Bypass cert pinning on a test app for MITM analysis
使うタイミング： You need to inspect a Flutter/OkHttp app's traffic and pinning blocks Burp.
前提条件
- Server/skill installed and authenticated — See repo README
フロー
-
Identify pinningDecompile target.apk and find all references to TrustManager / CertificatePinner / Flutter's HttpClient.✓ コピーしました→ List of hooks to patch
-
Patch + FridaGenerate a Frida script that no-ops checkServerTrusted across both Java and Flutter paths.✓ コピーしました→ Frida .js + run command
結果： Working MITM channel on a test target you own.
注意点
- Reversing apps you don't have rights to is illegal in most jurisdictions. The skill assumes you've documented authorization. — Reversing apps you don't have rights to is illegal in most jurisdictions. The skill assumes you've documented authorization.