aancw / android-ssl-pinning-signed-demo

A tiny demo app using SSL pinning to block HTTPS MitM interception

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

android-ssl-pinning-demo

Part of HTTP Toolkit: powerful tools for building, testing & debugging HTTP(S)

A tiny demo app using SSL pinning to block HTTPS MitM interception.

Try it out

You can either clone this repo and build it yourself in Android Studio, or download the APK from the releases page and install it with adb install android-ssl-pinning-demo.apk.

Pressing each button will send an HTTP request with the corresponding configuration. The buttons are purple initially or while a request is in flight, and then turn green or red (with corresponding icons, and an error message popped up for failures) when the request succeeds/fails.

On a normal unintercepted device, every button should always immediately go green. On a device whose HTTPS is being intercepted (e.g. by HTTP Toolkit) all except the first button will go red, unless you've used Frida or similar to disable certificate pinning.

A screenshot of the app in action

About

A tiny demo app using SSL pinning to block HTTPS MitM interception

License:Apache License 2.0


Languages

Language:Kotlin 100.0%