Closed GHXST01 closed 5 years ago
@pouyadarabi are you still available? I'm the creator of the following patch using Frida:
var moduleNames = ['libxliger.so', 'libsslx.so'];
var functionName = 'X509_verify_cert'
moduleNames.forEach( function(moduleName) {
Interceptor.attach(Module.findExportByName(moduleName, functionName), {
onEnter: function (args) {
// Logging the progress
send('');
},
onLeave: function (retval) {
// Patching return value from 0x0 -> 0x1
retval.replace(1);
}
});
});
Can you tell me if you've updated anything besides this? I want to update my patch to work with the latest IG versions.
@pouyadarabi Hey, could you please get back to me? Thanks.
Hi,
Just libliger.so and X509_verify_cert
@pouyadarabi but i got expected a pointer
@pouyadarabi libliger.so dont have function "X509_verify_cert" can you send me this pic https://raw.githubusercontent.com/pouyadarabi/Instagram_SSL_Pinning/master/arm/after.jpg?123 you deleted it
Is there any improvement on the latest version? Read the Data of the Latest Version. I can give you a tip :)
libcrypto.so has X509_verify_cert function. Thanx frida.
handlers/libcrypto.so/X509_verify_cert.js
@gaplan last version ?
@SuhatAkbulak V75 & v76 (alpha) but does not running on this. not calling for Ssl cert
@gaplan What version does it work on?
@SuhatAkbulak i dunno, i'll try older versions. (yenilerinde bu yok. arıyorum yerini)
@gaplan Şener Şen ❤️
@gaplan pls add your skype Skype=instabayi
@SuhatAkbulak I'm going to take out all the keys. Soon.
@gaplan please contact me
Suhat naber?
@gokaybiz Sizleri sormalı
Are u inspired from whitehat mode? I mean, are u cracked that feature? Or something else?
Hey, I'd like to create a dynamic patch using Frida. Do you have an article / write up explaining your patch?