Disabling certificate pinning topic

Hello there!

I'm currently assigned to assess the security of a new mobile application, and I'm mainly interested in sniffing the communication between the app and the server.
However, I noticed that the developers have implemented certificate pinning, which means that the app will refuse to submit login credentials unless the obtained certificate really belongs to a certain server. So I've been trying to disable that function in order to intercept the submitted requested using Burp Proxy.

What I did was basically decompiling the APK file using "APK Studio" and "Java Decompiler" in order to modify a couple of classes that appear to be responsible for validating the obtained certificate ("TrustManager" and "PubKeyManager") but have so far failed with all my attempts.

So I'm attaching the .apk file to check if anyone of you is willing to help by having a look at the code and advise me what really needs to be modified in order to disable certificate pinning.

Thanks in advance for any help you might be able to provide!! :o

Attached Files

NEWAPP.rar - [Click for QR Code] (2.46 MB)

[Q] Trouble disabling Google+ photos. Trying to change default gallery. topic

Is there any way to get rid of Google+ photos as a gallery option? I'm having a couple of apps choose it's browser as a default, and want to change it to Gallery, the stock OPO app.

[Q] Instrumentation detected, disabling framework topic

Hi,

I'm trying to run Monkey along with Emma to measure code coverage of the test cases. Emma is a tool which instrument applications in order to compute coverage criteria. In addition, I developed an Xposed module to record path information in log file. However, when I run the instrumented app using Monkey, I get the following message in the log file:

Instrumentation detected, disabling framework for "name of the app".

Is there any way to resolve this issue? Is this something general that I'm missing? That Xposed does not work on instrumented apps?

I appreciate your helps :)

Regards,
Reyhan

Disabling Popups topic

Hi there. I'm not sure if I'm posting in the right section, but I need help. This popup has been irritating me and appears every time I refresh Forum.xda.
I've cleared Data on Chrome, cleared Cache, and also Disabled Popup through settings of Chrome. If you have any other solution besides this, please post it here. Thanks

Attached Thumbnails

 

Lockscreen fingerprint disabling "enter backup password" notification topic

Hello guys

I really love my note but I use my fingerprint to unlock my phone and what really annoys me is that I have to read every time "enter backup password". is it possible to disable or to customize this notification?

Thank you