3

As part of some school research I'm experimenting with Frida to see what can be done to bypass SSLpinning.

As I was hooking some methods of an application that throw SSLPeerUnverifiedException I logged the error argument saying: Certificate transparency failed.

I tried to inform myself about certificate transparency and concluded that the error was raised because my proxy-certificate that I was using was not found in the transparency log.

Is this assumption correct and is this also something that can be bypassed using Frida?

1

1 Answer 1

1

It can be patched by hooking the right function of your app which checks these peers with Frida. You then always return true and you will have disabled certificate transparency

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.