frida-interception-and-unpinning
frida-interception-and-unpinning copied to clipboard
httptoolkit
Frida scripts to directly MitM all HTTPS traffic from a target mobile application
  all logs with debug-mode on C:\Users\emrovsky\Downloads\test>frida -U -l config.js -l frida-script.js -f com.spotify.music ____ / _ | Frida 16.1.11 - A world-class dynamic instrumentation toolkit | (_| |...
For Netty, the current version patches the `checkTrusted` method in `io.netty.handler.ssl.util.FingerprintTrustManagerFactory`. But actual `checkTrusted` method is in an anonymous inner class such as `io.netty.handler.ssl.util.FingerprintTrustManagerFactory$2`. The first version which has `checkTrusted`...
Hi, I am attempting to intercept the traffic of `io.moia.neptune`, however, I'm running into this error message: ``` !!! --- Unexpected TLS failure --- !!! SSLPeerUnverifiedException: Certificate pinning failure! Peer...
After using [this](https://httptoolkit.com/blog/frida-certificate-pinning/) great tutorial, I can confirm twitter's certificate un-pinning and can see traffic from twitter. Unfortunately, when I try to do the same with Roblox, I still can't...
com.audible.application gives the following warning ``` [ ] okhttp3.CertificatePinner check(String, List) [ ] okhttp3.CertificatePinner check(String, Certificate) [ ] okhttp3.CertificatePinner check(String, Certificate;[]) [ ] okhttp3.CertificatePinner check$okhttp [!] Matched class okhttp3.CertificatePinner but...
using this command: ~~~ frida -U ` -l config.js ` -l android/android-certificate-unpinning.js ` -l android/android-certificate-unpinning-fallback.js ` -f com.nbcuni.nbc ~~~ with Android 7, I get this result: ~~~ ____ / _...
_Originally posted by @HumairaFasih in https://github.com/httptoolkit/frida-interception-and-unpinning/issues/60#issuecomment-1809207847_ > Hi! > I'm running into the same "TLS error auto-patcher", with no traffic being detected in the Burp Suite interface. I have set...
> Sir, > I face VPN detection problem while unpinning in some apps. > In some apps your script works properly and in some it doesn't work at all. >...
a missing case for ssl pinning that could help other : ```js Java.perform(function () { var OkHostnameVerifier = Java.use('com.android.okhttp.internal.tls.OkHostnameVerifier'); // Hook de la méthode verify OkHostnameVerifier.verify.overload('java.lang.String', 'javax.net.ssl.SSLSession').implementation = function (hostname,...
Metadata
Owner
Metadata
Frida scripts to directly MitM all HTTPS traffic from a target mobile application