SSL-Pinning Bypass
mobile · medium · +45 XP
Target
GET /api/lab/ssl-pinning-101/handshake?cert_sha256=... (mock TLS — only the pinned hash accepted)
POST /api/lab/ssl-pinning-101/frida-script body {script} (apply a hook; returns the effective verifier)
GET /api/lab/ssl-pinning-101/api?accept_any=1 (only succeeds AFTER the hook is applied)
Goal: a script that contains both Interceptor.replace and return true (or success_cb()) installs a bypass. Once installed, /api?accept_any=1 returns the flag.
// AI hint · first is free · then 1 credit or 5 XP
// attack console
/api/lab/ssl-pinning-101/
// reuse on the cli
// submit flag
// no solves yet
3 of 12 · mobile