friTap
friTap copied to clipboard
fkie-cad
The goal of this project is to help researchers to analyze traffic encapsulated in SSL or TLS.
Apps crash with error `Failed to install provider as highest priority provider. Provider was installed at position 8`. Tested under Linux and Windows, with different python versions with: `python friTap.py...
I am testing the app "Rucoy Online" for http data upon character login. Fritap spawns the app just fine, but it does not log any TLS traffic or keys relating...
Hi, first of all thank you for providing this very useful repo! I'm using it for privacy analysis of apps. I'm happy to see that you published a new version...
Hi friTap devs. I'm analyzing QUIC traffic in Android apps for an university project. To do so, I developed a simple app that makes HTTP requests to an URL in...
Hi team, Thank you for your greate repo. I think we need to add options to load custom scripts before logging TLS. Because some applications have protection, it terminated before...
I am trying to use the friTap.py tool for monitoring SSL/TLS traffic on my Android device. I've executed the script with the following command: `./friTap.py -m -k keys.log -v -s...
关于系统
您好，我认为该项目帮助我们分析app流量非常有帮助，我简单上手测试了在ubuntu上抓取安卓手机中的app流量和密钥并成功解密 我有几个问题： 1.项目介绍中支持所有操作系统，但很不幸我在windows上利用测试该项目失败了，相同的步骤在ubuntu上成功了，请问是windows上有什么操作步骤不一样吗？ 2.因为我目前只有安卓机可供测试，我想知道对于鸿蒙系统和苹果手机上的app，该项目能否成功解密 3.目前我的专业知识较少，对此解密的理解就是找到ssl调用的各种函数入口然后hook出密钥来，如果我想进一步改进该项目，我是不是可以添加更多的ssl函数以解密更多的流量包，我应该阅读并修改哪个源文件呢？ 如果可以赐教，十分感激！
Some applications run LIBCEF, aka Chromium Embedded Framework which in turn is using tls somewhere. Probably boringtls I tried to attach fritrap on every spawned sub-process (It would be nice...
what is the reason? ``` friTap -m -s --pcap mycapture.pcap com.example.app Start logging Press Ctrl+C to stop logging spawning com.example.app [*] capturing only plaintext data [*] Running Script on Android...
If you try to record data for - Hearthstone - Quizduel2 - WoWCompanion - SubWaySurfer - Ingress The only request that is intercepted are GRPC calls to ```firebaseinstallations.googleapis.com``` which can't...