Bypass cert pinning on a test app for MITM analysis
何時使用： You need to inspect a Flutter/OkHttp app's traffic and pinning blocks Burp.
前置條件
- Server/skill installed and authenticated — See repo README
步驟
-
Identify pinningDecompile target.apk and find all references to TrustManager / CertificatePinner / Flutter's HttpClient.✓ 已複製→ List of hooks to patch
-
Patch + FridaGenerate a Frida script that no-ops checkServerTrusted across both Java and Flutter paths.✓ 已複製→ Frida .js + run command
結果： Working MITM channel on a test target you own.
注意事項
- Reversing apps you don't have rights to is illegal in most jurisdictions. The skill assumes you've documented authorization. — Reversing apps you don't have rights to is illegal in most jurisdictions. The skill assumes you've documented authorization.