Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[feature] 在不开启SSL解密的情况下解出域名 #611

Open
SeeFlowerX opened this issue Apr 25, 2024 · 1 comment
Open

[feature] 在不开启SSL解密的情况下解出域名 #611

SeeFlowerX opened this issue Apr 25, 2024 · 1 comment
Assignees
Labels
enhancement New feature or request p1 Priority first

Comments

@SeeFlowerX
Copy link

在Charles中有这样一个功能,那就是block list,可以通过域名阻断请求

但根据reqable文档所描述,在没有开启SSL解密时,不会处理任何https的数据,这样一来那些https的请求都会显示为ip+443的样子

但是在Charles中,这些请求会有域名的信息,于是可以通过域名快捷方便的去做阻断

写到这里才发现reqable也暂时没有阻断功能...

不过更重要的是,解出域名信息,肯定是更加直观的。

希望可以增加不开启SSL解密的情况下解出域名这个特效

@SeeFlowerX SeeFlowerX added the enhancement New feature or request label Apr 25, 2024
@SeeFlowerX
Copy link
Author

更详细使用之后,发现是这样的:

必须安装证书到电脑的系统上,SSL解密的功能才会正常生效,但是如果是只对移动端转发来的数据抓包,实际上是不需要这一步的?因为Charles没有要求证书一定要到电脑上,只要手机安装了,也是能正常解的

不知道有没有办法不安装证书到电脑上仍然可以开启SSL解密功能,提供一个这样的设置


另外还是主贴提到的那个,尝试把域名解出来

虽然安装了证书到电脑之后,SSL解密是会把域名解出来,但是一旦把域名加入了SSL旁路,后面又显示成ip+443了

@MegatronKing MegatronKing added the p1 Priority first label Apr 25, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request p1 Priority first
Projects
None yet
Development

No branches or pull requests

2 participants