Automated platform for mobile app traffic interception with Frida
Keywords:
penetration tests, interceptions, Android, SSL pinning, dynamic instrumentationAbstract
This paper introduces a unified tool that combines several manual and automated techniques to optimize the web traffic interception process in mobile applications. Although existing solutions allow for web traffic capture, many have limitations in terms of coverage and adaptability to different scenarios. The proposed tool expands these capabilities by integrating Frida and Objection, two technologies that facilitate the dynamic manipulation of objects and methods during application runtime, thus offering a more flexible and comprehensive approach to mobile traffic analysis.
Downloads
Published
Issue
Section
License
Copyright (c) 2025 Fabián A. Gibellini, Leonardo R. Ciceri, Juliana M. Notreni, Germán N. Parisi, Analía L. Ruhl, Ninfa M. Zea Cardenas, Marcelo J. Auquer, Ileana M. Barrionuevo, Federico Bertola, Sergio R. Quinteros, Ignacio J. Sanchez Balzaretti
This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.
Acorde a estos términos, el material se puede compartir (copiar y redistribuir en cualquier medio o formato) y adaptar (remezclar, transformar y crear a partir del material otra obra), siempre que a) se cite la autoría y la fuente original de su publicación (revista y URL de la obra), b) no se use para fines comerciales y c) se mantengan los mismos términos de la licencia.
