Saturday, November 3, 2018

SSL Pinning bypass on Android Emulator

Recently I developed interest in analyzing the Android apk network traffic.

I was able to capture traffic using HTTP interceptor for some of the apk but many other apk started giving error in interceptor - "The client failed to negotiate SSL connection".

On searching this issue, I came to know that apk are performing SSL pinning. In order to capture traffic for these apk, I need to bypass the SSL pinning. After reading multiple articles, I founded this easy way of performing the same.

Requirements:

  1. Burp Suite - https://portswigger.net/burp/communitydownload
  2. XPosed apk framework: https://forum.xda-developers.com/showthread.php?t=3034811
  3. JustTrustMe - https://github.com/Fuzion24/JustTrustMe/releases
  4. Memu Android emulator - https://www.memuplay.com/


Steps:

Configuring Burp Suite:

  1. Install Burp Suite from https://portswigger.net/burp/communitydownload
  2. Follow all steps mentioned at https://support.portswigger.net/customer/portal/articles/1816883-getting-started-with-burp-suite
  3. For our case, we are setting Burp to listen to all interfaces on 8085 port




XPosed apk framework:

  1. Download the framework from https://forum.xda-developers.com/showthread.php?t=3034811
  2. For my case the download link was https://forum.xda-developers.com/attachment.php?attachmentid=4393082&d=1516301692









JustTrustMe apk:

  1. Download the apk from https://github.com/Fuzion24/JustTrustMe/releases
  2. For my case it came out to be https://github.com/Fuzion24/JustTrustMe/releases/download/v.2/JustTrustMe.apk



Memu Android emulator :

  • Download the emulator from https://www.memuplay.com/ 

  • Install the emulator and open the same.

  • Click on Settings button and then goto Others tab

  • Click on Enable for Root mode option

  • Restart the emulator
  • Click on "Install APK" button on the right side toolbar of Memu emulator

  • Choose Xposed apk framework which was downloaded earlier
  • Open the apk after installation
  • Click on Install/Update option inside the apk
  • After the installation is complete, restart the emulator
  • If all went well, you will see something as shown below in screenshot

  • Again, click on "Install APK" button on the right side toolbar of Memu emulator
  • Choose JustTrustMe apk which was downloaded earlier
  • After JustTrustMe is installed, open Xposed apk
  • Open the Modules tab

  • Activate the JustTrustMe module by ticking the checkbox

  • Now, goto Wifi->Settings in the emulator
  • Long press on the wifi name till you see option to Modify network

  • Click on Advanced option
  • Mention the ip of your system and port as 8085 (as Burp is listening on this port)

  • Open any apk on the emulator which has SSL pinning enabled
  • Observe that Burp suite is capturing all traffic and stops giving SSL error.


Note:
This post is only for educational purpose. Don't use this for any unauthorized activities.

Hope this helps.

47 comments:

  1. Replies
    1. Advance Programs And Tricks In Java: Ssl Pinning Bypass On Android Emulator >>>>> Download Now

      >>>>> Download Full

      Advance Programs And Tricks In Java: Ssl Pinning Bypass On Android Emulator >>>>> Download LINK

      >>>>> Download Now

      Advance Programs And Tricks In Java: Ssl Pinning Bypass On Android Emulator >>>>> Download Full

      >>>>> Download LINK Bn

      Delete
    2. Advance Programs And Tricks In Java: Ssl Pinning Bypass On Android Emulator >>>>> Download Now

      >>>>> Download Full

      Advance Programs And Tricks In Java: Ssl Pinning Bypass On Android Emulator >>>>> Download LINK

      >>>>> Download Now

      Advance Programs And Tricks In Java: Ssl Pinning Bypass On Android Emulator >>>>> Download Full

      >>>>> Download LINK P5

      Delete
  2. I had problem with proxying....... and your tut was very helpful.
    Thnks. works fine.

    ReplyDelete
  3. This comment has been removed by the author.

    ReplyDelete
  4. Write more; that’s all I have to say. It seems as though you relied on the video to make your point. You know what you’re talking about, why waste your intelligence on just posting videos to your blog when you could be giving us something enlightening to read?Surya Informatics

    ReplyDelete
  5. Great article. Thanks for your sharing. it helped me to download hamraaz

    ReplyDelete
  6. Nice post thanks ! I am listing best apps for 2021 here
    lucky patcher apk download Get the latest version Of Lucky Patcher APK download from here. Scroll your way and click on the download button in order to obtain the Lucky Patcher APK file
    download fmwhatsapp Get the latest version Of FmWhatsApp APK download from here. Scroll your way and click on the download button in order to obtain the FMWA APK file
    download gbwhatsapp Get the latest version Of GBWhatsApp APK download from here. Scroll your way and click on the download button in order to obtain the GBWa APK file

    ReplyDelete
  7. llo there mates, it is incredible composed piece completely characterized, proceed with the great work always. YoPCGames.com

    ReplyDelete
  8. FREE DOWNLOAD
    Internet Download Manager Crack Patch with the full latest version is the most popular software for downloading videos, documents,
    and most fast speed software. IDM Crack Download 64 bit is a tool to increase the downloading speed, resume, and schedule download.
    https://searchcrack.net/idm-crack-6-38-patch-15-download/

    ReplyDelete
  9. Best Mobile Game Download for Android Mobile and iSO.
    Mobile Game Download for Android Mobile and iSO. FRP Bypass apk Download faug game

    ReplyDelete
  10. Excellent article. Very interesting to read. I really love to read such a nice article. Thanks! keep rocking. WWE 2K20 PC Game Download

    ReplyDelete
  11. This article gives the light in which we can observe the reality. This is very nice one and gives indepth information. Thanks for this nice article. emulator android

    ReplyDelete
  12. Thanks for Sharing such an amazing article. Keep working... Your Site is very nice, and it's very helping us.. this post is unique and interesting, thank you for sharing this awesome information

    AP E Hazar App Downlaod |E Hazar App|SE E Hazar App

    ReplyDelete
  13. JioSaavn Pro Apk is the pro version of the JioSaavn application. And I am sure that if you are here on this page then you must be a music lover. It really does not require discussing music because you yourself know the importance of music in someone’s life. Music is something that can actually change the world. It can connect us from the rest of the world. So let’s start our article which is about JioSaavn Pro APK or JioSaavn Mod APK. JioSaavn Pro APK

    ReplyDelete
  14. There are countless ways to have fun in today’s digital era. At present, every human being adopts any method for convenience. techvizd.com

    ReplyDelete
  15. Wow, amazing block structure! How long
    Have you written a blog before? Working on a blog seems easy.
    Wondershare Recoverit Crack
    FinePrint Crack
    MEmu Android Emulator Crack
    The overview of your website is pretty good, not to mention what it does.

    ReplyDelete
  16. After looking through a few blog articles on your website,
    we sincerely appreciate the way you blogged.
    We've added it to our list of bookmarked web pages and will be checking back in the near
    future. Please also visit my website and tell us what you think.
    Great work with hard work you have done I appreciate your work thanks for sharing it.
    CrackBins Full Version Softwares Free Download
    CrackBins Full Version Softwares Free Download
    mecrack Full Version Softwares Free Download
    CLO Standalone Crack
    IOBIT Uninstaller Pro
    4K Stogram Crack
    Rarlab WinRAR 1PC Crack
    Inpixio Photo Studio Pro crack
    Adobe Acrobat Pro DC Crack
    MEmu Android Emulator Crack

    ReplyDelete
  17. Advance Programs And Tricks In Java: Ssl Pinning Bypass On Android Emulator >>>>> Download Now

    >>>>> Download Full

    Advance Programs And Tricks In Java: Ssl Pinning Bypass On Android Emulator >>>>> Download LINK

    >>>>> Download Now

    Advance Programs And Tricks In Java: Ssl Pinning Bypass On Android Emulator >>>>> Download Full

    >>>>> Download LINK

    ReplyDelete

  18. After looking through a few blog articles on your website,
    we sincerely appreciate the way you blogged.
    We've added it to our list of bookmarked web pages and will be checking back in the near
    future. Please also visit my website and tell us what you think.
    Great work with hard work you have done I appreciate your work thanks for sharing it.
    MEmu Android Emulator Crack

    ReplyDelete
  19. Advance Programs And Tricks In Java: Ssl Pinning Bypass On Android Emulator >>>>> Download Now

    >>>>> Download Full

    Advance Programs And Tricks In Java: Ssl Pinning Bypass On Android Emulator >>>>> Download LINK

    >>>>> Download Now

    Advance Programs And Tricks In Java: Ssl Pinning Bypass On Android Emulator >>>>> Download Full

    >>>>> Download LINK ps

    ReplyDelete
  20. I really enjoyed the blogs of this site. They are very informative. Brave Soul Frozen Dungeon

    ReplyDelete
  21. You made some decent points there. I checked on the
    net to learn more about the issue and found most individuals
    will go along with your views on this website.
    If anyone of you want to get mod versions of all games and apps, then make sure to visit APKMILY and get the authentic and latest versions of all kinds of games and apps.

    ReplyDelete
  22. Crack Download
    Prey Mac Crack
    Pano2VR Pro Mac Crack
    Lingon X Mac Crack
    Security Spy Mac Crack
    GitKraken Crack
    Nuance PaperPort Professional Crack

    ReplyDelete
  23. Wow! amazing content and do check Rotaeno Apk

    ReplyDelete
  24. I really enjoyed the blogs of this site. They are very informative. @

    ReplyDelete
  25. good to know all this information. very helpful to new web developers. for calculating numbers click

    ReplyDelete
  26. Thank you for sharing this article with us, I read your article, you have talked about a lot of information.

    ReplyDelete
  27. Which is some inspirational stuff. Never knew that opinions might be this varied. Thank you for all the enthusiasm to provide such helpful information here.콜미출장샵추천
    광주출장샵추천
    대전출장샵추천
    대구출장샵추천
    부산출장샵추천
    울산출장샵추천
    서울출장샵추천

    ReplyDelete
  28. MEmu Android Emulator Crack 2023 Free Download This is a very reachable software that will enable you to play Android video games on your PC.

    ReplyDelete