> For the complete documentation index, see [llms.txt](https://mobile.mrw0l05zyn.cl/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://mobile.mrw0l05zyn.cl/android/analisis-dinamico/captura-de-trafico-de-red/ssl-pinning.md).

# SSL Pinning

## Frida

* [Frida Mobile Interception Scripts (HTTP Toolkit)](https://github.com/httptoolkit/frida-interception-and-unpinning)

## Objection

```shell
android sslpinning disable
```

## Flutter

### ProxyDroid + Frida

* Burp Suite -> Proxy -> Proxy settings -> Proxy listeners -> Edit
  * Bind to port: 8080
  * Bind to address: All interfaces
  * Request handling -> Support invisible proxying

<figure><img src="/files/wVJ9VBaivrVk44BnBbmz" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/HtX0ZogsWsyrcKBXPt1Q" alt=""><figcaption><p>Activar opción "Support invisible proxying"</p></figcaption></figure>

* [ProxyDroid](https://play.google.com/store/apps/details?id=org.proxydroid)
  * Host: IP Burp Suite
  * Port: 8080
  * Proxy Type: HTTP
  * Global Proxy: on / activated
* [disable-flutter-tls.js](https://github.com/NVISOsecurity/disable-flutter-tls-verification/blob/main/disable-flutter-tls.js)

```sh
frida -U -f <app-package-name> -l disable-flutter-tls.js
frida -H <device-IP-address> -f <app-package-name> -l disable-flutter-tls.js
```

### reFlutter

* Burp Suite -> Proxy -> Proxy settings -> Proxy listeners -> Edit
  * Bind to port: 8083
  * Bind to address: Specific address
  * Request handling -> Support invisible proxying

<figure><img src="/files/pcgKplVMoMTXSqkO690N" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/HtX0ZogsWsyrcKBXPt1Q" alt=""><figcaption><p>Activar opción "Support invisible proxying"</p></figcaption></figure>

* [reFlutter](https://github.com/Impact-I/reFlutter)

```sh
reflutter application.apk
java -jar uber-apk-signer.jar --allowResign -a release.RE.apk
adb install release.RE-aligned-debugSigned.apk
```