SSLUnpinning - Certificate Pinning Bypass
If you need to intercept the traffic from an app which uses certificate pinning, with a tool like Burp Proxy, the SSLUnpinning will help you with this hard work!
The SSLUnpinning through Xposed Framework, makes several hooks in SSL classes to bypass the certificate verifications for one specific app, then you can intercept all your traffic.
API
-----------
Java Secure Socket Extension (JSSE)
- javax.net.ssl.*
APACHE
- org.apache.http.conn.ssl.*
OKHTTP
- okhttp3.*
*Attention:* I'm working in a new suite of tools that include SSLUnpinning feature and many, many others! Look here -> https://github.com/ac-pm/Inspeckage
Support/Discussion URL:
Source code URL:
Package:
mobi.acpm.sslunpinning
Version name:
2.0
Release type:
Stable (low risk of bugs)
Download:
mobi.acpm.sslunpinning_v2_37f44f.apk (1.02 MB)
Number of downloads:
23,496 in total · 59 in the last 24 hours
MD5 checksum:
37f44f9279c719dff575363f09bf2d58
Uploaded on:
Monday, September 12, 2016 - 05:48
Changes:
Added XPrefs instead of read/write file, okhttp3 pinning hooked and list all apps after user apps.
Version name:
1.0
Release type:
Beta (some bugs to be expected)
Download:
mobi.acpm.sslunpinning_v1_3e3f6e.apk (1.04 MB)
Number of downloads:
3,602 in total · 0 in the last 24 hours
MD5 checksum:
3e3f6eb0f04ebcf13aff66d57a1323fc
Uploaded on:
Friday, October 9, 2015 - 16:25