4 ms·
I recently used Fiddler along with Frida[1] to deal with cert pinning in the app I was looking into. [1] https://github.com/httptoolkit/frida-android-unpinning
by radlad 5y ago
I recently used Fiddler along with Frida[1] to deal with cert pinning in the app I was looking into.
[1] https://github.com/httptoolkit/frida-android-unpinning https://github.com/httptoolkit/frida-android-unpinning
- abdusco 5y agoSweet, thanks for the link. I was looking for something like this. Tried mitmproxy but it was useless against cert pinning. So I went with decompiling the app to extract the auth keys and urls for the internal API it was using.
- c0wb0yc0d3r 5y agoIs there a way to deal cert pinning without decompiling the app?