1

Recently, I was trying to test an app developed on Rhomobile, I setup a proxy with burp, and of course I have installed burp certificate on my device hence I can intercept other apps on my device but I am unable to see the traffic of the app in question on burp suite instead the app works fine and connects to the remote server without even appearing an error alert of the burp suite. in reversing the app I concluded that it is using https protocol to connect to the server. even typically apps targeting android api level 24 and above, a network_security_config.xml should be specified and in my reversing I created that file and set it its location on manifest file but nothing avail. then these questions pop into my mind I would be very pleased if you can clear it.

1. in general, what am I missing? or where else should I look at?

2. specifically Is an app developed on rhomobile is proxy unaware app?

3. if the issue is associated with certificate pinning, typically the alert tab of the burp suite would have shown it, why the app is working fine and connecting to the server while other apps leave an error in the alert tab of burp suite? if I conclude that it is a proxy unaware app, how can I finally intercept its traffic?

any help would be appreciated.

Thanks,

Improve this question
5
  • The app my use raw TCP or UDP sockets. Those are not affected by the proxy settings.
    – Robert
    Mar 13, 2020 at 14:37
  • @Robert, how can I intercept those packets?
    – hanan
    Mar 13, 2020 at 14:43
  • You need to a machine that receives all IP packets (redirect all traffic on IP level). The easiest was is to use a Linux PC with Wifi adapter and use the Wifi adapter to set-up a Wifi hotspot. Then you can e.g. use mitmproxy in transparent mode on that PC and redirect the traffic via iptables to mitmproxy or just sniff the data using Wireshark.
    – Robert
    Mar 13, 2020 at 14:50
  • can I implement this on windows? any online guide would you suggest to do this?
    – hanan
    Mar 13, 2020 at 14:55
  • You can use "Virtual WiFi"/"Internet connection sharing" feature of Windows to make a hotspot. This should enable you to sniff via Wireshark but mitmproxy in transparent mode is AFAIK not possible on Windows at least I don't know a way.
    – Robert
    Mar 13, 2020 at 14:59

1 Answer 1

Reset to default
-2

Have a look at this article : https://medium.com/@ved_wayal/hail-frida-the-universal-ssl-pinning-bypass-for-android-e9e1d733d29

Improve this answer
5
  • but just this one needs a rooted device!
    – hanan
    Mar 20, 2020 at 13:25
  • use an emulator as it describe in acrticle. genymotion is ok for this.
    – alone
    Mar 20, 2020 at 13:33
  • already tried it on genymotion the app crashes, or stops. always showing the message this app stopped
    – hanan
    Mar 20, 2020 at 13:48
  • use arm translator github.com/m9rco/Genymotion_ARM_Translation Based on your android arch
    – alone
    Mar 20, 2020 at 16:20
  • @alone hi and welcome to RE.SE. You should really edit these additional pieces of information into your answer. It would also be helpful to give a meaningful excerpt of the contents from that linked Medium article. In a few years from now the link may have gone stale and your answer becomes useless this way. Thanks for your understanding.
    – 0xC0000022L ♦
    Mar 20, 2020 at 20:16

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.