4 ms·
You can have fun with Wireshark https://www.wireshark.org/ https://www.wireshark.org/ Depending on the details in each of the layers[1] you might be able to sp
by maerF0x0 3y ago
You can have fun with Wireshark https://www.wireshark.org/ https://www.wireshark.org/
Depending on the details in each of the layers[1] you might be able to spoof traffic towards it to trick it things.
you may need to try MITM the certs/key exchange stuff[2], hopefully they have a broken implementation that doesnt validate signatures etc.
[1]: https://www.bmc.com/blogs/osi-model-7-layers/ https://www.bmc.com/blogs/osi-model-7-layers/
[2]: first promising hit when i googled: https://gbhackers.com/mitm-attack-https-connection-ssl-strip/ https://gbhackers.com/mitm-attack-https-connection-ssl-strip...
- SushiHippie 3y agoLooks like the android app at least does certificate pinning https://github.com/zimmra/frida-rootbypass-and-sslunpinning-lg-thinq https://github.com/zimmra/frida-rootbypass-and-sslunpinning-...