Intercept HTTPS on non-rooted Android devices | HackTheBox - Anchored

Поделиться
HTML-код
  • Опубликовано: 10 окт 2024

Комментарии • 35

  • @DJChesley
    @DJChesley Год назад +2

    Yeah this is awesome man, definitely a new sub here!

  • @mrforest612
    @mrforest612 2 года назад +3

    Well done, this was really interesting. Appreciate that you dug into the tools and showed the frida injection method even if it didn't work.

    • @0xbro
      @0xbro  2 года назад

      Thank you very much! 🙏

  • @gashone
    @gashone Год назад +3

    Great solving problem, I saw something new and thank you! Keep going with this type of videos, very hands-on and powerfull editing

    • @0xbro
      @0xbro  Год назад

      Thank you too! Glad you find something new 😊I will continue with similar content for sure!

  • @_CryptoCat
    @_CryptoCat 2 года назад +3

    great work bro! 💜

    • @0xbro
      @0xbro  2 года назад +1

      💜💜💜💜💜

  • @sisaysorsa3745
    @sisaysorsa3745 Год назад +3

    Wow Bro you are a legend 👏👏👏👏👏 I learned a lot from you and the way you explained is really amazing

    • @0xbro
      @0xbro  Год назад

      Thank you so much mate! I'm really happy to know that! Glad to have helped in some way! 🙏

  • @itsmmdoha
    @itsmmdoha Год назад +1

    Love your videos!
    Keep it coming.

  • @neilthomas5026
    @neilthomas5026 2 года назад +1

    Cool video dude

    • @0xbro
      @0xbro  2 года назад

      Thank you so much!

  • @asdfasdfasdf383
    @asdfasdfasdf383 Год назад +1

    very great videos. Keep it up bro !

  • @Zxcv77-s8i
    @Zxcv77-s8i 9 месяцев назад +1

    hey, it was easy to follow along. Thank you for the clear explanations.

    • @0xbro
      @0xbro  9 месяцев назад

      Glad you enjoyed it!

  • @kutsokon
    @kutsokon Год назад +1

    Cool video. Are existing any difference between running apktool installed or straight java archive call? Unfortunately, I have problems with build after change network-security file :(

    • @0xbro
      @0xbro  Год назад +1

      Oooh yeah, there some differences. I had some problem with apktool installed from the Kali official package, I think it was an old version of the tool. I solved the issue downloading the latest version of apktool from the official GitHub repo

    • @kutsokon
      @kutsokon Год назад +1

      @@0xbro i used latest version, but for some reason "apktool d && apktool b" didn't work without any changes until add --use-aapt2 flag, so now it's fine

  • @faceless4970
    @faceless4970 8 месяцев назад

    Thank you a lot from such information content

  • @inrbe
    @inrbe Год назад +1

    would you please continue the mobile application pen-testing series

    • @0xbro
      @0xbro  Год назад

      Hello mate! I will continue the mobile application security series in the future for sure, the problem is that I am not able to find enough time to dedicate to the channel at the moment. However, more videos about it will be coming!

  • @kaderdz4564
    @kaderdz4564 2 года назад +2

    You can hide root by some plugin in magisk it work fine

  • @kaderdz4564
    @kaderdz4564 2 года назад +1

    But still have jusy info good work bro

  • @viswasringan9848
    @viswasringan9848 Год назад +1

    Hello friend, I've tried to solve this problem following the same steps, but didn't work for me. I've edited the network config file as shown, rebuild the apk, signed the apk and installed it succesfully.But still it is showing as 'Device is rooted'. Any suggestions would be a great help.

    • @0xbro
      @0xbro  Год назад

      Are you using a rooted device? The problem seems related to your phone/VM, in fact I used a real phone for this one. Try using a different emulator or, if possible, your real device

    • @viswasringan9848
      @viswasringan9848 Год назад +1

      @@0xbro I'm using Android studio emulator which is rooted. Will try out on my phone. Thanks man. Love your contents.❤️

  • @jasmeetsingh8603
    @jasmeetsingh8603 Год назад +1

    Nice method, but how we can do it on flutter based application coz most of the modern application will based on flutter, Can u make an additional videos on Flutter in Android Pen-testing??

    • @0xbro
      @0xbro  Год назад

      Yeah, you're right! In my ideal roadmap, there will be videos about Flutter and Kotlin, but before making some videos about those topics I should study and dig in depth into them because at the moment I haven't happened to look at them in detail yet

  • @sangamlal4417
    @sangamlal4417 2 года назад +1

    Great Bro. I have been enthusiastic android app developer to understand the possible security threats for android app. Can you please help me on all these threats so that i can make more secured app?

    • @0xbro
      @0xbro  2 года назад

      Sure mate! I really suggest you to take a look to the OWASP Mobile App Security ( owasp.org/www-project-mobile-app-security/ ), here you can find all the best practices, known pitfalls and misconfigurations for Android and iOS app. I think OWASP is the most comprehensive site you can use regarding this topic

  • @flaviogjoni5747
    @flaviogjoni5747 Год назад +2

    waiting for the 0xbro and cryptocat collab

    • @0xbro
      @0xbro  Год назад

      Lo spin-off di cui fino ad adesso non sapevo di aver bisogno 👀

  • @mbithi_ke
    @mbithi_ke 2 года назад +1

    can we get the apk? we might try cracking it using other ways (:

    • @0xbro
      @0xbro  2 года назад

      Unfortunately I no longer have it, it is necessary to have a VIP subscription on hackthebox to be able to re-download it :(

  • @SubscribeSuman
    @SubscribeSuman Год назад

    Try to bypass ssl pinning on jio pos plus apps ... It was difficult for me