Bypass cert pinning on a test app for MITM analysis
何时使用： You need to inspect a Flutter/OkHttp app's traffic and pinning blocks Burp.
前置条件
- Server/skill installed and authenticated — See repo README
步骤
-
Identify pinningDecompile target.apk and find all references to TrustManager / CertificatePinner / Flutter's HttpClient.✓ 已复制→ List of hooks to patch
-
Patch + FridaGenerate a Frida script that no-ops checkServerTrusted across both Java and Flutter paths.✓ 已复制→ Frida .js + run command
结果： Working MITM channel on a test target you own.
注意事项
- Reversing apps you don't have rights to is illegal in most jurisdictions. The skill assumes you've documented authorization. — Reversing apps you don't have rights to is illegal in most jurisdictions. The skill assumes you've documented authorization.