nabla-c0d3 / ssl-kill-switch2

Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and macOS applications.
Other
3.08k stars 466 forks source link

Not working with Instagram #39

Open GarlandM opened 6 years ago

GarlandM commented 6 years ago

It appears Instagram has changed how they handle cert pinning, as it no longer works with Instagram.

ghost commented 6 years ago

@GarlandM Here is solution https://github.com/nabla-c0d3/ssl-kill-switch2/issues/13#issuecomment-360294883

jercypackson commented 6 years ago

Hi @karek314 your solution does not work with any of the newest Instagram ipas (33.0) on iPhoneCake ("Can't patch because patch address has not been found"). Is it possible that the hook you provided is already outdated?

ghost commented 6 years ago

Hi @jercypackson, next time please open issue in hexbytescanner-hooks repo as it's related to that issue. We don't want to make a mess in @nabla-c0d3 repository.

Indeed, pattern broke. I bet it's either due different compiler behaviour or slightly different version of openssl lib. That pattern was pretty fresh and untested. I have pushed v2 version of it. It should work fine. https://github.com/karek314/hexbytescanner-hooks/blob/master/openssl_hook_v2.json

If it breaks again, i will be glad if someone PR improved version. below is what we are looking for, i gave more details here

nopv2

Enjoy new pattern then :)

liuxuan30 commented 6 years ago

@karek314 I'm a little confused how to put all these together to make it work. Do you have any instructions/manual for like finding the pattern and patching the apps? Thank in advance!

ghost commented 6 years ago

@liuxuan30 I think you will find everything with links below

Finding pattern itself is just experience, if you find any clue which library is used, then you can search for it, try to finds similar code in ASM, small hint - some strings are statically linked with the same functions, thus it's good start.

gaplan commented 6 years ago

still not working with instagram :(

SergeKZ commented 4 years ago

How to make working with instagram?

havsar commented 2 years ago

If someone has a solution, contact me ummet662@gmail.com