AdguardTeam / AdguardTeam/AdguardForAndroid

Introduce an option for rooted device to turn off SSL pinning

Open
#472 8 comments 0 reactions 0 assignees View on GitHub
Feature request Priority: P4 SSL TechAudit very old task Voting
Dominant language
No language data
Stars
1.9k
Forks
121
PR merge metrics
No merged PRs in 30d

Description

Some popular apps like Facebook, Twitter and such do not allow HTTPS filtering.
For rooted devices we can turn this feature off.

More information here:
http://blog.dewhurstsecurity.com/2015/11/10/mobile-security-certificate-pining.html

A few more articles:
https://serializethoughts.com/2016/08/18/bypassing-ssl-pinning-in-android-applications/
https://serializethoughts.com/2016/09/10/905/

Relevant libraries:
https://github.com/iSECPartners/Android-SSL-TrustKiller
https://github.com/iSECPartners/android-ssl-bypass
https://github.com/ac-pm/SSLUnpinning_Xposed
https://github.com/ac-pm/SSLUnpinning_Cydia
https://github.com/Fuzion24/JustTrustMe/pull/12/files

http://repo.xposed.info/module/mobi.acpm.sslunpinning

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.