adb-ssl-unpinning

Automated script to disable SSL certificate pinning without root using adb.

Usage

This script will pull the apk from the device, disable the SSL pinning, and push it back to the device through adb.

Be aware that this script will uninstall the app from the device, so make sure you have a backup of the app.

You can also find the original apk in the com.example and the modified apk in the com.example_patched folder.

$ python3 adb-ssl-unpinning.py <serial> <package_name>

Example:

$ python3 adb-ssl-unpinning.py emulator-5554 com.example

Find device serial

Connect your device to your computer and run adb usb to enable USB debugging, or use an emulator.

Then, find the serial of your device by running:

$ adb devices
List of devices attached
emulator-5554	device

Here emulator-5554 is the serial number of the device.

Find package name

$ adb shell pm list packages
$ adb shell pm list packages | grep example

References

• APKtool
• uber-apk-signer