nabla-c0d3 / ssl-kill-switch2

Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and macOS applications.
Other
3.07k stars 466 forks source link

Add a basic UI for excluding specific apps from being hooked #65

Closed blunden closed 4 years ago

blunden commented 5 years ago

While filtering the process the tweak is injected in using SSLKillSwitch2.plist is possible, it only allows you to add bundles it should inject into, not ones to exclude. In other words, you'd have to remove the very general rules used by default and then manually specify every single app to inject into. This pull request adds a way to explicitly include certain apps (bundleIds) instead.

Note that the UI is rudimentary at best, but it gets the job done for now.

blunden commented 5 years ago

Hmm, I'll double check if I missed any files tomorrow. Don't have the computer in question here at the moment. Not sure why it would complain about Network.h though. Seems unrelated.

blunden commented 5 years ago

Yeah, no other changes were needed to build it. Tests must've been broken already. :)

To be honest, I'm not sure why trimming whitespace from the bundleIdentifier received from the system is necessary as I would assume whitespace characters wouldn't be allowed but testing showed otherwise.

blunden commented 5 years ago

A compiled version for those who want to test it without setting up a build environment:

https://blunden.se/com.nablac0d3.sslkillswitch2_0.13-pr-65.deb

nabla-c0d3 commented 4 years ago

This was released as part of v0.14. Thanks again!