frida-interception-and-unpinning
frida-interception-and-unpinning copied to clipboard
Frida scripts to directly MitM all HTTPS traffic from a target mobile application
Hi! Unpinning works, but the problem that app totally unusable. I'm able to see requests, but look like on receive data app fail to verify something. I will be appreciated...
https://play.google.com/store/apps/details?id=com.segway.mower ``` --> Unexpected SSL verification failure, adding dynamic patch... Thrown by okhttp3.CertificatePinner->check [ ] Failed to automatically patch failure Thrown by okhttp3.CertificatePinner->check [ ] Failed to automatically patch failure...
Hello, I followed this guide (https://httptoolkit.com/blog/frida-certificate-pinning/) but was still unable to get the certificate to work. Whenever I opened snapchat I would get the certificate rejected error and Snapchat wouldn't...
when working on ```https://play.google.com/store/apps/details?id=com.telkomsel.roli``` the OKHttp Exception occurs. ``` Unpinning Android app... [+] SSLPeerUnverifiedException auto-patcher [+] HttpsURLConnection (setDefaultHostnameVerifier) [+] HttpsURLConnection (setSSLSocketFactory) [+] HttpsURLConnection (setHostnameVerifier) [+] SSLContext [+] TrustManagerImpl [ ]...
com.blizzard.messenger their chat and authentication app isn't unpinned completely . The log says: ``` Unpinning Android app... [+] SSLPeerUnverifiedException auto-patcher [+] HttpsURLConnection (setDefaultHostnameVerifier) [+] HttpsURLConnection (setSSLSocketFactory) [+] HttpsURLConnection (setHostnameVerifier) [+]...
The automatic exception patcher seems to fail for the UbiConnect Android app (com.ubisoft.uplay) ``` Unpinning Android app... [+] SSLPeerUnverifiedException auto-patcher [+] HttpsURLConnection (setDefaultHostnameVerifier) [+] HttpsURLConnection (setSSLSocketFactory) [+] HttpsURLConnection (setHostnameVerifier) [+]...
No luck using the script on the expressvpn app. After running the script, HTTP Toolkit still is unable to view the https traffic. I tried reverse engineering the app and...
Hello i hope you fine There is three or four apps i tried to unpinning ssl using frida server with too many scripts but nothing worked i tried the codes...
Tried it on Nike app: com.nike.omega Frida on terminal returned error below: Process crashed: java.lang.NullPointerException: interceptor com.nike.mpe.plugin.certtransparency.internal.certificatetransparency.internal.verifier.CertificateTransparencyInterceptor@2c65125 returned null Just to make sure, I tried it on Twitter and it...
@pimterry Muchas aplicaciones detectan la presencia de la VPN. Cuando pruebas estas aplicaciones, ¿usas un script genérico para Frida o siempre creas uno nuevo basado en cada aplicación? tomando nota...