devotenimabi
V2EX  ›  问与答

Android N 以上怎么抓各个 app 的请求?

  •  
  •   devotenimabi · Mar 11, 2018 · 3007 views
    This topic created in 2994 days ago, the information mentioned may be changed or developed.

    charles 官网有写: As of Android N, you need to add configuration to your app in order to have it trust the SSL certificates generated by Charles SSL Proxying. This means that you can only use SSL Proxying with apps that you control.

    我亲自测试过 7.1 的系统装上证书之后也不管用,会报和没装证书一样的错。这样的话,我用系统浏览器,微信浏览器就没办法抓包了,感觉这个措施是不是太严厉了?有没有办法绕过?

    6 replies    2018-03-11 23:54:50 +08:00
    coderfox
        1
    coderfox  
       Mar 11, 2018 via Android
    1. 试试 Package Capture。
    2. 改应用的配置,重新打包安装回去。
    Ethous
        2
    Ethous  
       Mar 11, 2018 via Android
    Package Capture + SSL Unpinning
    wu67
        3
    wu67  
       Mar 11, 2018
    我的可以,小米 note3 android7.1.1 mac mini,就是用 Charles
    des
        4
    des  
       Mar 11, 2018 via Android
    修改 system 分区的根证书应该可行吧
    sola97
        5
    sola97  
       Mar 11, 2018 via Android
    证书+JustTrustMe 可破
    sola97
        6
    sola97  
       Mar 11, 2018 via Android
    JustTrustMe 好像 7.0 不能用?
    About   ·   Help   ·   Advertise   ·   Blog   ·   API   ·   FAQ   ·   Solana   ·   3881 Online   Highest 6679   ·     Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 · 36ms · UTC 00:12 · PVG 08:12 · LAX 17:12 · JFK 20:12
    ♥ Do have faith in what you're doing.