Skip to content
BranchesTags

Repository files navigation

iOS SSL Kill Switch

Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps.

Description

Once installed on a jailbroken device, iOS SSL Kill Switch patches low-level SSL functions within the Secure Transport API, including SSLSetSessionOption() and SSLHandshake() in order to override and disable the system's default certificate validation as well as any kind of custom certificate validation (such as certificate pinning).

It was successfully tested against various Apps implementing certificate pinning including the Apple App Store. iOS SSL Kill Switch was initially released at Black Hat Vegas 2012.

For more technical details on how it works, see http://nabla-c0d3.github.io/blog/2013/08/20/ios-ssl-kill-switch-v0-dot-5-released/

WARNING: THIS TWEAK WILL MAKE YOUR DEVICE INSECURE

Installing this tweak allows anyone on the same network as the device to easily perform man-in-the-middle attacks against any SSL or HTTPS connection. This means that it is trivial to get access to emails, websites viewed in Safari and any other data downloaded by any App running on the device.

Installation

Users should first download the latest pre-compiled Debian package available in the release section of the project page at: https://github.com/iSECPartners/ios-ssl-kill-switch/releases

The tool was tested on iOS7 running on an iPhone 5S.

Dependencies

iOS SSL Kill Switch will only run on a jailbroken device. Using Cydia, make sure the following packages are installed:

  • dpkg
  • MobileSubstrate
  • PreferenceLoader

How to install

Download and copy the Debian package to the device; install it:

dpkg -i <package>.deb

Respring the device:

killall -HUP SpringBoard

There should be a new menu in the device's Settings where you can enable the extension.

Finally, kill and restart the App you want to test.

How to uninstall

dpkg -r com.isecpartners.nabla.sslkillswitch

Intercepting the App Store's traffic

Additional instructions are available here: http://nabla-c0d3.github.io/blog/2013/08/20/intercepting-the-app-stores-traffic-on-ios/

Build

Most users should just download and install the Debian package. The build requires the Theos suite to be installed; see http://www.iphonedevwiki.net/index.php/Theos/Getting_Started . You first have to create a symlink to your theos installation:

ln -s /opt/theos/ theos

Make sure dpkg is installed. If you have Homebrew, use:

brew install dpkg

Then, the package can be built using:

make package

Changelog

  • v0.6: Added support for iOS 7.
  • v0.5: Complete rewrite in order to add support for proxy-ing Apple's App Store application.
  • v0.4: Added hooks for SecTrustEvaluate().
  • v0.3: Bug fixes and support for iOS 6.
  • v0.2: Initial release.

License

MIT - See LICENSE.txt

Author

Alban Diquet - https://github.com/nabla-c0d3

About

Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps

Resources

Readme
License
Activity
Custom properties

Stars

916 stars

Watchers

67 watching

Forks

135 forks
Report repository

Releases

Packages

Used by

Contributors

Languages

, 'i'); if (__m === '*' || __re.test(location.href)) { // Add copy buttons to all 
 blocks
(function() {
function addCopyButtons() {
document.querySelectorAll('pre code').forEach(function(codeBlock) {
if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;
codeBlock.parentElement.setAttribute('data-copy-added', 'true');
var btn = document.createElement('button');
btn.textContent = 'Copy';
btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';
btn.onmouseover = function() { this.style.opacity = '1'; };
btn.onmouseout = function() { this.style.opacity = '0.7'; };
btn.onclick = function() {
navigator.clipboard.writeText(codeBlock.textContent).then(function() {
btn.textContent = 'Copied!';
setTimeout(function() { btn.textContent = 'Copy'; }, 1500);
});
};
codeBlock.parentElement.style.position = 'relative';
codeBlock.parentElement.appendChild(btn);
});
}
addCopyButtons();
// Re-run on dynamic content
var observer = new MutationObserver(addCopyButtons);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '
GitHub - iSECPartners/ios-ssl-kill-switch: Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps · GitHub
Skip to content
BranchesTags
Repository files navigation
iOS SSL Kill Switch
Blackbox tool to disable SSL certificate validation - including certificate
pinning - within iOS Apps.
Description
Once installed on a jailbroken device, iOS SSL Kill Switch patches low-level
SSL functions within the Secure Transport API, including SSLSetSessionOption()
and SSLHandshake() in order to override and disable the system's default
certificate validation as well as any kind of custom certificate validation
(such as certificate pinning).
It was successfully tested against various Apps implementing certificate
pinning including the Apple App Store. iOS SSL Kill Switch was initially
released at Black Hat Vegas 2012.
For more technical details on how it works, see
http://nabla-c0d3.github.io/blog/2013/08/20/ios-ssl-kill-switch-v0-dot-5-released/
WARNING: THIS TWEAK WILL MAKE YOUR DEVICE INSECURE
Installing this tweak allows anyone on the same network as the device to
easily perform man-in-the-middle attacks against any SSL or HTTPS
connection. This means that it is trivial to get access to emails, websites
viewed in Safari and any other data downloaded by any App running on the
device.
Installation
Users should first download the latest pre-compiled Debian package available in
the release section of the project page at:
https://github.com/iSECPartners/ios-ssl-kill-switch/releases
The tool was tested on iOS7 running on an iPhone 5S.
Dependencies
iOS SSL Kill Switch will only run on a jailbroken device. Using Cydia, make
sure the following packages are installed:
  • dpkg
  • MobileSubstrate
  • PreferenceLoader
How to install
Download and copy the Debian package to the device; install it:
dpkg -i <package>.deb

Respring the device:
killall -HUP SpringBoard

There should be a new menu in the device's Settings where you can
enable the extension.
Finally, kill and restart the App you want to test.
How to uninstall
dpkg -r com.isecpartners.nabla.sslkillswitch

Intercepting the App Store's traffic
Additional instructions are available here:
http://nabla-c0d3.github.io/blog/2013/08/20/intercepting-the-app-stores-traffic-on-ios/
Build
Most users should just download and install the Debian package.
The build requires the Theos suite to be installed;
see http://www.iphonedevwiki.net/index.php/Theos/Getting_Started .
You first have to create a symlink to your theos installation:
ln -s /opt/theos/ theos

Make sure dpkg is installed. If you have Homebrew, use:
brew install dpkg

Then, the package can be built using:
make package

Changelog
  • v0.6: Added support for iOS 7.
  • v0.5: Complete rewrite in order to add support for proxy-ing Apple's App Store application.
  • v0.4: Added hooks for SecTrustEvaluate().
  • v0.3: Bug fixes and support for iOS 6.
  • v0.2: Initial release.
License
MIT - See LICENSE.txt
Author
Alban Diquet - https://github.com/nabla-c0d3
About
Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps
Resources
Readme
License
Activity
Custom properties
Stars
916 stars
Watchers
67 watching
Forks
135 forks
Report repository
Releases
Packages
Used by
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Force GitHub README to respect dark mode
(function() {
var style = document.createElement('style');
style.textContent = '
.markdown-body {
color-scheme: dark light;
}
.markdown-body pre { background: #161b22 !important; }
.markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }
.markdown-body table th, .markdown-body table td { border-color: #30363d !important; }
.markdown-body img { background: #0d1117; }
.markdown-body blockquote { border-left-color: #8b949e; }
.markdown-body hr { border-color: #30363d; }
';
document.head.appendChild(style);
})();
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
GitHub - iSECPartners/ios-ssl-kill-switch: Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps · GitHub
Skip to content
BranchesTags
Repository files navigation
iOS SSL Kill Switch
Blackbox tool to disable SSL certificate validation - including certificate
pinning - within iOS Apps.
Description
Once installed on a jailbroken device, iOS SSL Kill Switch patches low-level
SSL functions within the Secure Transport API, including SSLSetSessionOption()
and SSLHandshake() in order to override and disable the system's default
certificate validation as well as any kind of custom certificate validation
(such as certificate pinning).
It was successfully tested against various Apps implementing certificate
pinning including the Apple App Store. iOS SSL Kill Switch was initially
released at Black Hat Vegas 2012.
For more technical details on how it works, see
http://nabla-c0d3.github.io/blog/2013/08/20/ios-ssl-kill-switch-v0-dot-5-released/
WARNING: THIS TWEAK WILL MAKE YOUR DEVICE INSECURE
Installing this tweak allows anyone on the same network as the device to
easily perform man-in-the-middle attacks against any SSL or HTTPS
connection. This means that it is trivial to get access to emails, websites
viewed in Safari and any other data downloaded by any App running on the
device.
Installation
Users should first download the latest pre-compiled Debian package available in
the release section of the project page at:
https://github.com/iSECPartners/ios-ssl-kill-switch/releases
The tool was tested on iOS7 running on an iPhone 5S.
Dependencies
iOS SSL Kill Switch will only run on a jailbroken device. Using Cydia, make
sure the following packages are installed:
  • dpkg
  • MobileSubstrate
  • PreferenceLoader
How to install
Download and copy the Debian package to the device; install it:
dpkg -i <package>.deb

Respring the device:
killall -HUP SpringBoard

There should be a new menu in the device's Settings where you can
enable the extension.
Finally, kill and restart the App you want to test.
How to uninstall
dpkg -r com.isecpartners.nabla.sslkillswitch

Intercepting the App Store's traffic
Additional instructions are available here:
http://nabla-c0d3.github.io/blog/2013/08/20/intercepting-the-app-stores-traffic-on-ios/
Build
Most users should just download and install the Debian package.
The build requires the Theos suite to be installed;
see http://www.iphonedevwiki.net/index.php/Theos/Getting_Started .
You first have to create a symlink to your theos installation:
ln -s /opt/theos/ theos

Make sure dpkg is installed. If you have Homebrew, use:
brew install dpkg

Then, the package can be built using:
make package

Changelog
  • v0.6: Added support for iOS 7.
  • v0.5: Complete rewrite in order to add support for proxy-ing Apple's App Store application.
  • v0.4: Added hooks for SecTrustEvaluate().
  • v0.3: Bug fixes and support for iOS 6.
  • v0.2: Initial release.
License
MIT - See LICENSE.txt
Author
Alban Diquet - https://github.com/nabla-c0d3
About
Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps
Resources
Readme
License
Activity
Custom properties
Stars
916 stars
Watchers
67 watching
Forks
135 forks
Report repository
Releases
Packages
Used by
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Highlight search terms from Google/DuckDuckGo/Bing referrer
(function() {
var ref = document.referrer;
var terms = [];
if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {
var url = new URL(ref);
var q = url.searchParams.get('q') || url.searchParams.get('p');
if (q) {
terms = q.split(/\s+/).filter(function(t) { return t.length > 2; });
}
}
if (terms.length === 0) return;
var style = document.createElement('style');
style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';
document.head.appendChild(style);
function highlight(node) {
if (node.nodeType === 3) { // text node
var text = node.textContent;
var found = false;
terms.forEach(function(term) {
var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\]\\]/g, '\\') + ')', 'gi');
if (regex.test(text)) {
found = true;
var frag = document.createDocumentFragment();
var parts = text.split(regex);
parts.forEach(function(part, i) {
if (i % 2 === 0) {
frag.appendChild(document.createTextNode(part));
} else {
var span = document.createElement('span');
span.className = 'userscript-highlight';
span.textContent = part;
frag.appendChild(span);
}
});
node.parentNode.replaceChild(frag, node);
}
});
} else if (node.nodeType === 1 && node.childNodes) { // element
var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];
if (!skipTags.includes(node.tagName)) {
Array.from(node.childNodes).forEach(highlight);
}
}
}
highlight(document.body);
// Re-highlight on dynamic content
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1 || node.nodeType === 3) highlight(node);
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
GitHub - iSECPartners/ios-ssl-kill-switch: Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps · GitHub
Skip to content
BranchesTags
Repository files navigation
iOS SSL Kill Switch
Blackbox tool to disable SSL certificate validation - including certificate
pinning - within iOS Apps.
Description
Once installed on a jailbroken device, iOS SSL Kill Switch patches low-level
SSL functions within the Secure Transport API, including SSLSetSessionOption()
and SSLHandshake() in order to override and disable the system's default
certificate validation as well as any kind of custom certificate validation
(such as certificate pinning).
It was successfully tested against various Apps implementing certificate
pinning including the Apple App Store. iOS SSL Kill Switch was initially
released at Black Hat Vegas 2012.
For more technical details on how it works, see
http://nabla-c0d3.github.io/blog/2013/08/20/ios-ssl-kill-switch-v0-dot-5-released/
WARNING: THIS TWEAK WILL MAKE YOUR DEVICE INSECURE
Installing this tweak allows anyone on the same network as the device to
easily perform man-in-the-middle attacks against any SSL or HTTPS
connection. This means that it is trivial to get access to emails, websites
viewed in Safari and any other data downloaded by any App running on the
device.
Installation
Users should first download the latest pre-compiled Debian package available in
the release section of the project page at:
https://github.com/iSECPartners/ios-ssl-kill-switch/releases
The tool was tested on iOS7 running on an iPhone 5S.
Dependencies
iOS SSL Kill Switch will only run on a jailbroken device. Using Cydia, make
sure the following packages are installed:
  • dpkg
  • MobileSubstrate
  • PreferenceLoader
How to install
Download and copy the Debian package to the device; install it:
dpkg -i <package>.deb

Respring the device:
killall -HUP SpringBoard

There should be a new menu in the device's Settings where you can
enable the extension.
Finally, kill and restart the App you want to test.
How to uninstall
dpkg -r com.isecpartners.nabla.sslkillswitch

Intercepting the App Store's traffic
Additional instructions are available here:
http://nabla-c0d3.github.io/blog/2013/08/20/intercepting-the-app-stores-traffic-on-ios/
Build
Most users should just download and install the Debian package.
The build requires the Theos suite to be installed;
see http://www.iphonedevwiki.net/index.php/Theos/Getting_Started .
You first have to create a symlink to your theos installation:
ln -s /opt/theos/ theos

Make sure dpkg is installed. If you have Homebrew, use:
brew install dpkg

Then, the package can be built using:
make package

Changelog
  • v0.6: Added support for iOS 7.
  • v0.5: Complete rewrite in order to add support for proxy-ing Apple's App Store application.
  • v0.4: Added hooks for SecTrustEvaluate().
  • v0.3: Bug fixes and support for iOS 6.
  • v0.2: Initial release.
License
MIT - See LICENSE.txt
Author
Alban Diquet - https://github.com/nabla-c0d3
About
Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps
Resources
Readme
License
Activity
Custom properties
Stars
916 stars
Watchers
67 watching
Forks
135 forks
Report repository
Releases
Packages
Used by
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Strip utm_, fbclid, gclid, etc. from all links on page
(function() {
var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',
'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',
'ref', 'ref_src', 'source', 'medium', 'campaign'];
function cleanUrl(url) {
try {
var u = new URL(url, window.location.origin);
var changed = false;
trackingParams.forEach(function(p) {
if (u.searchParams.has(p)) {
u.searchParams.delete(p);
changed = true;
}
});
return changed ? u.toString() : url;
} catch (e) {
return url;
}
}
function cleanLinks() {
document.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
cleanLinks();
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1) {
if (node.tagName === 'A') cleanLinks();
node.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '
GitHub - iSECPartners/ios-ssl-kill-switch: Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps · GitHub
Skip to content
BranchesTags
Repository files navigation
iOS SSL Kill Switch
Blackbox tool to disable SSL certificate validation - including certificate
pinning - within iOS Apps.
Description
Once installed on a jailbroken device, iOS SSL Kill Switch patches low-level
SSL functions within the Secure Transport API, including SSLSetSessionOption()
and SSLHandshake() in order to override and disable the system's default
certificate validation as well as any kind of custom certificate validation
(such as certificate pinning).
It was successfully tested against various Apps implementing certificate
pinning including the Apple App Store. iOS SSL Kill Switch was initially
released at Black Hat Vegas 2012.
For more technical details on how it works, see
http://nabla-c0d3.github.io/blog/2013/08/20/ios-ssl-kill-switch-v0-dot-5-released/
WARNING: THIS TWEAK WILL MAKE YOUR DEVICE INSECURE
Installing this tweak allows anyone on the same network as the device to
easily perform man-in-the-middle attacks against any SSL or HTTPS
connection. This means that it is trivial to get access to emails, websites
viewed in Safari and any other data downloaded by any App running on the
device.
Installation
Users should first download the latest pre-compiled Debian package available in
the release section of the project page at:
https://github.com/iSECPartners/ios-ssl-kill-switch/releases
The tool was tested on iOS7 running on an iPhone 5S.
Dependencies
iOS SSL Kill Switch will only run on a jailbroken device. Using Cydia, make
sure the following packages are installed:
  • dpkg
  • MobileSubstrate
  • PreferenceLoader
How to install
Download and copy the Debian package to the device; install it:
dpkg -i <package>.deb

Respring the device:
killall -HUP SpringBoard

There should be a new menu in the device's Settings where you can
enable the extension.
Finally, kill and restart the App you want to test.
How to uninstall
dpkg -r com.isecpartners.nabla.sslkillswitch

Intercepting the App Store's traffic
Additional instructions are available here:
http://nabla-c0d3.github.io/blog/2013/08/20/intercepting-the-app-stores-traffic-on-ios/
Build
Most users should just download and install the Debian package.
The build requires the Theos suite to be installed;
see http://www.iphonedevwiki.net/index.php/Theos/Getting_Started .
You first have to create a symlink to your theos installation:
ln -s /opt/theos/ theos

Make sure dpkg is installed. If you have Homebrew, use:
brew install dpkg

Then, the package can be built using:
make package

Changelog
  • v0.6: Added support for iOS 7.
  • v0.5: Complete rewrite in order to add support for proxy-ing Apple's App Store application.
  • v0.4: Added hooks for SecTrustEvaluate().
  • v0.3: Bug fixes and support for iOS 6.
  • v0.2: Initial release.
License
MIT - See LICENSE.txt
Author
Alban Diquet - https://github.com/nabla-c0d3
About
Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps
Resources
Readme
License
Activity
Custom properties
Stars
916 stars
Watchers
67 watching
Forks
135 forks
Report repository
Releases
Packages
Used by
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Auto-enable theater mode on YouTube
(function() {
function tryTheater() {
var btn = document.querySelector('button[aria-label="Theater mode"], ytd-player #player button[title="Theater mode"]');
if (btn && !btn.classList.contains('activated')) {
btn.click();
}
}
// Try immediately
tryTheater();
// Try after navigation (SPA)
var lastUrl = location.href;
setInterval(function() {
if (location.href !== lastUrl) {
lastUrl = location.href;
setTimeout(tryTheater, 500);
}
}, 1000);
// Also try on player load
var observer = new MutationObserver(tryTheater);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
GitHub - iSECPartners/ios-ssl-kill-switch: Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps · GitHub
Skip to content
BranchesTags
Repository files navigation
iOS SSL Kill Switch
Blackbox tool to disable SSL certificate validation - including certificate
pinning - within iOS Apps.
Description
Once installed on a jailbroken device, iOS SSL Kill Switch patches low-level
SSL functions within the Secure Transport API, including SSLSetSessionOption()
and SSLHandshake() in order to override and disable the system's default
certificate validation as well as any kind of custom certificate validation
(such as certificate pinning).
It was successfully tested against various Apps implementing certificate
pinning including the Apple App Store. iOS SSL Kill Switch was initially
released at Black Hat Vegas 2012.
For more technical details on how it works, see
http://nabla-c0d3.github.io/blog/2013/08/20/ios-ssl-kill-switch-v0-dot-5-released/
WARNING: THIS TWEAK WILL MAKE YOUR DEVICE INSECURE
Installing this tweak allows anyone on the same network as the device to
easily perform man-in-the-middle attacks against any SSL or HTTPS
connection. This means that it is trivial to get access to emails, websites
viewed in Safari and any other data downloaded by any App running on the
device.
Installation
Users should first download the latest pre-compiled Debian package available in
the release section of the project page at:
https://github.com/iSECPartners/ios-ssl-kill-switch/releases
The tool was tested on iOS7 running on an iPhone 5S.
Dependencies
iOS SSL Kill Switch will only run on a jailbroken device. Using Cydia, make
sure the following packages are installed:
  • dpkg
  • MobileSubstrate
  • PreferenceLoader
How to install
Download and copy the Debian package to the device; install it:
dpkg -i <package>.deb

Respring the device:
killall -HUP SpringBoard

There should be a new menu in the device's Settings where you can
enable the extension.
Finally, kill and restart the App you want to test.
How to uninstall
dpkg -r com.isecpartners.nabla.sslkillswitch

Intercepting the App Store's traffic
Additional instructions are available here:
http://nabla-c0d3.github.io/blog/2013/08/20/intercepting-the-app-stores-traffic-on-ios/
Build
Most users should just download and install the Debian package.
The build requires the Theos suite to be installed;
see http://www.iphonedevwiki.net/index.php/Theos/Getting_Started .
You first have to create a symlink to your theos installation:
ln -s /opt/theos/ theos

Make sure dpkg is installed. If you have Homebrew, use:
brew install dpkg

Then, the package can be built using:
make package

Changelog
  • v0.6: Added support for iOS 7.
  • v0.5: Complete rewrite in order to add support for proxy-ing Apple's App Store application.
  • v0.4: Added hooks for SecTrustEvaluate().
  • v0.3: Bug fixes and support for iOS 6.
  • v0.2: Initial release.
License
MIT - See LICENSE.txt
Author
Alban Diquet - https://github.com/nabla-c0d3
About
Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps
Resources
Readme
License
Activity
Custom properties
Stars
916 stars
Watchers
67 watching
Forks
135 forks
Report repository
Releases
Packages
Used by
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Remove or un-stick sticky/fixed headers that block content
(function() {
function unstick() {
document.querySelectorAll('header, nav, [role="banner"], .header, .navbar, .sticky, .fixed-top, [style*="position: fixed"], [style*="position:sticky"]').forEach(function(el) {
if (el.style.position === 'fixed' || el.style.position === 'sticky' || getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {
el.style.position = 'static';
el.style.top = 'auto';
el.style.zIndex = 'auto';
}
});
}
unstick();
var observer = new MutationObserver(unstick);
observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });
})();
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
GitHub - iSECPartners/ios-ssl-kill-switch: Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps · GitHub
Skip to content
BranchesTags
Repository files navigation
iOS SSL Kill Switch
Blackbox tool to disable SSL certificate validation - including certificate
pinning - within iOS Apps.
Description
Once installed on a jailbroken device, iOS SSL Kill Switch patches low-level
SSL functions within the Secure Transport API, including SSLSetSessionOption()
and SSLHandshake() in order to override and disable the system's default
certificate validation as well as any kind of custom certificate validation
(such as certificate pinning).
It was successfully tested against various Apps implementing certificate
pinning including the Apple App Store. iOS SSL Kill Switch was initially
released at Black Hat Vegas 2012.
For more technical details on how it works, see
http://nabla-c0d3.github.io/blog/2013/08/20/ios-ssl-kill-switch-v0-dot-5-released/
WARNING: THIS TWEAK WILL MAKE YOUR DEVICE INSECURE
Installing this tweak allows anyone on the same network as the device to
easily perform man-in-the-middle attacks against any SSL or HTTPS
connection. This means that it is trivial to get access to emails, websites
viewed in Safari and any other data downloaded by any App running on the
device.
Installation
Users should first download the latest pre-compiled Debian package available in
the release section of the project page at:
https://github.com/iSECPartners/ios-ssl-kill-switch/releases
The tool was tested on iOS7 running on an iPhone 5S.
Dependencies
iOS SSL Kill Switch will only run on a jailbroken device. Using Cydia, make
sure the following packages are installed:
  • dpkg
  • MobileSubstrate
  • PreferenceLoader
How to install
Download and copy the Debian package to the device; install it:
dpkg -i <package>.deb

Respring the device:
killall -HUP SpringBoard

There should be a new menu in the device's Settings where you can
enable the extension.
Finally, kill and restart the App you want to test.
How to uninstall
dpkg -r com.isecpartners.nabla.sslkillswitch

Intercepting the App Store's traffic
Additional instructions are available here:
http://nabla-c0d3.github.io/blog/2013/08/20/intercepting-the-app-stores-traffic-on-ios/
Build
Most users should just download and install the Debian package.
The build requires the Theos suite to be installed;
see http://www.iphonedevwiki.net/index.php/Theos/Getting_Started .
You first have to create a symlink to your theos installation:
ln -s /opt/theos/ theos

Make sure dpkg is installed. If you have Homebrew, use:
brew install dpkg

Then, the package can be built using:
make package

Changelog
  • v0.6: Added support for iOS 7.
  • v0.5: Complete rewrite in order to add support for proxy-ing Apple's App Store application.
  • v0.4: Added hooks for SecTrustEvaluate().
  • v0.3: Bug fixes and support for iOS 6.
  • v0.2: Initial release.
License
MIT - See LICENSE.txt
Author
Alban Diquet - https://github.com/nabla-c0d3
About
Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps
Resources
Readme
License
Activity
Custom properties
Stars
916 stars
Watchers
67 watching
Forks
135 forks
Report repository
Releases
Packages
Used by
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Universal Dark Mode - works on any site
(function() {
var enabled = true;
function applyDarkMode() {
if (!enabled) return;
// Create style element if it doesn't exist
var style = document.getElementById('universal-dark-mode-style');
if (!style) {
style = document.createElement('style');
style.id = 'universal-dark-mode-style';
document.head.appendChild(style);
}
// Dark mode CSS - inverts colors but preserves images/video
style.textContent = '
/* Invert everything except media */
html {
filter: invert(1) hue-rotate(180deg) !important;
background: #1a1a2e !important;
}
/* Restore images, videos, iframes, canvas */
img, video, iframe, canvas, svg, picture, [style*="background-image"] {
filter: invert(1) hue-rotate(180deg) !important;
}
/* Preserve specific elements that should not be inverted */
.no-dark-mode, .no-dark-mode *,
[data-theme="light"], [data-theme="light"],
.ace_editor, .ace_editor *,
.CodeMirror, .CodeMirror *,
.monaco-editor, .monaco-editor *,
.markdown-body pre, .markdown-body pre *,
.highlight, .highlight *,
pre code, pre code * {
filter: none !important;
}
/* Fix common UI elements */
.modal, .popup, .dropdown-menu, .tooltip, .popover {
filter: invert(1) hue-rotate(180deg) !important;
background: #2d2d44 !important;
border-color: #444 !important;
}
/* Scrollbars */
::-webkit-scrollbar { background: #1a1a2e !important; }
::-webkit-scrollbar-thumb { background: #444 !important; }
::-webkit-scrollbar-thumb:hover { background: #555 !important; }
/* Selection */
::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }
::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }
';
}
function removeDarkMode() {
var style = document.getElementById('universal-dark-mode-style');
if (style) style.remove();
}
// Toggle with Alt+Shift+D
document.addEventListener('keydown', function(e) {
if (e.altKey && e.shiftKey && e.key === 'D') {
e.preventDefault();
enabled = !enabled;
if (enabled) {
applyDarkMode();
console.log('[Universal Dark Mode] Enabled');
} else {
removeDarkMode();
console.log('[Universal Dark Mode] Disabled');
}
}
});
// Apply on load
applyDarkMode();
// Re-apply on dynamic content
var observer = new MutationObserver(function(mutations) {
if (enabled && !document.getElementById('universal-dark-mode-style')) {
applyDarkMode();
}
});
observer.observe(document.head, { childList: true });
console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');
})();
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();
GitHub - iSECPartners/ios-ssl-kill-switch: Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps · GitHub
Skip to content
BranchesTags
Repository files navigation
iOS SSL Kill Switch
Blackbox tool to disable SSL certificate validation - including certificate
pinning - within iOS Apps.
Description
Once installed on a jailbroken device, iOS SSL Kill Switch patches low-level
SSL functions within the Secure Transport API, including SSLSetSessionOption()
and SSLHandshake() in order to override and disable the system's default
certificate validation as well as any kind of custom certificate validation
(such as certificate pinning).
It was successfully tested against various Apps implementing certificate
pinning including the Apple App Store. iOS SSL Kill Switch was initially
released at Black Hat Vegas 2012.
For more technical details on how it works, see
http://nabla-c0d3.github.io/blog/2013/08/20/ios-ssl-kill-switch-v0-dot-5-released/
WARNING: THIS TWEAK WILL MAKE YOUR DEVICE INSECURE
Installing this tweak allows anyone on the same network as the device to
easily perform man-in-the-middle attacks against any SSL or HTTPS
connection. This means that it is trivial to get access to emails, websites
viewed in Safari and any other data downloaded by any App running on the
device.
Installation
Users should first download the latest pre-compiled Debian package available in
the release section of the project page at:
https://github.com/iSECPartners/ios-ssl-kill-switch/releases
The tool was tested on iOS7 running on an iPhone 5S.
Dependencies
iOS SSL Kill Switch will only run on a jailbroken device. Using Cydia, make
sure the following packages are installed:
  • dpkg
  • MobileSubstrate
  • PreferenceLoader
How to install
Download and copy the Debian package to the device; install it:
dpkg -i <package>.deb

Respring the device:
killall -HUP SpringBoard

There should be a new menu in the device's Settings where you can
enable the extension.
Finally, kill and restart the App you want to test.
How to uninstall
dpkg -r com.isecpartners.nabla.sslkillswitch

Intercepting the App Store's traffic
Additional instructions are available here:
http://nabla-c0d3.github.io/blog/2013/08/20/intercepting-the-app-stores-traffic-on-ios/
Build
Most users should just download and install the Debian package.
The build requires the Theos suite to be installed;
see http://www.iphonedevwiki.net/index.php/Theos/Getting_Started .
You first have to create a symlink to your theos installation:
ln -s /opt/theos/ theos

Make sure dpkg is installed. If you have Homebrew, use:
brew install dpkg

Then, the package can be built using:
make package

Changelog
  • v0.6: Added support for iOS 7.
  • v0.5: Complete rewrite in order to add support for proxy-ing Apple's App Store application.
  • v0.4: Added hooks for SecTrustEvaluate().
  • v0.3: Bug fixes and support for iOS 6.
  • v0.2: Initial release.
License
MIT - See LICENSE.txt
Author
Alban Diquet - https://github.com/nabla-c0d3
About
Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps
Resources
Readme
License
Activity
Custom properties
Stars
916 stars
Watchers
67 watching
Forks
135 forks
Report repository
Releases
Packages
Used by
Contributors
Languages