Using objection to get PCAP from ssl transport

[joko99999]

Can I use objection to create a PCAP file that contains ssl_read and ssl_write decrypted?

[IPMegladon]

This would likely be easier to do with a Frida script, I'm sure there are already ones out there that do exactly this. Suppose you could also just use tcpdump if you are on a rooted/jailbroken device though?

[joko99999]

Sure. The possible with Frida, but with objection that more comfortable for usage.
Maybe that not hard to integrate
https://github.com/saleemrashid/frida-sslkeylog

[IPMegladon]

Objection doesnt currently have the functionality, but I'm sure you are welcome to make a PR for it. Alternatively you can also implement it as plugin: https://github.com/sensepost/objection/wiki/Plugins