4 ms·
Certificate pinning is easy to defeat.
by martinald 11y ago
Certificate pinning is easy to defeat.
- neximo4 11y agoDoesn't exactly answer the question..
- alcari 11y agoIf you can run the app on a jailbroken/rooted device, it's fairly easy to beat certificate pinning in a few different ways. Two that come to mind are: * find the certificate file in the app and replace it with your own. * hook the function that verifies the certificate and make it return true.
- neximo4 11y agoIf you tried reversing the app in question, none of these methods work as the app has a couple of protections against changing its code.