httptoolkit/frida-interception-and-unpinning
1
0
Fork 0
mirror of https://github.com/httptoolkit/frida-interception-and-unpinning.git synced 2026-10-04 23:12:33 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix config PinSet unpinning script for Android 15+

Browse Source
This commit is contained in:
Tim Perry
2026-07-31 16:12:47 +02:00
parent d4e783feee
commit 6efeaa21e3
1 changed files with 9 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
android/android-certificate-unpinning.js
+9 -2
View File
@@ -162,9 +162,16 @@ const PINNING_FIXES = {
replacement: (targetMethod) => {
const PinSet = Java.use('android.security.net.config.PinSet');
const EMPTY_PINSET = PinSet.EMPTY_PINSET.value;
// The pins position in the constructor moves between Android versions (Android
// 15 inserted a certificate transparency argument) so match args by type:
const pinsIndex = targetMethod.argumentTypes.findIndex(
(argType) => argType.className === 'android.security.net.config.PinSet'
);
return function () {
// Always ignore the 2nd 'pins' PinSet argument entirely:
arguments[2] = EMPTY_PINSET;
// Always ignore the 'pins' PinSet argument entirely:
if (pinsIndex !== -1) arguments[pinsIndex] = EMPTY_PINSET;
targetMethod.call(this, ...arguments);
}
}