iOS 逆向工程 app安全 网络安全网络及安全iOS逆向工程

[iOS越狱]Charles抓包插件ssl-kill-switc

2018-05-24  本文已影响81人  呆呆滴木木菇凉

前言

Charles抓包https时,已经信任了charles的证书,但是还是出现红XX,unkonw的状态,这时候就需要用到ssl插件,这个插件的作用就是一旦加载到iOS或OS X应用程序中,SSL Kill Switch 2在Secure Transport API中修补特定的低级别SSL功能,以覆盖并禁用系统的默认证书验证以及任何类型的自定义证书验证。

实践:

1、打包.deb

ln -s /<path_to_your_theos_folder> theos

  wifi:ssl-kill-switch2-master clf$ ln -s /opt/theos theos

make package

wifi:ssl-kill-switch2-master clf$ make package
> Making all for tweak SSLKillSwitch2…
==> Compiling SSLKillSwitch/SSLKillSwitch.m (armv7)…
==> Linking tweak SSLKillSwitch2 (armv7)…
clang: warning: libstdc++ is deprecated; move to libc++ with a minimum deployment target of iOS 7 [-Wdeprecated]
==> Compiling SSLKillSwitch/SSLKillSwitch.m (arm64)…
==> Linking tweak SSLKillSwitch2 (arm64)…
clang: warning: libstdc++ is deprecated; move to libc++ with a minimum deployment target of iOS 7 [-Wdeprecated]
==> Merging tweak SSLKillSwitch2…
==> Signing SSLKillSwitch2…
> Making stage for tweak SSLKillSwitch2…
ERROR: package name has characters that aren't lowercase alphanums or '-+.'.
make: *** [internal-package] Error 255

错误是control中打包的名字需要小写,修改重新打包

wifi:ssl-kill-switch2-master clf$ make package
> Making all for tweak SSLKillSwitch2…
make[2]: Nothing to be done for `internal-library-compile'.
> Making stage for tweak SSLKillSwitch2…
dm.pl: building package `com:iphoneos-arm' in `./packages/com.nablac0d3.sslkillswitch_0.11-1+debug_iphoneos-arm.deb'

2、手机安装deb

确保手机安装了以下依赖项:

将刚刚打包好的.deb文件拷贝到手机上,这里我放在/usr/local/bin/路径下。

wifi:~ clf$ ssh root@192.168.2.2
root@192.168.2.2's password: 

dpkg -i <package>.deb

iPhone:~ root# dpkg -i /usr/local/bin/com.nablac0d3.sslkillswitch_0.11-1+debug_iphoneos-arm.deb 
Selecting previously deselected package com.nablac0d3.sslkillswitch.
(Reading database ... 1174 files and directories currently installed.)
Unpacking com.nablac0d3.sslkillswitch (from .../com.nablac0d3.sslkillswitch_0.11-1+debug_iphoneos-arm.deb) ...
Setting up com.nablac0d3.sslkillswitch (0.11-1+debug) ...

killall -HUP SpringBoard

iPhone:~ root# killall -HUP SpringBoard

参考:[原创]iOS11越狱抓包修复ssl-kill-switch2

插件地址

上一篇下一篇

猜你喜欢

热点阅读