League of Legends Data with -p true is Encrypted? about netripper HOT 8 CLOSED

Probably the data is encrypted. It might use a custom library for encryption, I have to check, but this will not happen too soon, sorry.

from netripper.

Is there a way to find the function it checks if the certificate is valid and instead just override it and return true always? Which would allow me to sniff using Fiddler with a DO_NOT_TRUST Cert

from netripper.

I am not sure about a fully implemented project, maybe Interceptor by Casey Smith. It depends how each application is validating the certificate. Most of the time, the application does not use "SSL Pinning" and it is enough to just install your own root CA.

from netripper.

The Interceptor you mentioned seems to essentially be fiddler. Just I dont have a way to force a CA cert on LoL.

from netripper.

The Root CA (for any intercepting tool) has to be installed in the operating system Root CA Store. This way, the application (LoL) will probably use it and consider the certificate valid.

from netripper.

The Certificate Fiddler provides is a .cer file. This can be used correct?

from netripper.

This should be: https://docs.telerik.com/platform/knowledge-base/how-to/how-to-trust-fiddler-root-certificate

from netripper.

Doesnt seem to work.

from netripper.