domains / families / security / performing-mobile-app-certificate-pinning-bypass

performing-mobile-app-certificate-pinning-bypass

separate

'Bypasses SSL/TLS certificate pinning implementations in Android and

When to use

• Mobile app refuses connections through a proxy due to certificate pinning
• Performing authorized security testing requiring HTTPS traffic interception
• Assessing the strength and bypass difficulty of pinning implementations
• Evaluating defense-in-depth of mobile app network security

When not to use

• bypassing pinning on apps without explicit testing authorization

Skill page

Source