Bypass Human Verification on Android: The SSLBypass Tool

The SSLBypass tool is an Android debugging tool that can be used for bypassing SSL checks, even when certificate pinning is implemented. This tool is still in its early stages and is very much a work in progress. However, it has already been presented at the BlackHat USA 2012 conference.

To use the SSLBypass tool, you will need to run the binary from the AndroidSSLBypass root directory. If you want to test with the included test app and test server, you will also need to have Python and Twisted installed on your system. The tool has only been tested on Windows 7 and Ubuntu 10.04.

One of the requirements for using the SSLBypass tool is that the app you are testing must have the 'debuggable' flag set in its Application Manifest file. Additionally, the device you are using must have ro.debuggable=1 or ro.secure=0. You can check this by using the command 'adb shell getprop ro.debuggable'.

The SSLBypass tool uses a plugin-based architecture to load debugging code at runtime. This allows for great flexibility and customization of the tool's behavior. The plugins can be written in either Java or Jython, and they can create breakpoint events and register themselves as handlers for those events.

The HostNameVerifier is replaced with The TrustManager in use with one that trusts all certificates. The process for bypassing SSL checks is simply to set breakpoints on certain functions and replace the SSLBypassJDIPlugin found in the 'plugins' directory with a plugin that implements bypassing SSL for certain implementations of SSL and certificate pinning.

The tool is currently very beta, but it has already shown great promise as a starting point for further development. With its ability to bypass SSL checks, even when certificate pinning is implemented, the SSLBypass tool is an exciting new addition to the world of Android debugging.

Bypass human verification android