Bypass SSL Pinning without root | Android Security Crash Course

In my last video, I bypassed SSL Pinning on an Android device using Frida, which required a rooted device. In this video, I show how to bypass SSL Pinning without a rooted device using a tool called Objection.

Check out my blog here:

[emmanuellebura]

What I loved most about your video is that you didn't just go on to show what works, but you also showed errors that we might encounter and how we could tackle them. Thanks a million.

[shankarsubedi]

what if I have multiple apks for single application? objection only taking single apk for patching

[JY-xvic]

im using genymotion with android 12 and when running objection explore the app is closed, how to solve this issue..

[rhen]

Honestly, I didnt know ssl unpinning would be this easy. About to test it on some apps, might be helpful

[SHEAVEN-qb]

followed all the steps, got the agent injected, but still seeing the "some error occurred try again" type of problem, why ? btw i did that on a revolut app version 7.30.3

[cimhamed]

thank you for the video, please keep sharing content

[songlyrics]

when i type patch apk etc instead of giving me the error it gave you it said "Failed to determine architecture. Is the device connected or authorized?" what's that mean

[akashisaleem]

I did this and it worked perfectly but when I upload the patched app in my phone it keeps crashing is this because the app recognizes it has been modified and crashes and is there any way to fix this? A reply as quick as possible is appreciated as I am in a rush thank you in advance.

[viswasringan]

Using objection tool didn't work for me. Instead i used apk-mitm tool and it was way simple.
Installation : sudo npm install -g apk-mitm
Command : apk-mitm {name of the apk}
I have tried with twitter apk and it worked fine.

[sukhwantsingh]

What alternative is there to prevent ssl bypass

[Ronaldo-pgby]

if I have multiple devices connected to my laptop, how do I determine which device I want to use for objections tools?

[jimgrayson]

Im getting a lot of errors using objection so Im probably going to do a different approach which is garuanteed to work

[nathancooper]

How are you adding the burp certificate to a non rooted Android phone?

[soeuou]

Hello, Im having an issue. Whenever I do this the app (Roblox) closes on open.

[salad]

Do you have alternatives for XAPK? It doesnt seem like objection works on xapks

[MustafaAlLawati-bk]

Thanks for Video and you make it easy way

[fatiherdogan]

I dont know if i did something wrong but objection did not work without frida. So frida needs root and this cant be ssl unpinning without root.

[AaqibHussainGhallu]

Can You Make A Video On Any Easy Method Without PC

[praveenprajith]

facing installation error - > Failure Failed collecting certificates

[PaPa-wnpe]

Can you make a video to do like that but for iphone?