Bypassing Mobile Pinning

Most time lost here is spent bypassing pinning that was never there. An empty proxy has at least six causes, and the fix for each is different — one of them is not pinning at all but Android's default distrust of user CAs, and another is that the app has its own TLS stack and never saw your proxy. Diagnose before you reach for a bypass script.

Use only against apps you are authorized to test.

When to Use

• Burp/mitmproxy/Charles shows a TLS handshake failure from a mobile app
• The proxy shows nothing while the app clearly reaches the network
• The app reports "network error", "connection insecure", or similar with the proxy configured
• You know the target pins, and need the right hook for its stack

When NOT to Use