How to Bypass Multiple SSL Pinning on Android

#android #sslpinning #frida #pentest #mobilesecurity #mitm
Hey Guys, in this video i have explained about capturing the HTTPS traffic from a very well obfuscated android application. Since the app is obfuscated and using SSL Pinning even if an attacker tries to intercept the network traffic by performing man in the middle attack (MiTM), he or she will only get TLS negotiation failed error message on their proxy server. In this video you will see how we can bypass SSL Pinning using frida framework.
The sample application which we have used here is from httptoolkit. The reason why i have chosen this app is because it is using different networking libraries for performing SSL Pinning so you will be able to get an idea about how we can bypass SSL Pinning checks in different apps.
You can either download the release build of this application or build it by yourself from the source code from their github repository: github.com/httptoolkit/androi...
Here is the frida script which we have used in this video: codeshare.frida.re/@akabe1/fr...
I hope you like the content and if you find it useful then don't forget to hit the like button and subscribe to this channel.
You can also buy me a coffee: www.buymeacoffee.com/secfatalz

[@user-rh5km2fy7b]

Super useful and interesting videos! Thank you so much.

[@fatalsec]

Glad you liked it

[@Valentin439]

very good content ! Keep up the good work

[@foodiepanda6281]

so perfect video

[@0xPanda1]

Thank u ,you deserve a subscription

[@LEGENDSAHILL]

Thanks piro

[@lifepermiles]

i am your 400th subscriber

[@fatalsec]

Thanks for subscribing. I hope you like the content here!

[@abhishekbandivadekar3999]

Great video. Have you come across anything which terminates frida process and if so, how did you bypass that,

[@fatalsec]

It is possible for the apps to detect the presence of frida and in such cases apps closes itself or crashes itself. Is this what you are talking about?

[@niranjantechintelugu2968]

Great 500 th sub

[@fatalsec]

Wooho, thanks and keep supporting🙏

[@niranjantechintelugu2968]

@@fatalsec make Tg channel and upload this videos because KZbin will delete soon like this tutorials

[@fatalsec]

We already have a tg group. You can join: t.me/+74Fx_Za9XS41OGU1

[@Mohammed-zz4wg]

Great !

[@fatalsec]

Thanks

[@manuellopes1269]

@@fatalsec you know how restore pairip hidden parts from dex?to restore full dex

[@fatalsec]

@@manuellopes1269 you can try by dumping the dex file from memory at runtime during the app launch.

[@manuellopes1269]

@@fatalsec i tried with frida but failed

[@shortcreator308]

i have arm64_8a where can i get for my rooted device

[@fatalsec]

The apk I have shared does not have arm64_8a library?

[@YusufHegazy]

What android emulator are you using?

[@fatalsec]

I was using a real device. But if you want to do it on a emulator Genymotion is a good option as it allows you to configure network parameters easily.

[@YusufHegazy]

@@fatalsec the thing with genymotion is that I can't get magisk working properly, magisk hide is broken on their custom build of magisk.

[@ritaadhikari2437]

cant copy script from android. can you please make a .js or .txt file and share it.

[@fatalsec]

The script is already there on GitHub: github.com/fatalSec/flutter_reversing/blob/main/flutter_ssl_bypass.js Make sure to change the hook offset based on your analysis.

[@anonymicron9816]

HELP ME PLEASE #Faild to Spawn : process not found

[@fatalsec]

Make sure the app package name is correct

[@favorid6406]

make a guide on how to intercept traffic from online Android games on websockets

[@fatalsec]

Thanks for the suggestion. Noted!

[@movielover8737]

Hlw Android app traffic capture i have like you vedio genrate 204 problem show 😢😢 can you know how to slove

[@fatalsec]

What are you trying to do exactly?

[@moinkhokhar1897]

Bro can You please make how to bypass flutter app ssl pinning bypasss reflutter is not working

[@fatalsec]

Yes that’s a good idea. Maybe in future I will make a video on flutter ssl bypass.

[@moinkhokhar1897]

@@fatalsec its nice bro please make a video in future but I need technic please give me

[@novianindy887]

@@fatalsec did you make video about this yet?

[@terebincomedy2420]

Can you reply to my first comment or not ? I hope you not this much arrogant as many KZbinrs is out there . If you don't wanna reply I can understand your ego is coming on way then just simple ignore . Have a nice day !

[@fatalsec]

What was your first comment? I cannot see it! For your information KZbin sometimes hides the comments based on the keywords you have used.

[@terebincomedy2420]

@@fatalsecsorry then I will send you as base64

[@terebincomedy2420]

@@fatalsec oh it's also hide base64 wrapped text then how we can communicate KZbin being KZbin how to overcome it. I think you should create tg group where we can interact with each other freely :) KZbin bot is on fire to delete everything lol

[@novianindy887]

does the device need to be rooted?

[@fatalsec]

Yes rooted device is needed. Otherwise you can use frida gadget or patch the smali code directly.

[@novianindy887]

@@fatalsec then what if the app detects root?

[@mantukumar0855]

@@novianindy887 came accross this prblm now, had to sniff APIs and they also have rootbear checker on it, it adds extra layer of protection to it.

[@mantukumar0855]

any thoughts @fatalsec