Cyber Risks · PortSwigger Research

Troubleshooting for mobile devices - Port Swigger

Summary: PortSwigger's troubleshooting guide for testing mobile apps with Burp Suite directs users to the Dashboard event log, where a large number of "Connection reset" or "Remote host terminated the handshake" errors may indicate TLS 1.3 compatibility issues. The fix is to open Settings, go to Tools > Proxy, edit the proxy listener used for the mobile device, select Use custom protocols on the TLS Protocols tab, and deselect TLSv1.3.

What you should know: A mobile app that won't complete a TLS handshake through the proxy can stall an entire mobile assessment, and the guide's remedy is a single listener setting rather than a code or device change.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related