Search code examples
androidssl-security

How to detect SSL pinning is being done in the app?


I have already gone through this How to detect SSL pinning on Android


Solution

  • If you setup SSL interception with tools like mitmproxy or Burp and then import the proxy CA of this interception proxy into the android certificate store as trusted then you should be able to intercept the connection, i.e. get the plain text. If instead the application fails and maybe throws out some error about failing SSL verification than this application is probably doing SSL pinning.