A new method is designed to authenticate a server after its certificate is updated without releasing a new version of a client application. This is achieved through verifying the digital signature of a shared secret between a client and a server.

Learn practical Mobile and API security techniques: API Key, Static and Dynamic HMAC, Dynamic Certificate Pinning, and Mobile App Attestation.

🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection

Elegant HTTP Networking in Swift

Cross-platform HttpClientHandler with TLS1.2 and Certificate Pinning

iOS Instagram with SSL pinning / certificate pinning bypassed. Latest version 335.0.8

Networking made easy

iOS Facebook with SSL pinning / certificate pinning bypassed. Latest version 466.0.0

Service to calculate public key hashes of hosts suitable for certificate pinning

Android Network Security Config generator script.

Remove Certificate Pinning from APKs

Battle Cats MITM Mailbox Hack

.NET Bindings for DataTheorem's TrustKit (iOS) and TrustKit-Android

Frida scripts for mobile application dynamic-analysis.

Our generic webservice layer

A lightweight, one line setup, iOS / OSX network debugging library! 🦊

Cli tool to generate networks_security_config.xml & NSAppTransportSecurity plist for android & ios apps

Simplifies network requests using SwiftNIO with powerful types like DataTask, DownloadTask, and UploadTask.

Simplifies network requests using URLSession with powerful types like DataTask, DownloadTask, and UploadTask.

The script allows to bypass SSL pinning on Android >= 7 and makes APK file ready for HTTPS traffic inspection