Search code examples
iosipadpenetration-testingburp

Issue in Intercepting Burpsuite requests from iPad


I am testing an application from iPad and using Burpsuite to capture the traffic. But, in that case, I was not able to capture the following requests for that application:

  1. Login Request
  2. Two Factor Authentication Request
  3. Video Search Request in application
  4. Video Play request in application

How can I capture above mentioned requests ?

(NOTE: I was able to capture some simple GET and POST requests of that application.)


Solution

  • Have you installed the Burp Certificate? If not, use these instructions.

    If you have, it's likely that this application uses certificate pinning. There are some tools that can disable certificate pinning, including Burp Mobile Assistant. You need a jailbroken device running iOS 8 or 9. Be aware that Mobile Assistant cannot always disable pinning.