How to prevent SSL Pinning Bypass done using Frida in an ipa file

Question

Created Mar ’22

Replies 2

Boosts 0

Views 2.1k

Participants 2

We have SSL certificate pinning handled natively using public key pinning approach in the network layer of our application. Recently we tried to bypass the SSL pinning using Frida CLI by loading a script that can be found here https://codeshare.frida.re/@federicodotta/ios13-pinning-bypass/

And we have used the below command to achieve the SSL pinning bypass in the ipa file of our application running in an iPhone,

frida -U -l sslPinningBypassScript.js ExampleApplication

The ssl bypass was succeeding as you can see below

gow@gow-MacBook-Pro Downloads % frida -U -l sslPinningBypass.js ExampleApplication
     ____
    / _  |   Frida 15.1.17 - A world-class dynamic instrumentation toolkit
   | (_| |
    > _  |   Commands:
   /_/ |_|       help      -> Displays the help system
   . . . .       object?   -> Display information about 'object'
   . . . .       exit/quit -> Exit
   . . . .
   . . . .   More info at https://frida.re/docs/home/
   . . . .
   . . . .   Connected to iPhone (id=60e237ae0552d5906da9c5203954591e8f16abcde)
Attaching...                                                            
[+] Bypass successfully loaded 
[iPhone::ExampleApplication ]->

Is there a way to prevent this ssl pinning bypass happening?

Note: This happens only for the ipa file which is installed manually from our machine and we tried the same steps to bypass for the testflight build which didn't succeed.

Boost

Answer 1

NikeshHid OP

Mar ’22

Yes after this, using Burp suite we can monitor the network traffic. But without this, Burp suite could not monitor network.

0

Answer 2

NikeshHid OP

Mar ’22

Found this [link](https://www.nccgroup.trust/globalassets/newsroom/us/blog/documents/2015/01/bypassing_openssl_pinning.pdf) online. (Refer Page #8) Not really sure how to prevent changing value from SSL_VERIFY_PEER to SSL_VERIFY_NONE.

Do we have any ways to programmatically get the current value of SSL_CTX_set_verify set ?

0