Instantly share code, notes, and snippets. Star 33 ( 33 ) You must be signed in to star a gist Fork 9 ( 9 ) You must be signed in to fork a gist Embed Select an option Embed Embed this gist in your website. Share Copy sharable link for this gist. Clone via HTTPS Clone using the web URL. No results found Learn more about clone URLs Clone this repository at <script src="https://gist.github.com/azenla/37f941de24c5dfe46f3b8e93d94ce909.js"></script> Embed Embed this gist in your website. Share Copy sharable link for this gist. Clone via HTTPS Clone using the web URL. No results found Save azenla/37f941de24c5dfe46f3b8e93d94ce909 to your computer and use it in GitHub Desktop. Embed Embed this gist in your website. Share Copy sharable link for this gist. Clone via HTTPS Clone using the web URL. No results found AngeloD2022 commented Feb 14, 2021 Words cannot describe how thankful I am for this script. Bravo! savandriy commented Apr 15, 2021 Worked like a charm! This is genius! Thank you 🙇‍♂️ sappi13 commented Jun 19, 2021 azenla commented Jun 19, 2021 Use Frida , example Python script usage here: https://github.com/kendfinger/AppleCache/tree/master/tools sappi13 commented Jun 19, 2021 I am doing in below way and it is not doing anything

savandriy commented Jun 20, 2021 I am doing in below way and it is not doing anything @sappi13 This Frida script is for disabling ssl pinning in programs on macOS Catalina. For Android, try using https://github.com/sensepost/objection marvintkl commented Sep 13, 2021 will it work on mojave? marvintkl commented Sep 13, 2021 I'm looking for a way to bypass certificate-pinning for Mac AppStore on 10.14. Is it possible? fr0zenrain commented May 22, 2024 good job.in my test,apple silicon 13.5 has a bug? [ ] Called SSL_CTX_set_custom_verify() Error: expected an integer [ ] Called boringssl_context_set_verify_mode() .... [ ] Called SecTrustEvaluateWithError() [ ] Called SecTrustEvaluate() Error: access violation accessing 0x0 Philip2809 commented Jul 14, 2025 As of Frida 17, they have changed the module api. https://frida.re/news/2025/05/17/frida-17-0-0-released/ Instead of Module.findExportByName('Security', 'SecTrustEvaluate'); it is now Process.getModuleByName('Security').getExportByName('SecTrustEvaluate') So the first lines in the code should be codezi commented Oct 26, 2025 Thank you @azenla for amazing code. And thank you @Philip2809 for the fix. Both of you saved my life. dwilliamsuk commented Mar 19, 2026 Thank you @azenla and @Philip2809 - this combo was the only thing that worked for some system processes that I've been trying to hook to for the past hour. yxm9264 commented Jul 5, 2026 Oh my God, is macOS 26 not working anymore? Failed to attach: unable to read from process memory