Open
Description
About the issue
There is an Android app which demo ssl-pinning: https://github.com/httptoolkit/android-ssl-pinning-demo.
Try disable its ssl-pinning with Objection
(command android sslpinning disable
) fails for Okhttp3
library:
Spot the bug in Objection
's frida scripts
In file agent.js
, function const okHttp3CertificatePinnerCheckOkHttp = (ident) => {...}
. The issue is red-underlined code bellow:
- Since there is no
check$okhttp
with argument ofu15
type, the code fails to hook into.
Suggest fix
Just hook okhttp3.CertificatePinner.check$okhttp
without overload(...)
- Change the red-underlined code to
const CertificatePinnerCheckOkHttp = certificatePinner.check$okhttp