Universal Android SSL Pinning Bypass with Frida

22 | 52K

Uploaded by: @pcipolloni

Android SSL Re-Pinning, more information can be found here https://techblog.mediaservice.net/2017/07/universal-android-ssl-pinning-bypass-with-frida/

• Project Page

iOS DataProtection

7 | 3K

Uploaded by: @ay-kay

List iOS file data protection classes (NSFileProtectionKey) of an app

• Project Page

aesinfo

7 | 4K

Uploaded by: @dzonerzy

Show useful info about AES encryption/decryption at application runtime

• Project Page

fridantiroot

5 | 15K

Uploaded by: @dzonerzy

Android antiroot checks bypass

• Project Page

ObjC method observer

4 | 7K

Uploaded by: @mrmacete

Observe all method calls to a specific class (e.g. observeClass('LicenseManager')) , or dynamically resolve methods to observe using ApiResolver (e.g. observeSomething('*[* *Password:*]')). The script tries to do its best to resolve and display input parameters and return value. Each call log comes with its stacktrace.

• Project Page

ios-app-info

3 | 3K

Uploaded by: @dki

Dump useful information for an iOS app

• Project Page

frida-multiple-unpinning

3 | 2K

Uploaded by: @akabe1

Another Android ssl certificate pinning bypass script for various methods (https://gist.github.com/akabe1/5632cbc1cd49f0237cbd0a93bc8e4452)

• Project Page

anti-frida-bypass

2 | 3K

Uploaded by: @enovella

Libc-based anti-frida bypass (strstr)

• Project Page

iOS URL Scheme Fuzzing

2 | 4K

Uploaded by: @dki

Black-box fuzzing of URL schemes for iOS apps using SpringBoard. Automates launching the app via URL, backgrounding, and checking for a crash. Bonus function to dump all registered URL schemes.

• Project Page

dump ios

2 | 4K

Uploaded by: @lichao890427

iOS通用脱壳脚本 dumpdecrypted with frida to dump iOS encrypted binary

• Project Page

frida-universal-pinning-bypasser

2 | 1K

Uploaded by: @akabe1

Another universal ssl certificate pinning bypass script for Android (https://gist.github.com/akabe1/ac6029bf2315c6d95ff2ad00fb7be1fc)

• Project Page

who-does-it-call

2 | 5K

Uploaded by: @oleavr

Find out which functions are called by a given function on the next call

• Project Page

titanium-asset-extractor

2 | 1K

Uploaded by: @jthuraisamy

Dump encrypted assets from Titanium-built iOS apps

• Project Page

Universal Android SSL Pinning Bypass 2

2 | 8K

Uploaded by: @sowdust

Use this frida script to bypass all SSL checks

• Project Page

Very early instrumentation of native code

2 | 1K

Uploaded by: @P0r0

Hook the global constructor of a shared library

• Project Page

ios10-ssl-bypass

2 | 5K

Uploaded by: @dki

Bypass SSL certificate validation for the injected app on iOS 10/11

• Project Page