How to intercepting iOS HTTPS traffic

Question

How can I intercept & parse through the SSL traffic (incoming & outgoing) generated by my iPad application?

So what's your question? – Lucas Kauffman Sep 10 '15 at 06:05 — Lucas Kauffman, Sep 10 '15 at 06:05
@LucasKauffman The question is, ***"How?"*** – voices Sep 11 '15 at 07:29 — voices, Sep 11 '15 at 07:29

André Borie · Answer 1 · 2022-03-22T08:14:46.580

3

Create a CA, import the CA certificate in your iPhone's certificate store and then use an intercepting proxy that MITM's the TLS traffic and re-encrypts it using that CA cert.

This will work with apps that use the system's TLS functions, but not with those implementing their own TLS with OpenSSL (as they won't be using the system's cert store) nor those who do certificate pinning (you'd have to jailbreak to bypass that).

edited Mar 22 '22 at 08:14

answered Sep 10 '15 at 08:28

André Borie

12,706
3
39
76

CA = Certificate Authority, right? What is TLS? – voices Sep 16 '15 at 18:22
Also, yes. The device is currently jailbroken. Thanks. – voices Sep 16 '15 at 18:23
Are you asking me? I gave +1. Looks like someone else did too. – voices Sep 22 '15 at 20:37
7years later now, i don't think this method still works. – Scott 混合理论 Mar 17 '22 at 08:21
1

@Scott混合理论 it should still work, though now there's an extra step. You need to [enable full trust](https://support.apple.com/en-gb/HT204477) for the newly-installed CA. – André Borie Mar 22 '22 at 08:14

feral_fenrir · Answer 2 · 2015-09-15T08:26:07.427

2

Download Burp Suite

Install the CA certificate from Burp (download it from http://localhost:8080) on iPhone. Proxy iPhone via Burp on your computer!

Good Read: Installing CA Certificate

Some applications may have the certificate of the web server pinned. To bypass certificate pinning you must might have modify the application itself since the pinning is achieved by an application-specific CA Store.

Good Reads: Defeating SSL Pinning in Coin's Android Application - rotlogix

edited Sep 15 '15 at 08:26

answered Sep 14 '15 at 12:50

feral_fenrir

713
5
15

Is that really all that's required? I was under the impression it would be much more complicated, requiring DNS redirection & possibly some iptables magic. Cheers. – voices Sep 16 '15 at 18:30

How to intercepting iOS HTTPS traffic

2 Answers2