↓ Skip to main content

Burp Suite

Sitting in the middle and reading traffic nobody expected anyone to read.

2017

patrik.re Archive

Android certificate pinning bypass with Frida

A walkthrough of installing the Burp CA on an Android device, running frida-server and using an SSL re-pinning Frida script to intercept traffic from apps that pin certificates.

2015

patrik.re Archive

Stop OS X Spotlight Leaking Your Location

Proxying OS X Spotlight through Burp showed it shipping the user's latitude and longitude to api.smoot.apple.com on every search, with two ways to block the request.