Skip to content

[bug] android sslpinning disable error #776

@denevin

Description

@denevin

Describe the bug
"android sslpinning disable" command not working in objection v1.12.2 for application i'm testing.

To Reproduce
run "android sslpinning disable" command in v1.12.2

Similar issues
#752

Expected behavior
"android sslpinning disable" to run without errors

Evidence / Logs / Screenshots

$ objection -g <APP NAME> explore
|___|(object)inject(ion) v1.11.0
<APP NAME> on (google: 12) [usb] # android sslpinning disable
(agent) Custom TrustManager ready, overriding SSLContext.init()
(agent) Found okhttp3.CertificatePinner, overriding CertificatePinner.check()
(agent) Found okhttp3.CertificatePinner, overriding CertificatePinner.check$okhttp()
(agent) Found com.android.org.conscrypt.TrustManagerImpl, overriding TrustManagerImpl.verifyChain()
(agent) Found com.android.org.conscrypt.TrustManagerImpl, overriding TrustManagerImpl.checkTrustedRecursive()
(agent) Registering job 700545. Type: android-sslpinning-disable

$ objection -n "<APP NAME>" start
.........
      |___|(object)inject(ion) v1.12.2
.........
<APP NAME> (run) on (Android: 12) [usb] # android sslpinning disable
(agent) Custom TrustManager ready, overriding SSLContext.init()
(agent) Found okhttp3.CertificatePinner, overriding CertificatePinner.check()
(agent) Found okhttp3.CertificatePinner, overriding CertificatePinner.check$okhttp()
A Frida agent exception has occurred.
Error: check$okhttp(): specified argument types do not match any of:
	.overload('java.lang.String', 'kotlin.jvm.functions.Function0')
    at throwOverloadError (/src/index.js:12432)
    at value (/src/index.js:12320)
    at <anonymous> (/src/index.js:20721)
    at <anonymous> (/src/index.js:13540)
    at <anonymous> (/src/index.js:2847)
    at perform (/src/index.js:13339)
    at <anonymous> (/src/index.js:13544)
    at Promise (native)
    at wrapJavaPerform (/src/index.js:13545)
    at okHttp3CertificatePinnerCheckOkHttp (/src/index.js:20735)
    at disable (/src/index.js:20846)

Python stack trace: Traceback (most recent call last):
  File "/Users/test/Library/Python/3.11/lib/python/site-packages/objection/console/repl.py", line 362, in run
    self.run_command(document)
  File "/Users/test/Library/Python/3.11/lib/python/site-packages/objection/console/repl.py", line 170, in run_command
    exec_method(arguments)
  File "/Users/test/Library/Python/3.11/lib/python/site-packages/objection/commands/android/pinning.py", line 26, in android_disable
    api.android_ssl_pinning_disable(_should_be_quiet(args))
  File "/Users/test/Library/Python/3.11/lib/python/site-packages/frida/core.py", line 180, in method
    return script._rpc_request(request, data, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/Users/test/Library/Python/3.11/lib/python/site-packages/frida/core.py", line 86, in wrapper
    return f(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^
  File "/Users/test/Library/Python/3.11/lib/python/site-packages/frida/core.py", line 497, in _rpc_request
    raise result.error
frida.core.RPCException: Error: check$okhttp(): specified argument types do not match any of:
	.overload('java.lang.String', 'kotlin.jvm.functions.Function0')
    at throwOverloadError (/src/index.js:12432)
    at value (/src/index.js:12320)
    at <anonymous> (/src/index.js:20721)
    at <anonymous> (/src/index.js:13540)
    at <anonymous> (/src/index.js:2847)
    at perform (/src/index.js:13339)
    at <anonymous> (/src/index.js:13544)
    at Promise (native)
    at wrapJavaPerform (/src/index.js:13545)
    at okHttp3CertificatePinnerCheckOkHttp (/src/index.js:20735)
    at disable (/src/index.js:20846)

Environment (please complete the following information):

  • Device: [Pixel 3a]
  • OS: [Android 12]
  • Frida Version [16.7.19, 17.4.0, 17.5.1]
  • Objection Version [1.12.2]

Application
Unable to share application

Metadata

Metadata

Assignees

No one assigned

    Labels

    freshissueDefault label for new, untriaged issues.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions