search

nabla-c0d3 / ssl-kill-switch2

Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and macOS applications.
Other
3.08k stars 466 forks source link

Not working on iOS 11.4.1 #62

Closed nicolas17 closed 5 years ago

nicolas17 commented 5 years ago

I'm on iPhone6,1 (5s), iOS 11.4.1, jailbroken with unc0ver. When intercepting the network using mitmproxy, without ssl-kill-switch, some apps work (like Safari and Cydia's home page) while others don't due to pinning (like the App Store and Arlo's login).

After installing com.nablac0d3.sslkillswitch2_0.13.deb and enabling it, connections still fail in AppStore and Arlo, but also start failing in Safari and Cydia! The only thing that works is apt and some background daemon requests (such as geod; they probably haven't even loaded Substrate and need a restart).

For Arlo, some Google analytics and Facebook SDK requests succeed when ssl-kill-switch is disabled, only the main login fails. With ssl-kill-switch enabled, all requests fail. Note that Arlo seems to use TrustKit; at least I see it reporting to https://overmind.datatheorem.com/trustkit/report.

nicolas17 commented 5 years ago

I tried downgrading to sslkillswitch2_0.12 in case it was a regression introduced with the iOS12 support in 0.13, but it has the same problem.

bryankeller commented 5 years ago

+1, Snapchat, for example, doesn't seem to work

wangwanjie commented 5 years ago

+1, the same as above, iPhone SE, 11.4.1 jailbroken with unc0ver

frankl1m commented 5 years ago

I urgently need, I have my research project stopped because of SSL pinning, I can also get an iPad from a friend with iOS 11.4.1 and jailbreak. Some of you have tried it in this version mainly for Settings.app

nabla-c0d3 commented 5 years ago

Duplicate of https://github.com/nabla-c0d3/ssl-kill-switch2/issues/69

nicolas17 commented 5 years ago

69 is about a crash. I'm not getting any crashes here, it just makes requests fail.