SSL pinning bypass (PART2)

-

SSL pinning bypass (PART2)

Link for the PART1 of this blog:- https://careertechnologycybersecurityindia.blogspot.com/2023/10/ssl-pinning-bypass-for-android.html

Steps to setup:-

👉 Connect device to adb.

1. Enable Developer Options and USB Debugging on the Android Device:-
Go to the device's "Settings" app > Scroll down and find "About Phone" > Locate the "Build Number" entry and tap it repeatedly (usually 7 times) until you see a message saying "You are now a developer!" or similar > Now, go back to the main "Settings" screen, and you should see a new option called "Developer Options." > Inside "Developer Options," enable "USB Debugging." This allows your device to communicate with a computer via ADB.




2.Connecting an Android device to the Android Debug Bridge (ADB) to enable communication and allow you to run commands on the device:-
--Open a command prompt or terminal window on your computer > Run the following commands:
cd path\to\platform-tools
adb connect 192.168.1.190:5555
(192.168.1.190 should be replaced with the actual IP address of your Android device. 5555 is the default port used for ADB connections.)
--To check if device is connected to adb:
Command: adb devices


👉Download frida server. 

1.Download frida server for supported android device’s arch version:-
To find out the arch version of the device, run following command: adb shell getprop ro.product.cpu.abi
Here I have downloaded "frida-server-12.4.7-android-x86.xz".

Open the link > main > tags > 12.7.4

Code > Download ZIP

2.Frida Server Setup:-
--Now we need to push our frida-server file into device. Extract and Copy “frida-server-12.4.7-android-x86” file in adb folder rename file as “frida-server”. After this, run following command: adb push <path_of_frida_server_folder> /data/local/tmp
--Give permissions to frida-server.
Command: adb shell chmod 777 /data/local/tmp/frida-server


👉Setting up Burp Suite as a proxy for an Android device

1.Connect Your Android Device to the Same Network
2.Obtain Your Computer's IP Address
3.Configure Android Device
Settings > Wi-Fi > Long-press on your connected Wi-Fi network, then select "Modify network" or "Edit network > Set the proxy settings as (Proxy: Manual, Proxy hostname: Enter your computer's IP address, Proxy port: Enter the Burp Suite proxy port) > Save the settings and exit.





Comments

Post a Comment

Popular posts from this blog

CAREER TECHNOLOGY CYBER SECURITY INDIA PVT LTD.

-
Image
CAREER TECHNOLOGY CYBER SECURITY INDIA PVT  LTD. ISO 27001:2013, ISO 9001:2015 Certified  Company         INTERNATIONALLY AUTHORISED FOR CYBER FORENSICS, CYBER SECURITY, CYBER AUDIT TRAINING & EXAM CENTER BY MILE2 CYBER SECURITY United States First ATC of Mile 2 Cyber Security in Mumbai & MIRA-BHAYANDER / VASAI-VIRAR, Since JAN 2017. Offline as well as Online batches both are available. PG accommodation for students is available. Joi n   CAREER TECHNOLOGY CYBER SE CURITY INDIA  PVT LTD.   Today  To Start Your  Career In  Cyber Security. * OUR PROFESSIONAL DIPLOMA COURSES FOR  ALL  UNDERGRADUATE ,    GRADUATE ,  AND  WORKING PROFESSIONALS* __ ______________________________________________________________________ Why do you have to choose our institute? 1. Our Diploma is Authorised by the Indian Government as well as its full copyright & Trademark by ISO. IT will help you to add Extra Technical Skills in     Your Resume. Its Contains Full Practicals Knowledge from the In
Read more

Some Dark web Links

-
Image
Here are some of the Forum/Website to visit on dark web related to cybersecurity and hacking. Before visiting this website please follow the steps to be safe on the dark web/ Deepweb. Security Steps to be taken before opening the links: First of All, To browse these dark web forums, first close all active programs and applications in your computer then start Your NordVPN or any Paid and HQ VPN that have TOR service and select Onion Over VPN Server.  Now start Tor Browser and disable Javascript. In this way, you have created a completely secure and untraceable environment for you. If you think Tor Browser gives you full anonymity then you are wrong.  Only premium VPN services can provide you fully secure and untraceable environment. I have tried my hands on many premium VPN services, and I found NordVPN beats its competitor in all features. Disclaimer ⚠ : This info are shared for educational purpose only, neither the website nor creator hold any info or liable to any
Read more

Cyber Security Audits

-
Image
 Cyber Security Audits What is Cyber Security Audit?                 A cyber audit, at its core, refers to a systematic evaluation and assessment of an organization's information systems. This evaluation is designed to identify potential vulnerabilities, non-compliance with standards, and areas of improvement in both technology and processes, all with the aim of safeguarding digital assets against potential threats. Cyber audits delve deeply into the organization's technological infrastructure, scrutinizing hardware, software, networks, and even the practices and protocols that users and administrators follow. This in-depth review allows for a holistic understanding of the current cybersecurity posture of the entity and helps in crafting more robust and resilient digital environments. The rationale behind conducting a cyber audit often stems from both internal and external pressures. Internally, management recognizes the intrinsic value of their digital assets, understanding th
Read more