search

dpnishant / appmon

Documentation:
http://dpnishant.github.io/appmon
Apache License 2.0
1.55k stars 275 forks source link

sniffing #88

Closed lintangtimur closed 5 years ago

lintangtimur commented 5 years ago

is appmon can perform sniffing traffic? before i know about appmon, i use frida-server-android + objection + burp that can sniff from android emulator device from android studio. Is appmon capable do that?

dpnishant commented 5 years ago

Yes. Appmon has hooks for HTTP traffic. But if you see something not working as expected. Please file a bug.

lintangtimur commented 5 years ago

is appmon can sniff https traffic? and cert pinning bypass?

dpnishant commented 5 years ago

Yes. Since appmon hooks the network apis, you should be able to see it before encryption and it has cert pinning bypass for iOS.

lintangtimur commented 5 years ago

and for non rooted android devices?

dpnishant commented 5 years ago

https://www.chromestatus.com/feature/5903385005916160 is a signal that Public Key Pinning might be obsolete in the near future. Hence there was no effort made to include support for Android. But if its really needed, then it should not take much time to implement for someone who has experience with Android development and Frida experience.