crackercat / eris-frida Goto Github PK

Eris-Frida removes certificates checks from android.security.net.config.NetworkSecurityTrustManager class, bypassing Android's native SSL pinning defined by network security config xml file.

• Python 3.7 (Frida does not work on 3.6 for some reason) with frida-tools installed (pip install frida-tools)

• Device running Android 7.0+ connected via USB with frida-server started (check docs). Your device must also be connected to a running adb server.

Use eris.py <app package> to start app instance with SSL pinning bypassed

Example: eris.py com.example.app

Ctrl+C to kill the app process and exit eris.py

• Originally I made Eris Xposed module, but there is no Xposed for Android 9 yet and Frida is supposed to support it, so I made these two little scripts. Still haven't tested them on Pie though.

• Maybe it's just my ROM issue, but most of the times I have to first start eris.py just to get a process spawn timeout (but app does still launch without eris.js applied however) and then start eris.py again and it will restart the app and actually apply eris.js this time.