• caglararli@hotmail.com
  • 05386281520

Possible to use Frida to capture secret for jwt signature?

Çağlar Arlı      -    24 Views

Possible to use Frida to capture secret for jwt signature?

I have used frida to bypass certificate pinning of an app and was able to capture http traffic. But I notice that the authorization bearer uses JWT with a signature (over a timetamp). So I was wondering if I can hook any functions in frida that would give me the secret that is used to generate the signature over the JWT header and payload?