Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Added connecting Burp via HTTP Tookit #2897

Merged
merged 7 commits into from
Sep 28, 2024
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
27 changes: 27 additions & 0 deletions techniques/android/MASTG-TECH-0109.md
Original file line number Diff line number Diff line change
Expand Up @@ -84,3 +84,30 @@ There are generally two approaches to this: **reFlutter** and **Frida**.
```

5. Start intercepting traffic.

## Intercepting Traffic using HTTP Toolkit

If the above methods don't work, you can try using HTTP Toolkit, which provides another way to intercept Flutter HTTPS traffic.

1. **Install HTTP Toolkit**
- You can download it from [here](https://httptoolkit.com/).

2. **Configure HTTP Toolkit**
- Turn on the Android device and make sure it's connected to your machine.
- Go to HTTP Toolkit and select one of these options:
- `Intercept > Android App via Frida` (experimental)
- `Intercept > Android Device via ADB` (for better results)
- Accept the connection request that will pop up on your Android device.

3. **Proxy HTTP Toolkit Traffic through Burp Suite**
- In HTTP Toolkit, go to `Settings > Connection Settings`.
- Set the proxy option as `Use an HTTP Proxy`.
- Enter the Burp Suite machine's IP and port (e.g., `192.168.8.2:8080`, `127.0.0.1:8082`) under the HTTP host proxy details and save it.
- Add the Burp certificate to Trusted CA Certificates.

4. **Configure Burp Suite**
- In Burp Suite, go to `Proxy > Options > Proxy Listeners > Add`.
- Enter the port number configured in HTTP Toolkit settings.
- Select `All Interfaces` and save the configuration.

5. **Start Intercepting Traffic**