Notes

OK Google: bypass the authentication!

OK Google: bypass the authentication!

During a recent assessment of a voice application we found a very intriguing vulnerability that, besides being a lot of fun to exploit, demonstrates how the complexity of modern applications,…
Universal Android SSL Pinning Bypass #2

Universal Android SSL Pinning Bypass #2

Following the frida script published last year by Piergiovanni, we found another way to bypass all SSL certificate checks performed by most applications on Android devices, obviously including SSL pinning.…