I'm analysing an iOS application and its communications through Charles. I have access to most of SSL communications but not all, due to certificate pinning.
I know that there are many different ways for defeating certificate pinning, but I'm curious to know if it is possible to do it in this way.
I used this python script (https://github.com/meeee/pushproxy/blob/master/utils/find_certs.py) to surf the iOS executable file and find the certificates hardcoded in use for certificate pinning.
What if I replace the hardcoded certificate in the executable with, let's say, the certificate I created through Charles to get normal SSL traffic? Is it viable? Thanks!