Inspect mobile app traffic past certificate checks.
What it does
Guides bypassing certificate pinning in mobile apps so their HTTPS traffic can be inspected.
When to use it
Use when intercepting HTTPS traffic from Android or iOS apps that enforce certificate, public-key, or SPKI-hash pinning.
How to use it
Give it a target mobile app; it follows a platform-specific bypass path to enable HTTPS traffic interception.
What you provide
- the target mobile app
Latest review
What you need · 1
For an app requiring mutual TLS, uses a client certificate extracted from the app bundle or keychain and imported into the proxy.
Access · 3
This skill
mobile app HTTPS traffic
Read
Intercepts mobile app HTTPS traffic
proxy
Write
Imports client certificates into proxy
mobile device proxy settings
Write
Changes mobile device proxy settings