Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .gitignore
Original file line number Diff line number Diff line change
@@ -1,4 +1,5 @@
node_modules/
mono-api/
bin/
obj/
*.dll
Expand Down
17 changes: 13 additions & 4 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,3 +1,13 @@
# Frida 17 Compatibility Fork

This branch (`frida-17`) is a community fork of [`GoSecure/frida-xamarin-unpin`](https://github.com/GoSecure/frida-xamarin-unpin), updated to work with the [Module API changes introduced in Frida 17.0.0 (May 2025)](https://frida.re/news/2025/05/17/frida-17-0-0-released/) — most notably the removal of `Module.findExportByName` and the rest of the static `Module.*` helpers, which caused the original bundled `dist/xamarin-unpin.js` to crash at module-load time under Frida 17.x with `TypeError: not a function`.

The bundled `dist/xamarin-unpin.js` was rebuilt against [`ymuuuu/frida-mono-api@frida-17`](https://github.com/ymuuuu/frida-mono-api/tree/frida-17), itself a small fork of [`freehuntx/frida-mono-api`](https://github.com/freehuntx/frida-mono-api) (and the [`extra` branch maintained by GoSecure](https://github.com/GoSecure/frida-mono-api/tree/extra)) that contains the API migration.

**Credits:** all credit for the original projects goes to the upstream authors — [GoSecure](https://github.com/GoSecure) for the Xamarin pinning bypass and [@freehuntx](https://github.com/freehuntx) for the underlying `frida-mono-api`. This fork is a small community contribution submitted back upstream as [GoSecure/frida-xamarin-unpin#19](https://github.com/GoSecure/frida-xamarin-unpin/pull/19) and [GoSecure/frida-mono-api#1](https://github.com/GoSecure/frida-mono-api/pull/1).

---

# Xamarin Certificate Pinning Bypass

This is a small Frida script to bypass Mono-based certificate pinning.
Expand Down Expand Up @@ -72,12 +82,11 @@ If you want to build the APK or Frida script to play around, follow the instruct

## Building and Running the Frida Script

- Clone the modified `frida-mono-api` in this repository's root.
- Clone the patched `frida-mono-api` (Frida 17 compatible) in this repository's root.
```
git clone https://github.com/GoSecure/frida-mono-api mono-api
cd mono-api && git switch extra
cd ..
git clone -b frida-17 https://github.com/ymuuuu/frida-mono-api mono-api
```
> Note: the original instructions cloned `GoSecure/frida-mono-api` and switched to the `extra` branch. That branch still uses the removed `Module.findExportByName` API and rebuilding against it would re-introduce the `TypeError: not a function` crash on Frida 17. Use `ymuuuu/frida-mono-api@frida-17` (above) until [GoSecure/frida-mono-api#1](https://github.com/GoSecure/frida-mono-api/pull/1) is merged.
- Run `npm i && npm run build`
- Ensure you have frida installed (`pip install frida frida-push`)
- Start the test Application on your Android device
Expand Down
7 changes: 4 additions & 3 deletions dist/xamarin-unpin.js

Large diffs are not rendered by default.

Loading