search

ac-pm / SSLUnpinning_Xposed

Android Xposed Module to bypass SSL certificate validation (Certificate Pinning).
GNU General Public License v2.0
771 stars 115 forks source link

Hey Ho! #1

Closed ghost closed 8 years ago

ghost commented 8 years ago

This app doesnt work with Twitch, Skrill.

I am used Fiddler4 + Android.

Any ideas?

ac-pm commented 8 years ago

Hi mat0thew,

At this time only JSSE and Apache libraries are hooked. It is possible that these applications are using other libraries. For example Volley or LoopJ.

Soon, other libraries will be included.

ghost commented 8 years ago

Okay, thanks

ghost commented 8 years ago

@ac-pm you will continue to work on the project? an interesting tool for testing applications

rustymagnet3000 commented 8 years ago

Hi @ac-pm,

Any chance you will add support for SSLUnpinning (with Xposed) for apps that use Volley?

I can use your Cydia substrate SSLUnpinning apk. Works perfectly. But when I use the Xposed framework & SSLUnpinning it does not work. It does seem to perform an SSL Strip style functionality but nothing more. I also tried to use the library on the Twitter Android app(which I guess uses Twitter's okhttp?).

Rob