#certificatepinning — Public Fediverse posts

Aurora Store is implementing #CertificatePinning when connecting to Google Play to make you more secure while having the ability to download, install, and automatically update apps anonymously
https://gitlab.com/AuroraOSS/AuroraStore/-/commit/c6989a1038a0e37bec28f02cf1fb7d876d5fb2ff

Aurora Store is implementing #CertificatePinning when connecting to Google Play to make you more secure while having the ability to download, install, and automatically update apps anonymously
https://gitlab.com/AuroraOSS/AuroraStore/-/commit/c6989a1038a0e37bec28f02cf1fb7d876d5fb2ff

Aurora Store is implementing #CertificatePinning when connecting to Google Play to make you more secure while having the ability to download, install, and automatically update apps anonymously
https://gitlab.com/AuroraOSS/AuroraStore/-/commit/c6989a1038a0e37bec28f02cf1fb7d876d5fb2ff

Aurora Store is implementing #CertificatePinning when connecting to Google Play to make you more secure while having the ability to download, install, and automatically update apps anonymously
https://gitlab.com/AuroraOSS/AuroraStore/-/commit/c6989a1038a0e37bec28f02cf1fb7d876d5fb2ff

Aurora Store is implementing #CertificatePinning when connecting to Google Play to make you more secure while having the ability to download, install, and automatically update apps anonymously
https://gitlab.com/AuroraOSS/AuroraStore/-/commit/c6989a1038a0e37bec28f02cf1fb7d876d5fb2ff

Aurora Store is implementing #CertificatePinning when connecting to Google Play to make you more secure while having the ability to download, install, and automatically update apps anonymously
https://gitlab.com/AuroraOSS/AuroraStore/-/commit/c6989a1038a0e37bec28f02cf1fb7d876d5fb2ff

Aurora Store is implementing #CertificatePinning when connecting to Google Play to make you more secure while having the ability to download, install, and automatically update apps anonymously
https://gitlab.com/AuroraOSS/AuroraStore/-/commit/c6989a1038a0e37bec28f02cf1fb7d876d5fb2ff

Aurora Store is implementing #CertificatePinning when connecting to Google Play to make you more secure while having the ability to download, install, and automatically update apps anonymously
https://gitlab.com/AuroraOSS/AuroraStore/-/commit/c6989a1038a0e37bec28f02cf1fb7d876d5fb2ff

Aurora Store is implementing #CertificatePinning when connecting to Google Play to make you more secure while having the ability to download, install, and automatically update apps anonymously
https://gitlab.com/AuroraOSS/AuroraStore/-/commit/c6989a1038a0e37bec28f02cf1fb7d876d5fb2ff

Aurora Store is implementing #CertificatePinning when connecting to Google Play to make you more secure while having the ability to download, install, and automatically update apps anonymously
https://gitlab.com/AuroraOSS/AuroraStore/-/commit/c6989a1038a0e37bec28f02cf1fb7d876d5fb2ff

Here is to going down a rabbit hole for days on end!
I wish I could pause time for research.
#MITM #TLS #PFS #CertificatePinning

SSL/x509 certificate/public key expiration

https://security.stackexchange.com/questions/269132/ssl-x509-certificate-public-key-expiration

#publickeyinfrastructure #certificatepinning #certificates #x509 #tls

SSL/x509 certificate/public key expiration

https://security.stackexchange.com/questions/269132/ssl-x509-certificate-public-key-expiration

#publickeyinfrastructure #certificatepinning #certificates #x509 #tls

SSL/x509 certificate/public key expiration

https://security.stackexchange.com/questions/269132/ssl-x509-certificate-public-key-expiration

#publickeyinfrastructure #certificatepinning #certificates #x509 #tls

SSL/x509 certificate/public key expiration

https://security.stackexchange.com/questions/269132/ssl-x509-certificate-public-key-expiration

#publickeyinfrastructure #certificatepinning #certificates #x509 #tls

Went into the rabbit hole of IL2CPP Unity based application on Android, and learned a lot on Frida, Ghidra, and everything in between - so much information is out there but it’s a mess.
Information is scattered and fragmented, reminds me of the early days of DVD Ripping - people were making money out of it - so information was valuable and not shared.
I still haven’t figured out how to TLS unpin this app, all the methods found in GitHub, Frida and the numerous blogposts don’t work - Unity has introduced some sort of protection that I can’t get around.
Hope to figure it out eventually and share my findings in a blogpost.
If you have experience with #frida #unity #certificatepinning bypassing - and want to look at the challenge let me know :)

Went into the rabbit hole of IL2CPP Unity based application on Android, and learned a lot on Frida, Ghidra, and everything in between - so much information is out there but it’s a mess.
Information is scattered and fragmented, reminds me of the early days of DVD Ripping - people were making money out of it - so information was valuable and not shared.
I still haven’t figured out how to TLS unpin this app, all the methods found in GitHub, Frida and the numerous blogposts don’t work - Unity has introduced some sort of protection that I can’t get around.
Hope to figure it out eventually and share my findings in a blogpost.
If you have experience with #frida #unity #certificatepinning bypassing - and want to look at the challenge let me know :)