Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Python 

Cert Pinning Web Requests

Having trouble pinning certs on web requests for python 3.

I've tried a lot but nothing is working. I need to get the SSL fingerprint before communicating.

It's to stop tampering with fiddler right now. I want to ignore the system CA trust chain and just verify the hash of the cert incoming in python myself.

Done lots of googling but I can't seem to find any solutions to this.
(Dec 28, 2018 05:06 AM)05317832892 Wrote:  Having trouble pinning certs on web requests for python 3.

I've tried a lot but nothing is working. I need to get the SSL fingerprint before communicating.

It's to stop tampering with fiddler right now. I want to ignore the system CA trust chain and just verify the hash of the cert incoming in python myself.

Done lots of googling but I can't seem to find any solutions to this.


If you can use python2.x there is this module which is exactly what you’re looking for

https://pypi.org/project/M2Crypto/

Sadly not supported by python3 and I don’t know a similar module for it. Still possible just no so quick and easy
(Dec 28, 2018 07:32 AM)FriendZone Wrote:  If you can use python2.x there is this module which is exactly what you’re looking for

https://pypi.org/project/M2Crypto/

Sadly not supported by python3 and I don’t know a similar module for it. Still possible just no so quick and easy

Yeah that look good but I got a solution finally.

Requests has a TrustEnvironment = False thingy and it works perfectly.


Possibly Related Threads...
Thread / Author Replies Views Last Post
[Python] by evilgnomeJan 11, 2022 05:39 AM 2 195 Jan 11, 2022 05:39 AM
Last Post: Charger
[C#] by Y3LI0NZMar 7, 2017 10:01 AM 2 160 Mar 7, 2017 10:01 AM
Last Post: Ninja
[Shell] by D3FR4GDec 12, 2016 02:55 PM 0 115 Dec 12, 2016 02:55 PM
Last Post: D3FR4G