objection icon indicating copy to clipboard operation
objection copied to clipboard

Dumping Cleartext from Googles Capillary Library

Open yoshimo opened this issue 7 years ago • 0 comments

Googles Capillary Lib is there to help developers send e2e encrypted messages. https://github.com/google/capillary#encryption

This means even if you disabled certificate pinning and successfully dumped the content of the connection as man in the middle with burp or charles proxy you still cannot read the data.

It seems that this library is part of the firebase sdk.

I therefore suggest to make a module that hooks the encryption, decryption, key generation and key retrieval function of this library and dumps their input/output data.

yoshimo avatar Sep 21 '18 13:09 yoshimo