Cert pinning bypass on okHttp
One of the security controls that mobile makes strong use of is certificate pinning.
There is a library that is commonly used by a lot of application development teams called okHttp.
Mix these two together and you have a pretty good recipe for success but what if your application isn’t built to prevent an advisary from tampering with it?
Learn how to bypass this library and defeat certificate pinning in this article.
https://captmeelo.com/pentest/2020/02/24/bypass-okhttp-cert-pinning.html
Categories: General
Comments (0)
Trackbacks (0)
Leave a comment
Trackback
Security Analyst - Jeff Soehner CISSP, GXPN,GPYC,GMOB,GCIH 