I found an x509 certificate hardcoded in an application and after looking into the code I found that is used to validate certificates(SSL pinning). Can I bypass SSL pinning with the certificate that I found?
Can I bypass SSL pinning with the certificate that I found?
The certificate is not the secret thing, the private key matching the certificate is. This key is only known to the server and it proves ownership of the key during TLS handshake. Thus knowledge of the certificate does not provide a way to impersonate as the server in order to bypass certificate pinning.
What you might be able to do is to patch the application to use a different certificate for pinning, i.e. your own where you know the private key.