Tag: boringssl

• Decrypting Statically-Linked BoringSSL Traffic: Locating ssl_log_secret Automatically

  2025-04-25

  Locating ssl_log_secret in a statically-linked BoringSSL, finding the TLS key-logging function to decrypt traffic from a hardened app, with the analysis method shown end to end.

• Real-Time HTTPS Decryption With Frida + Wireshark (Part 1) — Hooking libssl

  2025-04-16

  Real-time HTTPS decryption with Frida and Wireshark, hooking the app to export TLS session keys and decrypt traffic live in the capture, with the tools and offsets documented.

• Bypassing SSL Pinning in an App with a Custom HTTP Framework and a Non-System SSL Library

  2021-06-08

  Bypassing SSL pinning when an app rolls its own HTTP framework and links a non-system SSL library like BoringSSL or Cronet, with Frida hooks for each layer.