search

httptoolkit / frida-interception-and-unpinning

Frida scripts to directly MitM all HTTPS traffic from a target mobile application
https://httptoolkit.com/android/
GNU Affero General Public License v3.0
891 stars 178 forks source link

Where can I find the ca? #68

Closed AlexPaiva closed 4 months ago

AlexPaiva commented 4 months ago

As the title says, where can I find the CA for Find your MitM proxy's port (e.g. 8000) and its CA certificate in PEM format (should start with -----BEGIN CERTIFICATE-----). ?

I am using an emulator and have http toolkit installed on Windows talking with the emulator already and a rooted avd.

pimterry commented 4 months ago

These scripts are designed to be used with an intercepting mitm proxy, such as HTTP Toolkit. You need to get that CA from that tool. In HTTP Toolkit's case, you can get this from the 'Anything' option on the Intercept page. For other tools you'll need to look at their docs.

AlexPaiva commented 4 months ago

Yep I found it, was having a hard time because never would I assume I needed to click the 'anything' option. I found it manually by just searching around the files. Thank you!

pimterry commented 4 months ago

Glad that's resolved @AlexPaiva. I've now added a note in the README to make this clearer in future. If you have any other feedback at all, do please open another issue!

AlexPaiva commented 4 months ago

Glad that's resolved @AlexPaiva. I've now added a note in the README to make this clearer in future. If you have any other feedback at all, do please open another issue!

I've sent a PR with some changes that if present would have helped a lot. While small in detail, would have helped quite a bit.