简体   繁体   中英

How to detect SSL pinning is being done in the app?

我已经讲完了如何在Android上检测SSL固定

If you setup SSL interception with tools like mitmproxy or Burp and then import the proxy CA of this interception proxy into the android certificate store as trusted then you should be able to intercept the connection, ie get the plain text. If instead the application fails and maybe throws out some error about failing SSL verification than this application is probably doing SSL pinning.

The technical post webpages of this site follow the CC BY-SA 4.0 protocol. If you need to reprint, please indicate the site URL or the original address.Any question please contact:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM