search

httptoolkit / frida-interception-and-unpinning

Frida scripts to directly MitM all HTTPS traffic from a target mobile application
https://httptoolkit.com/android/
GNU Affero General Public License v3.0
909 stars 179 forks source link

this script fails with com.audioteka but another works #94

Closed 3052 closed 1 week ago

3052 commented 1 month ago

I get these results with the script here:

network error

frida -U `
-l android/android-certificate-unpinning.js `
-l config.js `
-f com.audioteka

unrecognized TLS error - this must be patched manually

frida -U `
-l config.js `
-l android/android-certificate-unpinning.js `
-l android/android-certificate-unpinning-fallback.js `
-f com.audioteka

but this script works:

https://codeshare.frida.re/@akabe1/frida-multiple-unpinning/

pimterry commented 1 week ago

Are you using the latest version, and have you tried using the complete example command from the getting started guide?

I've just tested with audioteka using the full setup and it works fine for me. I can see one unhandled TLS failure at the start (from okhttp3.CertificatePinner->b - obfuscated method name) but it's recognized correctly, and so it's auto-patched all subsequent requests work OK, so the app starts up and gets intercepted perfectly.

3052 commented 1 week ago

don't remember why I needed this