Bypass cert pinning on a test app for MITM analysis
언제 쓸까: You need to inspect a Flutter/OkHttp app's traffic and pinning blocks Burp.
사전 조건
- Server/skill installed and authenticated — See repo README
흐름
-
Identify pinningDecompile target.apk and find all references to TrustManager / CertificatePinner / Flutter's HttpClient.✓ 복사됨→ List of hooks to patch
-
Patch + FridaGenerate a Frida script that no-ops checkServerTrusted across both Java and Flutter paths.✓ 복사됨→ Frida .js + run command
결과: Working MITM channel on a test target you own.
함정
- Reversing apps you don't have rights to is illegal in most jurisdictions. The skill assumes you've documented authorization. — Reversing apps you don't have rights to is illegal in most jurisdictions. The skill assumes you've documented authorization.