isecpartners / ios-ssl-kill-switch Goto Github PK

View Code? Open in Web Editor NEW

890.0 890.0 139.0 1.1 MB

Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps

License: Other

Logos 24.14% Objective-C 66.11% Objective-C++ 9.75%

ios-ssl-kill-switch's People

Contributors

Stargazers

Watchers

Forkers

kapsolas dohoang1102 moloch-- yaeger x90 vimokumar jy03344894 x0x8x cjamey lucabongiorni codeguru85 dlocmelis prateek147 axot fanweixiao pandazheng wdmchaft buffer0verflow zigmos eiriklv cenllv aureson-banaria hnlylmlzh patpenetrante yourslee iosapplist psyko0815 jing-xie h0bby djgrasss peval precisef0x comex chyuantw eval-usertoken kimsuk jatwaston dweinstein anonymousanonymous17 zigitax mystersu nologic renhx mail2chensh shiham101 cherrynguyen9 thunguyen99 bigfool unbirdlikebird profiles magicguru phenixsh volkanh thomas-huang futurelighthouse mdabbagh88 niedfelj henryheleine fxfactorial le31ei lcklozz13 agultiga shuixi2013 topbananahub daydayup1957 xdream86 thesemen santsai mitchellporter ximerus badboy3000 ffmpegd bobqian1130 refight ian003 lgq2015 lgq20151 nagyist wflk hahaopsmeow ankushgoel27 runt18 balamirmobile ethanghub 2063369903 linvex loveforlilypads sikkandar-sha doorxp noiled 396424982 ieswxia mvukovic jesonjn ohc192 barkinet prabhu20002 nozberkaryaindonesia tjlmxh49568 zhangkn

ios-ssl-kill-switch's Issues

How do I use this test?

I downloaded, compiled and installed on iPad mini. But I don't know how to use it to test ssl kill. Can you show me how? Than you very much.

How to SSL kill switch on selected domains only?

I tried using SSLGetPeerDomainName() on the SSLContextRef objects so I can check the domain for the current session but it doesn't always return a value. Are there other ways to do this?

Hook additional NSURLconnection methods

All the iOS Apps with certificate pinning that I found were using initWithRequest:delegate: and initWithRequest:delegate:startImmediately:.
However, other methods can be used to connect to a server:

connectionWithRequest:delegate:
sendSynchronousRequest:returningResponse:error:
sendAsynchronousRequest:queue:completionHandler:

Those methods should be patched as well in order to disable certificate validation.

Add a build for the iOS simulator and OS X 64 bits

MobileSubstrate should work on both platforms and SecureTransport is the same on iOS and OS X.

iOS 9.0.x support

We already have Jail Break for iOS 9.0.0 and 9.0.1. So does it work on this iOS version?

Links:
http://canijailbreak.com
http://en.pangu.io

AppStore user login not working

Hello,

When I open AppStore in my ipad, everything works fine, but when I try to download an app ipad asks my appleid, when I enter it and press OK, it says "couldn't connect to appstore"

Hook NSURLDownload

NSURLDownload can be used to download files and save them to disk. The class is very similar to NSURLConnection so disabling certificate validation could be done in the exact same way.

http://developer.apple.com/library/mac/#documentation/Foundation/Reference/NSURLDownloadDelegate_Protocol/Reference/Reference.html#//apple_ref/occ/intf/NSURLDownloadDelegate

ios 7

Hello sir,

First step, after installing the jailbreak for iOS 7.0.4, was to install killssl. Sadly, it seems that the button won't appear. Do you plan to resolve this issue?

Cheers!

Can't work with AppStore.app in iOS 6.x

Can't work with AppStore.app in iOS 6.x.

AppStore.app said "Cannot connect to iTunes Store".

ios8.1

Hi nabla :)

Another year, another iOS :) . Do you think you have the time to update the built to support ios 8.x ?

Cheers!

SSL Kill Switch does not seem to work anymore with the Twitter App. This might be because Twitter is using CocoaSPDY (https://github.com/twitter/CocoaSPDY/) for SSL.
I'm not sure if it doesn't work because my intercepting proxy doesn't support SPDY or because the cert validation code in CocoaSPDY somehow circumvents SSL Kill Switch.