by ac-pm

Android Xposed Module to bypass SSL certificate validation (Certificate Pinning).

465 Stars 84 Forks Last release: Not found GNU General Public License v2.0 17 Commits 0 Releases

Available items

No Items, yet!

The developer of this repository has not created any items for sale yet. Need a bug fixed? Help with integration? A different license? Create a request here:

Attention: I'm working in a new suite of tools that include SSLUnpinning feature and many, many others! Look here ->

SSLUnpinning - Xposed Module

Android Xposed Module to bypass SSL certificate validation (Certificate Pinning).


If you need to intercept the traffic from an app which uses certificate pinning, with a tool like Burp Proxy, the SSLUnpinning will help you with this hard work! The SSLUnpinning through Xposed Framework, makes several hooks in SSL classes to bypass the certificate verifications for one specific app, then you can intercept all your traffic.


Java Secure Socket Extension (JSSE) -*

APACHE - org.apache.http.conn.ssl.*

OKHTTP - okhttp3.*


  • install Xposed in your device (root access on Android 5.1 or later);
  • Download the APK available here or clone the project and compile;
  • Install mobi.acpm.sslunpinning_latest.apk on a device with Xposed:

    adb install mobi.acpm.sslunpinning_latest.apk
  • SSLUnpinning will list the applications to choose from which will be unpinned;

  • Ok! Now you can intercept all traffic from the chosen app.


Get it from Xposed repo:

How to uninstall

    adb uninstall mobi.acpm.sslunpinning






We use cookies. If you continue to browse the site, you agree to the use of cookies. For more information on our use of cookies please see our Privacy Policy.