I’ll be showing steps to get this setup done with Burp Suite. Steps to install Burp root certificate in the Android System Trust Store Installing the certificate of proxy server in the system store will solve this issues. As the WebViews do not trust the user store even if the app does so. If the app uses the WebViews for loading any HTTPS web pages in the app they might not be loaded on the app. It is good idea to check this configuration even before attempting to bypass the certificate pinning or else one may end up in a rabbit hole.Įven if a app does trust the user store in the configuration you may still have trouble proxying all the applications traffic.
An example network-security-config.xml file which trusts the user trust store
0 kommentar(er)
