MaxToyberman
SSL Pinning is Bypassed through Frida
I am creating an android application which is able to ping the server for certain information and return them. There are a few methods by which a user can bypass the pinned SSL certificate of an android application by using tools like Frida, Objection, etc. Is there a way to prevent the bypass of SSL certificate in android. so that, the user cannot be able to see the traffic? (assume the user phone is rooted)
Package Used: react-native-ssl-pinning
You can Implement AntiFrida Detection for Android. https://github.com/darvincisec/DetectFrida
How implement it? There is not any doc to follow, and install it.
@RogerBrusamarello Just follow the sample in GitHub. it's an Android Project. you can do the same for your project.
Ex: in Gradle you have to add this code.
externalNativeBuild { cmake { path "src/main/c/CMakeLists.txt" version "3.10.2" } }