responseJSON.result.user.vip_end = "2030-06-11T14:16:20.000Z";
responseJSON.result.user.expire_in = "3573 days, 3 hours";
responseJSON.result.user.is_premium = true;
return responseJSON;
}Earlier quoted context omitted.
Same. mitmproxy (and its built-in mitmdump lib), along w/ the (criminally obscure / amazing) lnav ( https://lnav.org ), have served me very well in the past for this kind of thing.
I have seen Inav earlier but never used it. Does it also provide response modification capabilities?