Cracking Meta’s Messenger Certificate Pinning on macOS

Meta’s Messenger application for macOS is similar to the Texts.com model, with a standalone desktop application. Certificate pinning is implemented by Meta, preventing a MITM attack on requests made to their servers. The desired behavior is to read request information using a MITM attack. One approach is to alter the binary to disable certificate pinning. By changing just 4 bytes of the binary, the requests can now be intercepted. A similar method was used on Instagram for iOS in 2020. After compiling the modified binary, it can be distributed and used to view requests. (Approx. 179 words)

https://texts.blog/2024/02/20/cracking-metas-messenger-certificate-pinning-on-macos/

To top