# Android-SSL-TrustKiller

**Repository Path**: kuailel/Android-SSL-TrustKiller

## Basic Information

- **Project Name**: Android-SSL-TrustKiller
- **Description**: Bypass SSL certificate pinning for most applications
- **Primary Language**: Unknown
- **License**: MIT
- **Default Branch**: master
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 0
- **Created**: 2020-11-04
- **Last Updated**: 2024-06-10

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

Android-SSL-TrustKiller
=======================

Blackbox tool to bypass SSL certificate pinning for most applications 
running on a device.

Description
-----------

This tool leverages Cydia Substrate to hook various methods 
in order to bypass certificate pinning by accepting
any SSL certificate.

Usage
-----

* Ensure that Cydia Substrate has been deployed on your test device. The installer requires a rooted device and can be found on the Google Play store at https://play.google.com/store/apps/details?id=com.saurik.substrate&hl=en 
* Download the pre-compiled APK available at https://github.com/iSECPartners/Android-SSL-TrustKiller/releases
* Install the APK package on the device:

        adb install Android-SSL-TrustKiller.apk

* Add the CA certificate of your proxy tool to the device's trust store.

Notes
-----

Use only on a test devices as anyone on the same network can intercept traffic from a number of applications including Google apps. This extension will soon be integrated into Introspy-Android (https://github.com/iSECPartners/Introspy-Android) in order to allow you to proxy only selected applications.

License
-------

See ./LICENSE.

Authors
-------

Marc Blanchou