3 ms·
Note that the associated whitepaper discusses using Cydia -- specifically cycript -- to do the same thing.
by jerematasno 12y ago
Note that the associated whitepaper discusses using Cydia -- specifically cycript -- to do the same thing.
- jerematasno 12y ago(Modifying the binary is much more fun to blog about, though.)
- dmayer 12y agoYes, often times that can be sufficient. If you just want to study the protocol or build a custom client. Often times one would like to modify messages of the protocol in order to find flaws in either the server or the client and the ability to man-in-the-middle the protocol makes that easier, in my opinion. For completeness, the whitepaper is here: http://matasano.com/research/bypassing_openssl_pinning.pdf http://matasano.com/research/bypassing_openssl_pinning.pdf
- wglb 12y agoAwesome article and white paper.
- alimoeeny 12y agojerematasno thanks for mentioning cycript. I didn't know about it. Just watched Saurik's intro video. Very fascinating.
- alimoeeny 12y agojerematasno thanks for mentioning cycript. I didn't know about it. Just watched Saurik's intro video. Very fascinating.