3 ms·
Do we have to give you the full login details? I'm somewhat impressed though - I was defeated by certificate pinning on one UK bank's mobile app. How did you g
by insomniacity 11y ago
Do we have to give you the full login details?
I'm somewhat impressed though - I was defeated by certificate pinning on one UK bank's mobile app. How did you get round that?
- icebraining 11y agoThere's a BlackHat presentation on this: https://media.blackhat.com/bh-us-12/Turbo/Diquet/BH_US_12_Diqut_Osborne_Mobile_Certificate_Pinning_Slides.pdf https://media.blackhat.com/bh-us-12/Turbo/Diquet/BH_US_12_Di...
- sjtgraham 11y agoTeller emulates the first party mobile client. So what you need to give Teller depends on what you need to enrol your mobile device. I don't disable PKI pinning. I inject code at runtime to observe and change behaviour.