3 ms·
How does this work? If application has certificate pinning then MITM is not feasible, correct? Would love if someone could enlighten me :)
by openplatypus 8y ago
How does this work? If application has certificate pinning then MITM is not feasible, correct?
Would love if someone could enlighten me :)
- boomboomsubban 8y agoCorrect, he mentions some data will be unavailable to him, and mitmproxy mentions that certificate pinning is a problem.
- _kbh_ 8y agoYou could use frida, it works on jailbroken and non jailbroken phones but is much more feature rich on jailbroken devices. https://www.frida.re https://www.frida.re
- spondyl 8y agoA lot may have changed but here's a few blog posts on various MITM/cert pinning bypasses that some people have done: https://blog.tendigi.com/starbucks-should-really-make-their-apis-public-6b64a1c2e923 https://blog.tendigi.com/starbucks-should-really-make-their-... https://jeffhuang.com/extracting_my_data_from_the_hello_sense.html https://jeffhuang.com/extracting_my_data_from_the_hello_sens... https://blog.dewhurstsecurity.com/2015/11/10/mobile-security-certificate-pining.html https://blog.dewhurstsecurity.com/2015/11/10/mobile-security... I just had these bookmarked from when I was wondering the same thing