Comment on First Open Banking API Sandbox in the UKparentComments−alcari10yIf you can run the app on a jailbroken/rooted device, it's fairly easy to beat certificate pinning in a few different ways. Two that come to mind are:* find the certificate file in the app and replace it with your own.* hook the function that verifies the certificate and make it return true.−neximo410yIf you tried reversing the app in question, none of these methods work as the app has a couple of protections against changing its code.
Comments
If you can run the app on a jailbroken/rooted device, it's fairly easy to beat certificate pinning in a few different ways. Two that come to mind are:
* find the certificate file in the app and replace it with your own.
* hook the function that verifies the certificate and make it return true.
If you tried reversing the app in question, none of these methods work as the app has a couple of protections against changing its code.