Skip to content

Instantly share code, notes, and snippets.

@sunary

sunary/readme.md

Last active August 13, 2025 02:26
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save sunary/039d52ba3e71022f6062ad6a23d1c4ea to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save sunary/039d52ba3e71022f6062ad6a23d1c4ea to your computer and use it in GitHub Desktop.
Download ZIP
bypass ssl pinning
Raw
readme.md

Decompile android

  • Download apktool from https://ibotpeaches.github.io/Apktool/
  • Unpack apk file: java -jar apktool.jar d app.apk
  • Modify AndroidManifest.xml by adding android:networkSecurityConfig="@xml/network_security_config" attribute to application element.
  • Create file /res/xml/network_security_config.xml with following content:
<?xml version="1.0" encoding="utf-8"?>
<network-security-config>
<base-config>
    <trust-anchors>
        <certificates src="system" />
        <certificates src="user" />
    </trust-anchors>
</base-config>
</network-security-config>
  • Build patched apk: java -jar apktool.jar b app -o app_patched.apk
  • Generate keys to sign apk: keytool -genkey -alias keys -keystore keys
  • Sign apk file: jarsigner -verbose -keystore keys app_patched.apk keys
  • If necessary convert apk to jar for further analysis: d2j-dex2jar.sh app.apk

Source: https://stackoverflow.com/questions/52862256/charles-proxy-for-mobile-apps-that-use-ssl-pinning

rooted device

  • Android：
    JustTrustMe (based on Xposed)
    Android-SSL-TrustKiller (Cydia Substrate)
  • iOS：
    SSL Kill Switch 2 (based on Cydia)
@zetsuHQ
Copy link

zetsuHQ commented Aug 4, 2024

Hey there! On the first command, you switched the position of the tool and the argument, It should be java -jar apktool.jar d app.apk instead of java -jar d apktool.jar app.apk.

@sunary
Copy link
Author

sunary commented Aug 4, 2024

Hey there! On the first command, you switched the position of the tool and the argument, It should be java -jar apktool.jar d app.apk instead of java -jar d apktool.jar app.apk.

Updated, thanks bro

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment