Created
December 9, 2024 13:59
-
-
Save ClosedPort22/6b81f2bc95665eead5462d8f9f9e6d48 to your computer and use it in GitHub Desktop.
Frida script for disabling SSL verification for the ABC Listen app
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| /* | |
| Disable SSL certificate verification for the ABC Listen app | |
| https://www.abc.net.au/listen/listenapp | |
| Tested on ABC listen/2024.11.5197 Android API 28 x86 | |
| */ | |
| Java.perform(function () { | |
| // classes4.dex | |
| Java.use("ai.d").verify.implementation = function (host, session) { | |
| console.log("[+] ai.d verify() called. Returning true"); | |
| return true; | |
| } | |
| // https://github.com/google/conscrypt/blob/master/common/src/main/java/org/conscrypt/ConscryptFileDescriptorSocket.java | |
| Java.use("com.android.org.conscrypt.ConscryptFileDescriptorSocket").verifyCertificateChain.implementation = function (certChain, authMethod) { | |
| console.log("[+] conscrypt verifyCertificateChain() called. Not throwing an exception"); | |
| } | |
| }); |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment