Skip to content

v1.0.0: New unpinning script, easier connections on iOS, and lots of improvements and bugfixes

Compare
Choose a tag to compare
@zner0L zner0L released this 12 Jul 15:00
· 18 commits to main since this release
c8078a5

This release brings a lot of improvements and bugfixes, most of them were changes from the new version appstraction. Some of the changes are breaking (marked below).

The most noteable changes include:

  • We have switched from objection to httptoolkit/frida-android-unpinning as our certificate pinning bypass on Android. Learn more about the investigation that motivated this change: tweaselORG/meta#16
  • Connecting to iOS devices via SSH now doesn't require you to specify the device's IP address anymore. Also, the SSH connection now also works with the mobile user, e.g. if the root user is not allowed to log in via SSH.
  • We now require at least Node 18. Running cyanoacrylate on a Node version that is too old would already fail previously, we have just made this explicit.
  • We now expose the events emitted by mitmproxy in the analysis results, which can help you verify your results and debug TLS or connection errors.

What's Changed

Full Changelog: v0.6.3...v1.0.0