---
id: 8148
title: "Four Ways to Bypass Android SSL Verification and Certificate Pinning"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/mobile-application-pentesting/four-ways-bypass-android-ssl-verification-certificate-pinning/"
published_at: "2018-01-09T00:00:00Z"
tags: ["burp-suite", "android", "mobile-security", "ssl-pinning", "mitm", "frida"]
phying_url: "https://phying.com/item/8148"
lang: en
---

# Four Ways to Bypass Android SSL Verification and Certificate Pinning

## Summary

Covers four Android SSL pinning bypass techniques of rising difficulty: injecting a custom CA, swapping packaged certs, hooking checks with Frida, and reversing custom certificate validation code.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2018-01-09T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/mobile-application-pentesting/four-ways-bypass-android-ssl-verification-certificate-pinning/
- **Phying News:** https://phying.com/item/8148