gojue/ecapture

ver 0.8.9 can`t work on android kernel 6.1.99 , but ver 0.6.1 did work

Opened this issue · 10 comments

ver 0.8.9 can`t work on android kernel 6.1.99 , but ver 0.6.1 did work
tried -b 0/1/2 all failed

./ecapture tls -b 1 -p 11515 --hex
should capture all the traffic but nothing showed off

d66e54004aa0bd1db342047b89d37753

tried version 0.6.1 that works fine
c2340d5ec475a11162a336fda2c8721a

Linux Server/Android (please complete the following information):

  • Device: [Pixel 6]
  • Env:androidgki_aarch64:0.6.1-20230716-e1cd6c7:[CORE]
  • OS: Android 14 AP1A.240505.004
  • Arch: Linux localhost 6.1.99-android14-11-gd4dab27b9d1c-dirty #1 SMP PREEMPT Thu Oct 3 20:50:04 UTC 2024 aarch64 Toybox
  • Kernel Version: 6.1.99

Try using --ssl_version="boringssl 1.1.1" flag.

nothing happens ...

WechatIMG106

把关于设备的页面发一下看看

FpOeGXJczTrp2ADE9OFIaI2dv_4Q
Fkp1R3Q8q06hBa1ZVOPI5ht0EyZW

0.7.0 可以获取 keylog 吗

Try using --ssl_version="boringssl 1.1.1" flag.

佬,我之前提的问题应该也是和这个情况一样的,用0.61版本就可以抓到https报文,我内核是6.1.57

#622

Versions 0.8.12 and 0.9 still don't work properly
ba693613247be1fc7fe5688bf377df1
2ad18a10a9b886e05140ce367a2025b

0.6.1 can work,but i want the higher version

在最新版上会报错

Screenshot_2024-12-16-11-44-12-71_9e8df3d0c7c1f50248b6ee043a653d26
Screenshot_2024-12-16-11-43-33-66_baaa51257c82a8b3f281ce09e6f2493f

cfc4n commented

没有相关硬件设备,无法重现。