Bypassing Multiple Defenses in Android | Frida and Objection

In this video, I walk through two different methods for bypassing SSL Pinning and Root Detection in the same Android application using both Objection and Frida. SSL Pinning and Root Detection are two of the most common defenses that you might come across while testing Android applications. Using these methods can not only bypass those defenses, but it will hopefully also demonstrate more ways that you can implement Frida and Objection in your testing procedures.
Check out my blog here:
corsecure.blog

[@datrrico]

Well done, good pace and very helpful!

[@suruurism]

You deserve millions of subscribers,

[@amyt5031]

Great video! So informative, thanks!

[@cooper7066]

Great video, keep it up bro.!

[@sharkwaresvn]

Thanks god, you saved my life

[@ajay0rawat]

It didn't work for me....i tried all scripts related to ssl pinning bypass from frida site...the problem is whenever i try to inject the frida java scripts...the android app restart.....i am having a miui device...i don't know what to do

[@Ish_Fire]

Hey, would you be down to be commissioned to do a private tutorial on certain apps?

[@m3sm4r2010]

great vedio thanks and keep it up

[@salad7389]

Do you have anywhere we can directly talk to you and ask some questions if you have time?

[@GSTARGFX]

Can u able to make video hide root detection in a game Last island of survival

[@Valentin439]

does this work with reddit apk?

[@realavdhut]

What about flutter application

[@souravrouth5333]

When will you upload owasp crackme's remaining level videos ?

[@alyom6817]

Excellent video, how bypass frida detection?

[@GSTARGFX]

Clear video

[@taominh]

its work tiktok or facebook ?

[@novianindy887]

on the second method, the frida script says some Java codes. Does it mean it only works on android apps that are built with native Java? or does it works on apps built with Flutter or React Native?

[@CorSecure]

It should work in most Flutter and React Native apps unless they have some other protections enabled. In general, the language the app is built with should not have any effect on using Frida.

[@Ronaldo-pg8by]

the second way (using frida), its needed to run frida server first on the device ?

[@CorSecure]

Yes. You have to start the frida server on the device for anything using either objection or frida.

[@sukhbirkaur1000]

If we put check on first launching screen then these script can bypass root or ssl pinning or not. On launching we are checking and finishing it. please help me to correct

[@CorSecure]

Where the root or pinning check is executed doesn't typically have any effect on whether or not it can be bypassed.

[@sudesh6807]

Would SSL pinning work if code is obfuscated using android proguard or R8?

[@CorSecure]

SSL pinning and code obfuscation are two different unrelated mechanics. whether or not you have code obfuscation doesn't affect SSL pinning at all.

[@levi-pe4jb]

what of bypassing this on application built with flutter

[@CorSecure]

I haven't had much experience working with flutter apps, but whenever I get more experience in that area, I will probably make a video about it.

[@RohitKumar-ci3jc]

iphone ?

[@heraldo623]

What about frida detection? Decent protectors will always try to detect frida usage.

[@CorSecure]

Honestly, I have tested a lot of apps at this point, and I almost never see frida detection. I know it does exist, but it just doesn't seem that common. I probably will cover that in a future video at some point though.

[@caliuso714]

@@CorSecure second vote for frida detection on top of ssl on top of certificate pinning please and thank you brutha!..

[@heraldo623]

@@CorSecure all relevant applications are protected I think. Like Facebook, Instagram, Tiktok, Snapchat, KZbin, games, etc.

[@dsenvy]

​@@CorSecureanother vote. My app always show 'Secure violation ' "Frida tools" detected, the app will be terminated' Is there a way to hide/remove the frida tools?

[@sukhwantsingh501]

What is solution to prevent these attack in android

[@CorSecure]

There are some other solutions using certificate transparency and some more robust protections that are more difficult to bypass. Most of these options are significantly more work (and sometimes more cost for enterprise solutions), but by the nature of mobile applications, they are most likely not impossible to bypass either. It really comes down to whether or not the benefit of having those protections in place are worth the additional effort and/or cost.

[@farooqueansari8206]

How to bypass emulator detection?

[@CorSecure]

It depends on how the app is implementing the emulation detection, but here is a Frida script from the Frida Codeshare that might work for you. codeshare.frida.re/@khantsithu1998/bypass-react-native-emulator-detection/ I'm going to try to make another video showing some different kinds of Frida bypasses soon.

[@jimgrayson4828]

I mean not banking apps dude but like objection has given me issues and Im just trying to quickly learn how to install the frida gadget into my apk alongside metasploit

[@CorSecure]

I have a video where I walk through patching an apk with objection, and I work through some different errors that are commonly seen with objection. I don't know of a different way to build the gadget into the apk. kzbin.info/www/bejne/p5Ktc4qZqsp2f6M

[@jimgrayson4828]

Thank you I managed to get it working on my rooted device through adb pair the only thing I tweaked was using adb pair you should try it once you finish pushing and modifying the server in /data/local/tmp you can run it in the back ground frida-server & and check to see if command execution was granted access with frida-ps -U all over wifi this is amazing I'm going to pop some pop corn and watch your tutorial here in an hour currently going to watch some of the originals episodes on vampires thank you @@CorSecure

[@CorSecure]

I have another video where I went over installing the frida server on the device. kzbin.info/www/bejne/iWm0pWSajMuDoNU I misunderstood your question. I thought you specifically wanted to package the frida gadget with the apk. It sounds like you have it figured out though, so I'm glad you got everything working.

[@jimgrayson4828]

@@CorSecure yeah I tried to follow it but I have too many errors with zipalign I even tried using frida-gadget I took it all the way back to now I'm going to create my own app with android studio and simply inject the Frida file there I have my aarch ready

[@novianindy887]

I see an app that checks Developer Option On it cant run when the developer option is turned on, how to deal with that?

[@CorSecure]

Interesting. I don't think I've ever seen an app that checked for Developer Options. I would imagine that you could probably bypass that check with Frida. You can check the Frida Codeshare to see if there are any scripts that have already been made by the community, but you might have to do some reverse engineering and write your own script.

[@novianindy887]

@@CorSecure Yes there is, the app is made with flutter (it's a banking app). To use The frida and Objection, the Developer Options has to be turned on, yes? I'm still not famiar with frida scripts, maybe you can do update in your video about the script for Dev Option checking, please.

[@XERX-XD]

Hey brother how I can contact you personally? Is there any your IG account??