3 ms·
I love mitmproxy, super easy to use (and to install an interception certificate) and the scripting support makes it very useful for pentesting iOS app traffic e
by mpeg 9y ago
I love mitmproxy, super easy to use (and to install an interception certificate) and the scripting support makes it very useful for pentesting iOS app traffic etc where I can't easily modify the client
- cowabungamann 9y agohow do disable certificate pinning on iOS?
- mpeg 9y agoHaven't had to as the apps I targeted weren't using it. Can't think of an obvious way without rooting the device though...
- bitexploder 9y agoThat is because there isn't a good solution. You can get away with repackaging an IPA and hand modifying the binary depending on how they are performing the pinning, but it is always going to be time consuming to do it this way. If you are serious about tinkering you pretty much need a jailbroken device, which is getting harder to maintain by the year.