Frida绕开SSL签名验证，通杀

原创

已于 2025-09-25 16:00:35 修改 · 278 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#ssl #python #网络协议

于 2025-06-25 18:52:19 首次发布

脚本

setTimeout(function () {
   
   
    Java.perform(function () {
   
   
        console.log("");
        console.log("[.] Cert Pinning Bypass/Re-Pinning");

        var CertificateFactory = Java.use("java.security.cert.CertificateFactory");
        var FileInputStream = Java.use("java.io.FileInputStream");
        var BufferedInputStream = Java.use("java.io.BufferedInputStream");
        var X509Certificate = Java.use("java.security.cert.X509Certificate");
        var KeyStore = Java.use("java.security.KeyStore");
        var TrustManagerFactory = Java.use("javax.net.ssl.TrustManagerFactory");
        var SSLContext = Java.use("javax.net.ssl.SSLContext");

        // Load CAs from an InputStream
        console.log("[+] Loading our CA...")
        var cf = CertificateFactory.getInstance("X.509");

        try {
   
   
            var fileInputStream = FileInputStream.$new("/data/local/tmp/FiddlerRoot.cer");