Nothing in the proxy besides no error shown

[tssasturias]

Hi fellas!

I need some help....

I have no clue what is happening, because there is no error shown anywhere....

I'd configured the proxy and certificate settings in config.js, after that I launched frida with the default options for Android and everything seems to work properly.... except for the fact that nothing from the app is shown in the proxy:

(venv) ➜  frida-interception-and-unpinning git:(main) ✗ frida -U \
    -l ./config.js \
    -l ./native-connect-hook.js \
    -l ./native-tls-hook.js \
    -l ./android/android-proxy-override.js \
    -l ./android/android-system-certificate-injection.js \
    -l ./android/android-certificate-unpinning.js \
    -l ./android/android-certificate-unpinning-fallback.js \
    -l ./android/android-disable-root-detection.js \
    -f com.myflutter.app
     ____
    / _  |   Frida 17.9.10 - A world-class dynamic instrumentation toolkit
   | (_| |
    > _  |   Commands:
   /_/ |_|       help      -> Displays the help system
   . . . .       object?   -> Display information about 'object'
   . . . .       exit/quit -> Exit
   . . . .
   . . . .   More info at https://frida.re/docs/home/
   . . . .
   . . . .   Connected to Android Emulator 5554 (id=emulator-5554)
Spawning `com.myflutter.app`...

== Redirecting all TCP connections to 192.168.3.19:8083 ==
== Hooked native TLS lib libssl.so ==
== Disabled Android root detection ==
Spawned `com.myflutter.app`. Resuming main thread!
[Android Emulator 5554::com.myflutter.app ]-> == Proxy system configuration overridden to 192.168.3.19:8083 ==
== Proxy configuration overridden to 192.168.3.19:8083 ==
== System certificate trust injected ==
== Certificate unpinning completed ==
== Unpinning fallback auto-patcher installed ==
Manually intercepting tcp connection to 172.217.171.35:443
Manually intercepting tcp6 connection to [2a:0:14:50:40:3:8:16:0:0:0:0:0:0:20:3]:443
Manually intercepting tcp6 connection to [2a:0:14:50:40:3:8:16:0:0:0:0:0:0:20:3]:443
Manually intercepting tcp6 connection to [2a:0:14:50:40:3:8:16:0:0:0:0:0:0:20:3]:443
Manually intercepting tcp connection to 172.217.171.35:443
Manually intercepting tcp connection to 172.217.171.35:443
Manually intercepting tcp connection to 192.168.3.254:443
Process terminated
[Android Emulator 5554::com.myflutter.app ]->

Is there any way to redirect that Manually intercepted traffic somewhere?

[pimterry]

I'm guessing from com.myflutter.app that this is a Flutter app? In most cases this won't work - Flutter doesn't use lots of the native APIs that are intercepted by these scripts. There is an experimental script exploring this in android-disable-flutter-certificate-pinning.js but in many cases it won't work yet I think.

You may have more success with more general system certificate configuration setups (e.g. the automatic ADB setup in HTTP Toolkit) if Flutter uses the system certificate settings directly. If Flutter is using custom certificate pinning though then I'm afraid you'll need to reverse engineer & disable that manually.