Custom PhoneGap SSLCertificateChecker Bypass
0 | 1K
Uploaded by: @gchib297
Custom SSLCertificateChecker.execute() implementation bypass | App only proceeds if success callback is received
Custom SSLCertificateChecker.execute() implementation bypass | App only proceeds if success callback is received
iOS Proxy detection & sslpinning bypass
When calculating prices for services, evaluations are made between the sales team and the technical team regarding the time required to complete the target mobile application. However, certain mobile applications, due to their structure, may extend the security testing process. For example, static security tests for a Flutter application with an enabled SSL module and a Cordova application without a client security module may require different working hours. In such cases, it would be useful to quickly detect which framework(s) the target application uses. To facilitate this, I developed a simple script with Frida that identifies the frameworks used by the target mobile application. In the future, I will also work on development for iOS.
sslpinning
Log requests and responses made using okhttp3.
6
Observe PIDs interacting with a given target process' UNIX sockets on i/macOS
aer
android-tcp-tracev2
Hide Root Detection From Various Apps
testing bug
asdfsadf
test2
ssl
Get the list of the checked paths during jailbreak detection
gfd