Skip to content

A simple Python script which patches the security configuration of an Android APK file to trust user root certificatesfor bypass SSL-pinning.

Notifications You must be signed in to change notification settings

aniruddhmistry/unpinning-ssl

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

5 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Unpinning-ssl-android

A simple Python script which patches the security configuration of an Android APK file to trust user root certificatesfor bypass SSL-pinning.

Requirements

  • Python3
  • Java

How to Run

git clone https://github.com/aniruddhmistry/unpinning-ssl.git
cd unpinning-ssl


python unpinning-ssl.py <APK filename>

How it works

  1. Decompile the APK file using APKtool
  2. Modify AndroidManifest.xml and network_security_config.xml to trust user certificate
  3. Recompile the APK file using APKtool
  4. Sign the APK file using uber-apk-signer

References

About

A simple Python script which patches the security configuration of an Android APK file to trust user root certificatesfor bypass SSL-pinning.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Languages