Calling the TikTok Signature SO Directly with unidbg
Calling TikTok's signature SO directly with Unidbg, emulating the native library so you can generate valid signatures without running the app, with the algorithm recovered in detail.
Tag: cronet
A General Method for Capturing HTTPS Traffic from Cronet-Based Apps
A general method for capturing HTTPS from Cronet-based apps, working around Chrome's cert pinning and MITM resistance to inspect the traffic, with the setup and commands all covered.
Bypassing SSL Pinning in an App with a Custom HTTP Framework and a Non-System SSL Library
Bypassing SSL pinning when an app rolls its own HTTP framework and links a non-system SSL library like BoringSSL or Cronet, with Frida hooks for each layer.