saleemrashid/frida-sslkeylog

Frida tool to dump an NSS Key Log for Wireshark, from a process using dynamically linked OpenSSL (or BoringSSL)

frida-sslkeylog's Issues

Failed to attach: remote_exec PTRACE_CONT wait failed: 0

Need to update requirements

Occasional pyasn1.error.SubstrateUnderrunError

The script is able to retrieve some keylog.
But sometimes pyasn1.error.SubstrateUnderrunError is thrown:

Exception in thread Thread-1:
Traceback (most recent call last):
  File "D:\Python\Python38-32\lib\threading.py", line 932, in _bootstrap_inner
    self.run()
  File "D:\Python\Python38-32\lib\threading.py", line 870, in run
    self._target(*self._args, **self._kwargs)
  File "D:\Python\Python38-32\lib\site-packages\frida_tools\application.py", line 604, in _run
    work()
  File "frida-sslkeylog-master/sslkeylog", line 37, in <lambda>
    self._reactor.schedule(lambda: self._on_message(message, data))
  File "frida-sslkeylog-master/sslkeylog", line 51, in _on_message
    self._on_session(data)
  File "frida-sslkeylog-master/sslkeylog", line 57, in _on_session
    asn1Sequence, _ = decoder.decode(data)
  File "D:\Python\Python38-32\lib\site-packages\pyasn1\codec\ber\decoder.py", line 1446, in __call__
    raise error.SubstrateUnderrunError('%d-octet short' % (length - len(substrate)))
pyasn1.error.SubstrateUnderrunError: 68-octet short

When it happens, i2d_SSL_SESSION returns a very short length (13 in my case).
Maybe some status check or error check should be performed before trying to encode it?

frida_16.1.3: ASN1 decode failed on b'xxxxxxx'

This script worked reliably with frida 12.2 to frida 16.0.8 (February 2023). I've recently updated frida_server and frida_tools to 16.1.3, and now the script cannot decode the large ASN1 blobs.

wcwidth, prompt_toolkit, _frida, frida and frida-tools all took updates...

Debug pointers welcome.

it can't decrypt tls traffic

in my test master Key is right,RSA Session-ID is not work.may be need CLIENT_RANDOM.what's the reason.

there are questions when I want ssllogs of twitter app

when I used your project on twitter app，I can't get a ssllog. what's more,I can‘t Decrypt SSL message ，even if I get a ssllog.

the tls1.3 protocol cannot generate keylogs in the code you provided

I am a college student, very lucky to see your article about hook, let me benefit a lot. The name of this post is《frida-sslkeylog》. I am very interested in the knowledge of generating keylog in TLS. Thank you for your selfless sharing. However, the tls1.3 protocol cannot generate keylogs in the code you provided. Due to my lack of ability, no good method has been found to generate tls1.3 keylogs. Could you please provide a solution or update the method of tls1.3 generating keylog in GitHub. Thank you for your support.I will be very grateful for your support.