PwnSec Notes
  • AppSec
    • General Notes
    • Payloads
    • Fuzzing
    • Code Review
    • ReDos
    • SSTI
    • LFI-RFI
    • PHP Tricks
    • Javascript
    • Serialization
    • SQL Injection
    • JWT
    • GraphQL
    • Side Channel
    • Command Execution
    • WebSockets
    • Ruby
    • 0Auth
    • Latex Injection
    • NoSQL
    • JS Analysis
    • Apache Lucene
  • Forensics
    • Basics
    • Network Captures
    • Windows Logs
    • Memory
    • Browser
    • Threat Intelligence
    • Disk
  • Binary-Exploitation
    • Concepts
    • Binary Analysis
    • Debugging
    • Shellcodes
  • Malware-Analysis
    • Memory Mapping
    • Macros
    • Unpacking
    • Analysis
    • Resources
  • Reverse-Engineering
    • GDB basics
    • MASM Basics
    • Decompilers
    • Useful Codes
  • Services
    • SNMP
    • Grafana
    • Consul
  • Network Pentesting
    • C2 Servers
    • Pivoting
    • CrackMapExec
    • Kubernetes
    • Docker
  • MISC
    • Slack
    • Git
    • Pyjails
    • Privilege Escalation
    • Python LOL Code
  • Cloud Hacking
    • AWS S3
    • AWS Cognito
  • Mobile Pentesting
    • Frida
    • ADB
    • Drozer
    • Smali
    • Static Analysis
    • Dynamic Analysis
    • Bypass SSL Pinning
    • APK Labs
    • Android Malwares
    • Abusing Firebase
    • Root Detection
Powered by GitBook
On this page
  1. Mobile Pentesting

Bypass SSL Pinning

PreviousDynamic AnalysisNextAPK Labs

Last updated 1 year ago

SLL Pinning can be bypassed through different methods and differs if its Flutter or Java

  1. apk-mitm, this tool can be used to bypass SSL Pinning through modification of the APK, this will work if the APK is not signed with code certificate, the code certificate will prevent any kind of modifications on the APK.

  2. Manual bypass, you can bypass SSL Pinning through manual modification, decompile the APK and modify res/xml/network_security_config.xml file and remove the CA from it, then compile it and sign it.

  3. Frida, SSL Pinning can be bypassed through Frida scripts for Java APK and Flutter APK.

  4. reFlutter, for Flutter APKs you can use reFlutter to bypass SSL Pinning (method will be in the repo down below)

APK MITM Tool

Frida Scripts

reFlutter Tool

LogoGitHub - shroudedcode/apk-mitm: 🤖 A CLI application that automatically prepares Android APK files for HTTPS inspectionGitHub
LogoFrida CodeShare
LogoGitHub - NVISOsecurity/disable-flutter-tls-verification: A Frida script that disables Flutter's TLS verificationGitHub
https://github.com/ptswarm/reFluttergithub.com
LogoBypass SSL Pinning for Flutter Apps using reFlutter FrameworkMedium