Wednesday, May 5, 2010

Android SSL Apps & Burp

As a follow up to the post  regarding intercepting Android applications on the emulator using Burp, I wanted to give a solution for intercepting applications on the Android that enforce SSL/TLS correctly.

I ran into this problem with an app that enforced SSL/TLS. The app refused to communicate with Burp because of the certificate mismatch error. Unlike a browser you don't have the option to make an exception. Hence the app died and at the time I couldn't perform testing.

This video provides a solution I cooked up by reading some manuals and searching the web. Enjoy.

Android SSL Enforced Apps & Burp from cktricky on Vimeo.


~Happy Hacking!
at

2 comments:

  1. Michael BomanMarch 20, 2012 at 8:52 AM

    The Video seems to be MIA. Could you narrate the steps in text, or re-upload the video & update the link? Thanks!

    ReplyDelete
  2. cktrickyApril 11, 2012 at 2:38 PM

    Sorry about that, steps were outdated and not terribly useful so I removed the video. Will have to update.

    ReplyDelete