Recent content by Veehmot

Yes, but this app in particular uses certificate pinning, which means that it won't accept any cert installed, just a single one.

Looks like the application has SSL Pinning in place. Since this is a Android app running on an emulator, I've tried some unpinners based on Cydia and XPosed, but to no avail. The app refuses to accept my proxy certificate. I don't have any experience with SSL/TSL so I guess i will give up for...

Thanks for your help. I was able to successfully route the HTTP/S traffic to Charles, but the software won't trust the Charles CERT. I believe I should use a mitm-attack in order to make the client and server believe they are genuine. Do you think that will work?

I'm trying to decrypt some software (not a webpage or browser) that uses TSL 1.2. I'm using Wireshark to listen to packets flowing and I can see there's an TSL exchange at the start of the software, and then all the packets are encrypted. I would like to see what the server is responding to the...