News for hackers. Stuff that matters.

A comment on How to use undocumented web APIs. Parent comment

Re:How to use undocumented web APIs by brazzledazzle on Thursday March 10, 2022 @04:06PM (#30632438)
Just be ready for mitm proxying on some mobile apps to be a bust if they use certificate pinning. I’m not aware of anything that can get you past that besides patching the app itself.
[ Parent | on HN ]
Re:How to use undocumented web APIs by buildfocus on Thursday March 10, 2022 @07:31PM (#30634610)
https://httptoolkit.tech/blog/frida-certificate-pinning/ has a good guide and Frida script that will disable certificate pinning automatically in most cases.
[ Parent | on HN ]
Re:How to use undocumented web APIs by jonatron on Thursday March 10, 2022 @04:11PM (#30632501)
There's plenty of Frida scripts that can disable app certificate pinning
[ Parent | on HN ]
Re:How to use undocumented web APIs by brazzledazzle on Thursday March 10, 2022 @04:27PM (#30632702)
To be fair I’m sure that uses patching but I didn’t know about that tool and how easy it is to use. Thanks for another thing to put in the ol’ bag o’ tricks.
[ Parent | on HN ]