Comment by tecleandor
8 hours ago
This is gonna be great to sniff apps in a couple older Android phones I have around. Hope they're not pinning certificates.
8 hours ago
This is gonna be great to sniff apps in a couple older Android phones I have around. Hope they're not pinning certificates.
Most interesting stuff is pinned unfortunately.
Frida can usually un-pin those pretty easily.
The apps I've been interested in have attestation and reverse engineering countermeasures that block Frida.
Can't you install your own CA to Android phones?
You can, but since android 7 IIRC apps don’t trust the user store by default (unless you have root and add it to the system store or patch the app to trust the user store)