Skip to content

Instantly share code, notes, and snippets.

@ClosedPort22
Created December 9, 2024 13:59
Show Gist options
  • Select an option

  • Save ClosedPort22/6b81f2bc95665eead5462d8f9f9e6d48 to your computer and use it in GitHub Desktop.

Select an option

Save ClosedPort22/6b81f2bc95665eead5462d8f9f9e6d48 to your computer and use it in GitHub Desktop.
Frida script for disabling SSL verification for the ABC Listen app
/*
Disable SSL certificate verification for the ABC Listen app
https://www.abc.net.au/listen/listenapp
Tested on ABC listen/2024.11.5197 Android API 28 x86
*/
Java.perform(function () {
// classes4.dex
Java.use("ai.d").verify.implementation = function (host, session) {
console.log("[+] ai.d verify() called. Returning true");
return true;
}
// https://github.com/google/conscrypt/blob/master/common/src/main/java/org/conscrypt/ConscryptFileDescriptorSocket.java
Java.use("com.android.org.conscrypt.ConscryptFileDescriptorSocket").verifyCertificateChain.implementation = function (certChain, authMethod) {
console.log("[+] conscrypt verifyCertificateChain() called. Not throwing an exception");
}
});
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment