lasting-yang / frida_bypass_ssl_example Goto Github PK

电脑使用Windows环境
手机华为荣耀8 android7 已有tcpdump,nc
我打开了两个命令窗口

第一个窗口运行:
adb shell su -c "/data/local/tmp/tcpdump -i any -U -w - | nc -l -p 11233"
返回:
E:\adbtool>adb shell su -c "/data/local/tmp/tcpdump -i any -U -w - | nc -l -p 11233"
tcpdump: data link type LINUX_SLL2
tcpdump: listening on any, link-type LINUX_SLL2 (Linux cooked v2), snapshot length 262144 bytes

第二个窗口运行:
adb forward tcp:11233 tcp:11233 && adb shell su -c "nc 127.0.0.1 11233" | wireshark -k -S -i -
返回:
E:\Wireshark>adb forward tcp:11233 tcp:11233 && adb shell su -c "nc 127.0.0.1 11233" | wireshark -k -S -i -
libpng warning: iCCP: cHRM chunk does not match sRGB
** (wireshark:6916) 10:00:34.066713 [Capture MESSAGE] -- Capture Start ...
** (wireshark:6916) 10:00:34.305686 [Capture MESSAGE] -- Capture started
** (wireshark:6916) 10:00:34.306600 [Capture MESSAGE] -- File: "C:\Users\ADMINI~1\AppData\Local\Temp\wireshark_-Z4X6R1.pcapng"
** (wireshark:6916) 10:00:34.362346 [Capture MESSAGE] -- Error message from child: "Frame 4 too long (5242886 bytes)", ""
** (wireshark:6916) 10:00:36.194070 [Capture MESSAGE] -- Capture stopped.

转发tcpdump到Wireshark
输入命令提示报错