themalwarenews / frida_rootandsslbypass

With this script you can bypass both root detection and ssl pinning for your android app.

frida_rootandsslbypass

██████╗  ██████╗  ██████╗ ████████╗     █████╗ ███╗   ██╗██████╗     ███████╗███████╗██╗         ██████╗ ██╗   ██╗██████╗  █████╗ ███████╗███████╗
██╔══██╗██╔═══██╗██╔═══██╗╚══██╔══╝    ██╔══██╗████╗  ██║██╔══██╗    ██╔════╝██╔════╝██║         ██╔══██╗╚██╗ ██╔╝██╔══██╗██╔══██╗██╔════╝██╔════╝
██████╔╝██║   ██║██║   ██║   ██║       ███████║██╔██╗ ██║██║  ██║    ███████╗███████╗██║         ██████╔╝ ╚████╔╝ ██████╔╝███████║███████╗███████╗
██╔══██╗██║   ██║██║   ██║   ██║       ██╔══██║██║╚██╗██║██║  ██║    ╚════██║╚════██║██║         ██╔══██╗  ╚██╔╝  ██╔═══╝ ██╔══██║╚════██║╚════██║
██║  ██║╚██████╔╝╚██████╔╝   ██║       ██║  ██║██║ ╚████║██████╔╝    ███████║███████║███████╗    ██████╔╝   ██║   ██║     ██║  ██║███████║███████║
╚═╝  ╚═╝ ╚═════╝  ╚═════╝    ╚═╝       ╚═╝  ╚═╝╚═╝  ╚═══╝╚═════╝     ╚══════╝╚══════╝╚══════╝    ╚═════╝    ╚═╝   ╚═╝     ╚═╝  ╚═╝╚══════╝╚══════╝
                                                                                                                                                  

This is combined bypass script for root and SSL.

---

To run script type below command

frida -U -l rootandsslbypass.js -f <package_name> --no-pause

Feel free to notify us for any errors 🙂

Follow us on :

frida_rootandsslbypass's Issues

bouncy Castle ssl pinning

hello can you help on bypassing sslpinning of an apk that is using bouncy Castle ssl pinning ?

Process terminated

I've been trying the script but this what I got

     ____
    / _  |   Frida 16.1.3 - A world-class dynamic instrumentation toolkit
   | (_| |
    > _  |   Commands:
   /_/ |_|       help      -> Displays the help system
   . . . .       object?   -> Display information about 'object'
   . . . .       exit/quit -> Exit
   . . . .
   . . . .   More info at https://frida.re/docs/home/
   . . . .
   . . . .   Connected to 2201116TG (id=RKNJHMEE5PIB7LOJ)
Spawned `mobi.foo.zaincash`. Resuming main thread!
[2201116TG::mobi.foo.zaincash ]-> Horangi - Bypass Flutter SSL Pinning
message: {'type': 'send', 'payload': 'Loaded 28245 classes!'} data: None
message: {'type': 'send', 'payload': 'loaded: -1'} data: None
message: {'type': 'send', 'payload': 'ProcessManager hook not loaded'} data: None
Process terminated
[2201116TG::mobi.foo.zaincash ]->

Thank you for using Frida!```