https原理与调试文章集合

HTTPS与SSL(一)  
http://blog.163.com/magicc_love/blog/static/185853662201321423527263/

HTTPS与SSL(二)  
http://blog.163.com/magicc_love/blog/static/185853662201321424244747/?suggestedreading&wumii
研究SSL的wireshark过滤条件 ssl and (ip.src == 111.13.100.92 or ip.dst == 111.13.100.92)

iOS使用Charles(青花瓷)抓包并篡改返回数据图文详解

http://mdsa.51cto.com/art/201507/483492.htm


【原创】iOS https(SSL/TLS)数据捕获
http://www.kanxue.com/bbs/showthread.php?t=177490

Securing mobile banking on Android with SSL certificate pinning
https://infinum.co/the-capsized-eight/articles/securing-mobile-banking-on-android-with-ssl-certificate-pinning


iPhone工具
工具之SSL Kill Switch
iOS Application Security Part 36 – Bypassing Certificate Pinning Using SSL Kill Switch(详细介绍SSL Kill Switch的用法)
http://highaltitudehacks.com/2014/11/03/ios-application-security-part-36-bypassing-certificate-pinning-using-ssl-kill-switch/

Intercepting the App Store's Traffic on iOS
http://nabla-c0d3.github.io/blog/2013/08/20/intercepting-the-app-stores-traffic-on-ios/

Bypassing OpenSSL Certificate Pinning in iOS Apps
https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2015/january/bypassing-openssl-certificate-pinning-in-ios-apps/
iOS应用程序绕过OpenSSL的证书
http://bobao.360.cn/learning/detail/193.html

iOS SSL kill switch安装与使用(中文版本)
http://danqingdani.blog.163.com/blog/static/186094195201211238735630/

https://github.com/iSECPartners/ios-ssl-kill-switch
https://github.com/iSECPartners/ios-ssl-kill-switch/tree/release-0.6
http://nabla-c0d3.github.io/blog/2013/08/20/ios-ssl-kill-switch-v0-dot-5-released/

工具之trustme
https://github.com/intrepidusgroup/trustme

SSL Kill Switch实测可以支持iOS8.1.3.




Android工具
工具之Android-SSL-TrustKiller
This tool leverages Cydia Substrate to hook various methods in order to bypass certificate pinning by accepting any SSL certificate.
https://github.com/iSECPartners/Android-SSL-TrustKiller


工具之JustTrustMe
An xposed module that disables SSL certificate checking. This is useful for auditing an appplication which does certificate pinning. 
https://github.com/Fuzion24/JustTrustMe


JustTrustMe近期有更新.
  • 0
    点赞
  • 2
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值