Eltion / Snapchat-SSL-Pinning-Bypass

Bypass Snapchat SSL pinning on Android devices
GNU General Public License v3.0
77 stars 27 forks source link

Not working on Nox Emulator #1

Closed IQDevloper closed 1 year ago

IQDevloper commented 1 year ago

i patched the App successfuly and run Burp and then run Snap app with Frida but i'm geting error no connection at all !!

Screenshot_2

Eltion commented 1 year ago

@IQDevloper I notice you're using an emulator, this patch will only work on real device with arm, arm64 architecture.

I think there is possible to make it also work on Nox Emulator, I did something similar for tiktok. You can follow that here: https://github.com/Eltion/Tiktok-SSL-Pinning-Bypass/issues/2

liemvt2008 commented 1 year ago

Hello @Eltion I'm quite new on this. I'm trying to follow your instruction and use a real device for install and login with your Patched APK uploaded. As you mentioned that

this patch will only work on real device with arm, arm64 architecture.

However, it's still got error as image show. snapchat

Please give me some suggestion to overcome this error. Many thanks

Eltion commented 1 year ago

@liemvt2008 thanks for reporting that. Do you mind telling me if your phone is arm, or arm64. I'm only able to test the arm64 version, so there may be a problem with the arm version.

liemvt2008 commented 1 year ago

@Eltion, thank you for your replies. As I checked via command

adb shell getprop ro.product.cpu.abi armeabi-v7a

The result is armeabi-v7a and via some searching https://stackoverflow.com/a/48340077 I found that my arm is 32bit. Do you have any way to make this work on my phone? Please give me some advice. Many thanks.

Eltion commented 1 year ago

@liemvt2008 , I will soon sent you a version and maybe you can test it and let me know if it works

Eltion commented 1 year ago

@liemvt2008, can you test if this works for you, https://send.vis.ee/download/eb6366584275f0a9/#yJIi6PAjhdkaBUugtavQJg

Eltion commented 1 year ago

@liemvt2008, if that is not working, try this: https://send.vis.ee/download/a345f2a8a42f213f/#lvG59TV52kmcJ8jkNSsA4A

liemvt2008 commented 1 year ago

@Eltion ,

adb install app_patched.apk Performing Streamed Install adb: failed to install app_patched.apk: Failure [INSTALL_PARSE_FAILED_NOT_APK: Failed to parse /data/app/vmdl935943506.tmp/base.apk]

I guest that something happened while compiling the base.apk after update. Once again, I'm very appreciate your helping and grateful support. Please help me. I lost many months to struggle and try many way with this app.

Eltion commented 1 year ago

@liemvt2008 can you try this one: https://send.vis.ee/download/650edacbfd27a59f/#V_3XKuTmM30fCx_KkOC0Zw

Remember to uninstall snpachat before installing this

liemvt2008 commented 1 year ago

Hello @Eltion ,

I've tried your new app_patched but the result still the same. snapchat_v2 Maybe I will find some devices which use arm64-v8a but I'm not sure how long does it take. Please help me with armeabi-v7a structure while I'm moving around and finding new devices. Many thanks for your time and your effort to support me.

liemvt2008 commented 1 year ago

Hello @Eltion,

As you mentioned before, I found another devices which using arm64

adb shell getprop ro.product.cpu.abi arm64-v8a

This device totally new to Snapchat and I downloaded your release package as version snapchat-v12.08.0.29.apk However, the Snapchat not allow me to login as below snapchat_v64 I'm trying my best and find any solution so I can to bypass this app pinning. Please give me more advice or suggestion if you have. Many thanks for your support.

Eltion commented 1 year ago

@liemvt2008, seems like snapchat is detecting that apk is patched. there was a new issue open for this. You can follow up here: https://github.com/Eltion/Snapchat-SSL-Pinning-Bypass/issues/2

Eltion commented 1 year ago

@liemvt2008 both the problems should be solved now. I've created a new release here: https://github.com/Eltion/Snapchat-SSL-Pinning-Bypass/releases/tag/v12.16.0.28

Let me know if it's working.

liemvt2008 commented 1 year ago

Hello @Eltion ,

This was awesome. Everything is working like magic. Screenshot from 2023-01-10 14-36-04 Thank you very very much for your effort and time to bypass this app.

IQDevloper commented 1 year ago

Hi Guys, I still see the same error message, "Something went wrong...," when using the Nox player emulator (x86 64). Could help me with this ? I would appreciate it.

Eltion commented 1 year ago

@IQDevloper yes also the new release won't work with Nox emulator. The only way to achieve that is to do a patch without using firda.

Eltion commented 1 year ago

@IQDevloper , I managed to get it working on nox emulator. image

You can download it here: https://github.com/Eltion/Snapchat-SSL-Pinning-Bypass/releases/download/v12.16.0.28/snapchat-v12.16.0.28-nox.apk

IQDevloper commented 1 year ago

Screenshot_3

i still get the same error i tried with Burp and Http toolkit ( i'm using Nox Player ' Android 9 ' ) why do you think is not working with me ?

Eltion commented 1 year ago

No it won't work using frida-server. You need to install the apk I've sent don't need to run frida. Also the patch is made for x86 so Nox 'Android 9' is 64bit and it won't work. I've tested it in Nox Android 7

IQDevloper commented 1 year ago

Thank you for your quick reply. I just installed the patched version on NoxPlayer 7 x86, ran Http Toolkit on it, and still get the same error !?

edit: it works without run Http Toolkit or Burp

Eltion commented 1 year ago

Can you do the following and sent the output:

cd C:\Program Files\Nox\bin\
.\adb.exe logcat -c
.\adb.exe logcat -s "SNAPCHAT_SSL_PINNING_BYPASS:V"
IQDevloper commented 1 year ago

01-12 00:49:35.958 10496 10496 V SNAPCHAT_SSL_PINNING_BYPASS: [][+] Hooked checkTrustedRecursive 01-12 00:49:36.235 10496 10496 V SNAPCHAT_SSL_PINNING_BYPASS: [][+] Hooked SSLContextInit

Can you do the following and sent the output:

cd C:\Program Files\Nox\bin\
.\adb.exe logcat -c
.\adb.exe logcat -s "SNAPCHAT_SSL_PINNING_BYPASS:V"

please read my comment above i edited it, the app works but when i run any Intercept app it's not and the requests abort

Eltion commented 1 year ago

Yes, just to be sure can you confirm that you're running this apk: https://github.com/Eltion/Snapchat-SSL-Pinning-Bypass/releases/download/v12.16.0.28/snapchat-v12.16.0.28-nox.apk

IQDevloper commented 1 year ago

Yes, i'm sure, but why is not working when i run Http Toolkit with notes Instagram works with it prefictly even Burp and i installed certificate !

Could please help me with that ?

Eltion commented 1 year ago

@IQDevloper can you try mitmproxy ?

Eltion commented 1 year ago

@IQDevloper I can confirm that it's not working on Burp or Http Toolkit

alijafari96 commented 1 year ago

Hi. I've used the last released apk you put here but I got the below error. Could you please take a look at this and help me? @Eltion

image

Eltion commented 1 year ago

@alijafari96 Can you tell me what architecture is your phone, and what proxy tool are you using

admin22312 commented 1 year ago

@alijafari96 Can you tell me what architecture is your phone, and what proxy tool are you using

Those requests that we see for snapchat, is it possible to process for personal use? Or maybe you encountered some problems when trying to substitute other data for such requests? In any case, thank you for the information, but it will be valuable to know if you have tried or maybe know that this can be successfully implemented for further work with them

alijafari96 commented 1 year ago

@alijafari96 Can you tell me what architecture is your phone, and what proxy tool are you using

My phone architecture is ARMv8.2-A and I use Burp to intercept the traffic.

Eltion commented 1 year ago

@alijafari96 can you try with mitmproxy

Eltion commented 1 year ago

Considering this issue as resolved.

alijafari96 commented 1 year ago

@alijafari96 can you try with mitmproxy

Hi @Eltion, Sorry for late response. Yes, It works when I use mitmproxy instead of burp. But I can't understand why burp does not work. I even enabled invisible-proxy in burp settings but that didn't solve the problem. Is there any way that I can intercept traffic using burp and not mitmproxy? Why does mitmproxy works and burp doesn't?

Do you have any idea? @Eltion Tnx for your responses and time Eltion

itzelliotto commented 10 months ago

Hi @Eltion, How do I use mitmproxy? do I need to run any code on command prompt after installing the nox version and the mitmproxy? (I'm not a coder, but I can copy code in cmd prompt)

itzelliotto commented 10 months ago

Didn't work for me

Screenshot (529)

Hi @Eltion, How do I use mitmproxy? do I need to run any code on command prompt after installing the nox version and the mitmproxy? (I'm not a coder, but I can copy code in cmd prompt)