Re:BMW Connected Apps Protocol
by oefrha on Monday January 20, 2020 @12:39PM
(#22100522)
Did you have to disable SSL cert pinning too? Or was it happily MITM’ed so that all this obfuscation is completely pointless?
[ Parent
| on HN ]
Nope, they went through all that trouble and didn't pin the certs haha
But in general, getting around cert pinning is pretty straightforward though with Objection and Frida.
It's a little bit of a cat and mouse game since they can probably be detected by a determined app developer, but I haven't run into any issues yet