Configure WSA (Windows Subsystem for Android) for Pentest

Configure_WSA_for_Pentest.md

Configure WSA (Windows Subsystem for Android) for Pentest

Install WSA with Megisk

Follow the instructions to install WSA with Megisk and GooglePlay services. MagiskOnWSALocal

Install following Modules in Magisk

Download following modules for Magisk.

• MagiskFrida: A Magisk module that automatically runs frida server at boot
• magic_overlayfs: Make system partition become read-write

Install required Apps

Microsoft Launcher - For Launcher to access apps like settings etc. ProxyDroid - For Global proxy

BurpSuite Certificates

1. Connect to ADB adb connect 127.0.0.1:58526 Note: Make sure developer mode is enabled in WSA settings

2. After connecting Convert and push the certificate file to WSA.

   1. openssl x509 -inform DER -in burp.der -out burp.pem
   2. openssl x509 -inform PEM -subject_hash_old -in burp.pem | head -n -1 Output result will be something like 9a5ba575.0
   3. Rename the certificate mv burp.pem 9a5ba575.0
   4. Transfer the certificate file to WSA adb push 9a5ba575.0 /data/local/tmp/
   5. Open shell adb shell
   6. Change user to root su
   7. Remount all overlayfs to read-write magic_remount_rw
   8. Copy the certificate to the system certificates directory cp /data/local/tmp/9a5ba575.0 /system/etc/security/cacerts/
   9. Restore all system partitons back to read-only magic_remount_ro
   10. Reboot Emulator and check if the brup certificate is visible under System certs in android settings.

3. Open Microsoft Launcher → Settings → Security → Encryption & Credentials → Install a certifcate. Then browse and select brup.cer file and click install anyway.

4. Reboot WSA using Turn off button in WSA App or using Magisk. After reboot check PortSwigger's certificate under Trusted System Credentials.