CODEWITHSUNDEEP
androidssl-security
Gaurav Sarma
Gaurav Sarma

Reputation: 2297

How to detect SSL pinning is being done in the app?

I have already gone through this How to detect SSL pinning on Android

Upvotes: -1

Views: 3283

Answers (1)

Steffen Ullrich
Steffen Ullrich

Reputation: 123531

If you setup SSL interception with tools like mitmproxy or Burp and then import the proxy CA of this interception proxy into the android certificate store as trusted then you should be able to intercept the connection, i.e. get the plain text. If instead the application fails and maybe throws out some error about failing SSL verification than this application is probably doing SSL pinning.

Upvotes: 4

Related Questions