45 questions
0
votes
0
answers
142
views
Glide image loading fails on Android 12 and below due to SSLHandshakeException
I'm using the standard Glide library to load and display images in my Android app.
After switching my image domain's SSL certificate to “Sectigo Public Server Authentication CA DV R36”, image loading ...
1
vote
0
answers
128
views
How to implement SSL Pinning in Flutter
I want to implement the SSL Pinning (specifically public key pinning) in Flutter without using any flutter or dart plugin.
What can be the possible way?
Is there any Internal Dart methods?
Is there ...
1
vote
2
answers
2k
views
How to generate SHA256 hex string from PEM file and implement root certificate public key pinning in Swift for iOS 12?
I have a PEM file of the ISRG Root X1 certificate which I downloaded from https://letsencrypt.org/certificates/
and I'm trying to implement certificate pinning in my iOS app. I'm specifically ...
2
votes
1
answer
562
views
stop Charles from tracking my app's requests without SSL Pinning in iOS
When I setup Charles for debugging, I can see all the traffic which is a good part. But Charles is showing all the traffic for my released production app which is not good at all.
Is there any way, I ...
0
votes
0
answers
161
views
How to do Identity Pinning(iOS) and networkSecurityConfig(Android) for enabling SSL pinning on a React Native application
I am trying to implement SSL pinning in my React Native application. So far, most of the blogs talks about using react-native-ssl-pinning package. Recently came to hear that, instead of using a ...
2
votes
0
answers
326
views
I want to do React native dynamic ssl pinning
I'm trying to perform SSL pinning in React Native. The main issue is: On the Android side, we aim to transfer the key and SSL pinning activation status obtained from remoteConfig to the native side ...
0
votes
0
answers
708
views
Can't read traffic through one specific app with Burp
So I'm trying to debug this specific app:
https://sahibinden-com.tr.uptodown.com/android
To debug I'm using Frida, Genymotion and this script to unpin the certificate:
https://codeshare.frida.re/@...
1
vote
0
answers
121
views
Platform exception while using Ssl pinning plugin in flutter
I am not sure about how to use the ssl pinning plugin in flutter.
when I am using it I am getting a platform exception saying that the fingerprints doesn't match.
is it the sha 1 or sha 256 of the ...
1
vote
0
answers
364
views
SSL pinning in React Native
How to incorporate SSL pinning in React Native using axios for api calls.
I came across TrustKit but my continues efforts to use the same ends up crashing my app. I tried both the ways of adding ...
1
vote
0
answers
72
views
how to use SSL pining in every Api request using http plugin fllutter
I am new to SSL pinning, I was asked to use SSL pinning in every API request. I checked some resources but I didn't get the idea of how to call it in my API request.
I am using HTTP/HTTP plugin and ...
0
votes
1
answer
5k
views
frida.TimedOutError: unexpectedly timed out while initializing suspended process
Describe the bug
Timeout occurred on objection explore
To Reproduce
Steps to reproduce the behavior:
Run command objection --gadget "com.apple.AppStore" explore
Evidence / Logs / Screenshots
...
1
vote
1
answer
431
views
How Can I detect self signed certificate from charles, wireshark etc in golang
I am currently working on GO app and I wanted to know how can I detect someone using reverse proxy apps such as Charles, Wireshark and Fiddler.
I tried to read about SSL-Pinning but I couldn't find ...
1
vote
1
answer
3k
views
Extracting public key information from a PEM certificate
This is the first time I am doing this SSL pinning on Android.
When creating OkHttp, I am adding this code:
certificatePinner(
CertificatePinner.Builder().add(
"url of the server",
...
0
votes
1
answer
719
views
Implementing SSL Pinning with Flutter GraphQL
I need help implementing SSL pinning on Flutter using graphql_flutter and http_certificate_pinning. Here's my code implementation so far:
import 'package:graphql_flutter/graphql_flutter.dart';
import ...
0
votes
1
answer
889
views
Certificate Pinning not working when trust user certificates in network security configuration
I am learning network security configuration in Android. Here is my configuration file
<?xml version="1.0" encoding="utf-8"?>
<network-security-config>
<base-...
3
votes
0
answers
3k
views
How to disable ssl pinning in android app using Objection
I have a simple app and am trying to bypass its ssl pinning with no luck. Already did android sslpinning disable but didnt work.
Based on this article https://blog.nviso.eu/2020/11/19/proxying-android-...
0
votes
1
answer
855
views
ios swift Dynamically update SSL Certificate(.cer) files
Dynamically need to update.
I'm able to download the certificate from a URL and save it to the document directory.
func downloadFile(url: URL, completion: @escaping (String?, Error?) -> Void) {
...
4
votes
1
answer
4k
views
Flutter TlsException: Failure trusting builtin roots
I'm trying to perform SSL certificate pinning in a Flutter app using HttpClient. I have previously successfully performed pinning in a native Android app. This is the error message I receive:
E/...
1
vote
0
answers
692
views
TypeError: Cannot read properties of undefined (reading 'fetch') [react-native-ssl-pinning]
I am building a react native mobile application and I want to implement SSL pinning using react-native-ssl-pinning.
I've installed all the necessary things and I also imported fetch method:
import {...
1
vote
0
answers
218
views
React native with self signed certificates on M1 chip MacOS
The below is my code for Webservices call, which works fine on both iOS and Android. But for API calls where self signed certificate is used, this does not work. I am using macOS with M1 chip.
To fix ...
0
votes
1
answer
694
views
ssl-pinning right approach for android and IOS application
We are using Cloudflare as our edge. We have the requirement for SSL pining. could any suggest the best way to manage SSL pining [ Dynamic cert approach ] .
2
votes
1
answer
3k
views
Null address in Sslpinning bypass of flutter app by using frida
I was working on pentesting a flutter android app on genymotion x86 to bypass sslpinning by using this and this approaches, but my function address return null when running Frida.
First of all, by ...
0
votes
0
answers
1k
views
SSL Pinning on iOS for Ionic Angular Application
I have a problem with SSL Pinning on iOS. I was using the following plugin:
https://github.com/silkimen/cordova-plugin-advanced-http
and
https://ionicframework.com/docs/native/http
This method is ...