'How to bypass SSL Pinning of an Android App
I want to bypass the SSL pinning of an Android app using the Frida Server method.
I have followed the whole process described in this (https://blog.it-securityguard.com/the-stony-path-of-android-%F0%9F%A4%96-bug-bounty-bypassing-certificate-pinning/) tutorial.
Below are the steps which I have followed/performed:
Installed the Frida library and Frida-tools
Rooted my Android Device
Installed the target app
Downloaded the Frida server for my Device architecture
Sent the Frida Server to its path in Device
Granted the Frida server the necessary permissions
Have started the Frida Server
Got the Frida Script File ready
Now when I try to spawn an app it is raising the process is terminating as shown below:
I am trying this from my Windows Laptop with a Real and rooted Android Device running Android lollipop 5.0.
I have tried it on other apps as well but it causes issues on them as well.
In my opinion, the issue is with the code within my Frida Script file.
If my Frida Script file is empty it is causing no issue but whenever I add the below line in the file it is causing the process to be terminated.
This is the line that is causing the issue.
Java.perform(function (){ });
The app is the device is getting started and immediately the console is showing the process as terminated. I am using frida-server-12.7.22-android-arm.xz
as the server. I am pretty sure that the setup is fully right but the only issue is occurring while adding the above code to the Frida Script file.
Also Java.IsAvailable
returns false.
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
Solution | Source |
---|