Android SSL Pinning Bypass for Bug Bounties & Penetration Testing

In this Video, you will learn about SSL Pinning Bypass for Android methodologies to identify capture and intercept request/response for Ethical Hacking, Penetration Testing & Bug Bounty Hunting which can be further used for increasing scope.
You will learn attacks principle, methodologies, approach and how to use tools for security testing.
Get our Best Seller full courses at discount -
Use Coupon for 95% Off on all Courses
Enroll Now at - learn.hacktify.in
Follow us on Linkedin:-
/ iamrohitg
/ shifa
Visit our website:- www.hacktify.in
Join Telegram Group - bit.do/ytlivebb
If you like our work make a donation here - paypal.me/iamrohitg
~-~~-~~~-~~-~
Please watch: "Concrete5 CMS : Identification, Mass Hunting, Nuclei Template Writing & Reporting "
• Concrete5 CMS : Identi...
~-~~-~~~-~~-~

[@buzzlightyear4508]

First I wasn't thinking of buying your course, but after seeing this videos, definitely I'm going for your course Rohit! You're a champ. Don't stop making these videos!

[@dibyaranjannayak6537]

Absolutely right u r... True knowledge sharing

[@HacktifyCyberSecurity]

Thanks for the feedback. You will enjoy our courses, guaranteed 😇❤

[@ashhadhats4842]

@@HacktifyCyberSecurity when u launch BBH v2 sir?? Any date??

[@tushartushar1441]

I would recommend all his courses. I report 2 p1 using all his courses

[@gatinshah]

Excellent video. Don't stop making these videos!

[@wardellcastles]

Great video... thanks! Worked for me exactly as you showed.

[@jayu4348]

Thank you so much for this. This helped where I was failing!

[@carbike6637]

heart felt thank you bro...... was very much useful for my office work.....

[@99HAXXOR]

Very helpful video bro, keep up the good work.It was up to the mark :)

[@dhruvimistry9155]

Awesome video sir👍 Thank you so much sir for uploading this video😇 It's very helpful.

[@caringtogether1320]

Thanks for this mate , i was very frustrated in bypass ssl for specific app but am able to do it

[@HarshalChauhan_]

great video man this will helpful for us.

[@himeshmiyani3794]

WOW!1Great Video!! 😍😎😎

[@glaquino2731]

Still working up to this date ;) thank you!

[@user-oh2to9bw3q]

Thanks for making this vedio sir, it is soo good and anyone can understand. And each and every step you explained in a clear way.

[@z3jlewhhda376]

Thanks for the video. Very useful!

[@hawk_wheels]

Excellent video sir!

[@satyajitdas1249]

osm ! pls create more video all video on all test cases, issues. thank you.

[@abhishekrajput9434]

Nicely explained.👍

[@pentestip]

YOU ARE BRILLIANT

[@safeer786ful]

Amazing Video. It helped so much to bypass ssl pinning

[@HacktifyCyberSecurity]

Glad it helped

[@ECEPrashant]

really awesome vro..

[@ksubscriberswithoutanyvi-cy5vt]

excellent ur video is awesome

[@ashhadhats4842]

Great video

[@whoamisecurity9586]

Thank you for the video 😊✌️

[@nicoladellino8124]

Very nice video, TNX.

[@CartoonHome]

Very good video

[@Sylvskii]

Very helpful thank you

[@snehinbiswal5750]

such a wonderful presentation. How to know whether a device is rooted

[@bughunter9766]

Thanks for the video ,,, when you going to release the online course for Android

[@DigitalTrendzy2023]

Whatif we cant intercept app traffic do we need to do use frida for bypass

[@uttarkhandcooltech1237]

Thx u

[@mithunn1474]

Where can I find video of method 2 and 3 ? Xposed method won't work on android 8 or above.

[@rizalzaelani7389]

thanks before sir, but why my chrome still cannot browsing even i had install the certificate? please advice, would be really appreciated

[@foxgameplay5449]

i have question that : Sometime time ssl bypass pinning also get failed and does work on all apps so in this case what will be the other method to bypass it.?

[@pianodotexe3852]

How to find this domain has scope on also in subdomain ?

[@crownlessK]

When do you upload video of capturing 2. and 3. way of ssl pinning bypass?. Frida server and editing the apk which has ssl pinning

[@yashwantkerkar3260]

❤

[@sail6114]

😎🔥👍👍

[@samsoncolaco3424]

im stuck as the gennymotion emulater shows a black screen when i try to run it ,please help

[@pramodgurlhosur5215]

If i give manual proxy setting in android, im unable to access internet. Plz help

[@TheLurleenGamespro]

I have problems with an apk because when signing it it detects that it is not the original signature and it gives me errors. It is precisely for ssl pinning using smali. These methods do not work for this specific apk that I need

[@ETH-ht7uc]

genymotion doesn't allow setting changes for pentesting anymore in free version

[@all-day-games6465]

very very nice can share video link of doing frida.. please

[@mycroftholmes6464]

Halo sir, when bug bounty v2 realese on udemy?

[@Lol-zy5pn]

Sir please make a detailed video on IDOR

[@crackingforall7075]

I have a desktop and in android emulators i dont find any connected wifi how do i fix it

[@baybladeshark]

Hi, its very useful. But i got error, after installing the Xposed installer in ardroid emulator, In download section I couldn't able to find the files. its all empty. please can you help me with this issue

[@vinaybhuria6749]

please make more videos

[@bhuwanjain2957]

Can you please make a video of methodology for penetration testing also. For beginners Like how to enumerate,what to check etc.

[@HacktifyCyberSecurity]

Check my video for Mindmap

[@mrcencei727]

@@HacktifyCyberSecurity Very nice video man, would you be so kind to tell me what can I do if there is nothing under download section on the xposed application ? Thanks in advance!

[@nalshayansga4130]

Not working on some apps like expressvpn

[@techunity368]

hi my genymotion doesnt have google apps

[@sql7002]

Thanks sir. Any plan for a course on Android pentest?

[@HacktifyCyberSecurity]

Yes, soon

[@rajdipdeysarkar4553]

sir please make a android pentesting course

[@ezekielj20]

I need help can you help by contacting me ? I have an issue with certificate pinning which prompts certificate issues

[@RAJUBHAI-pt2xc]

There is any way to do with android phone?(burp for android 🙄)

[@marcelogrsp]

his accent gives him more credibility hehe

[@cypherace3979]

Is there any way to see traffic which is not visible in Burp, eg. Ludo games traffic at the time of playing game is not intercepted in Burp. How are they able to bypass Proxy ?

[@princemoe6866]

ssl pinning

[@Miles-co5xm]

It is websocket

[@debaduttaroul5129]

I am receiving an error "Disable proxy and launch the app again". What am i missing here?

[@diosdadoatendido9418]

Can you make free internet tuturial??

[@b3ast407]

Sir apka next course android hunting hai kya?, Agar nahi toh aap next videos android ke banane wale ho??

[@HacktifyCyberSecurity]

Next course is on Bug Bounty 2 and after that Android Hunting

[@rajeshrj3616]

this not working . guys will you please show how to install and setup xposed installer . thats not working for me

[@pswalia2u]

Unable to replicate this on upi apps. Also how to install xposed in devices running Android 10

[@HacktifyCyberSecurity]

Hi, This works for most of the UPI Apps. I have tested it. The requirement is hide root detection as banking apps check it. Use root cloak as shown in video.

[@pswalia2u]

@@HacktifyCyberSecurityThanks for quick reply. I mean how can you verify sim card and sms verification from a emulator?

[@navinvenkatesan9784]

Will you launch Android Pentesting courses or bug bounty course

[@CristiVladZ]

Good question! :)

[@HacktifyCyberSecurity]

We are working on Bug Bounty Course now and next will be Android Pentesting.

[@navinvenkatesan9784]

@@HacktifyCyberSecurity yes and thanks for your response

[@pianodotexe3852]

@@HacktifyCyberSecurity Sir please make a video on sublistr3 vs chaospy vs hostilesubbruteforcer vs subjack

[@HacktifyCyberSecurity]

@@pianodotexe3852 It is in our bucket, We are going to make tool comparison video soon.

[@surya-ge4rv]

Hai sir i buyed your recon course in hactifyteachable but i dont know where is Q&A section i founded many of the vulnerable in jenkins but i dont know where to report the vulnerable! i dont know how to find the domain name in the shodan ip they all are like cloud services PLEASE help me sir !

[@HacktifyCyberSecurity]

Join us here and post your queries : chat.whatsapp.com/FNPaaXekM5dATMgiaBhWTK

[@surya-ge4rv]

@@HacktifyCyberSecurity Thankyou sir

[@whoamisecurity9586]

We completed the ssl pinning bypass here or not?

[@HacktifyCyberSecurity]

We did :)

[@whoamisecurity9586]

@@HacktifyCyberSecurity thank you 😊

[@bennyblacco9830]

exposed installer keeps crashing not player whenever i install

[@benzimakarim6398]

the video its about sniffing network

[@babay-mp4bq]

hello is it illegal using free gny motion license for bug hunting ?

[@HacktifyCyberSecurity]

Free version can be used.

[@babay-mp4bq]

@@HacktifyCyberSecurity i mean we are making money right ? ( which mean doing some business).did u have any experience while creating report with geny motion free license ?

[@cimihan4816]

@@babay-mp4bq you are using youtube does it mean using youtube is illegal?

[@babay-mp4bq]

@@cimihan4816 no i Mean in genymotion it had the watermarks that say -> FOR PERSONAL USE ONLY. Which Mean we can't use that for business purposes.

[@babay-mp4bq]

In order to use the genymotion for doing business such as bug hunting.we need to pay for the business licence available...

[@wardellcastles]

Sadly it appears XPOSED can no longer successfully install

[@youngbos305]

Hey how can I contact you I would like to pay you to do this to one of my application and tested properly

[@HacktifyCyberSecurity]

You can reachout at [e-mail] / [e-mail] for any penetration testing projects

[@erenjagger4462]

doesnt work anymore

[@iritesh]

I tried this with facebook app but it didn't work. Show this error on burp suite "1601450761081 Error Proxy [27] The client failed to negotiate a TLS connection to graph.facebook.com:443: The client supported protocol versions [TLSv1.3, TLS--5.26] are not accepted by server preferences [TLS12, TLS11, TLS10, SSL30, SSL20Hello]"

[@HacktifyCyberSecurity]

facebook has different pinning mechanism, do checkout github facebook ssl pining bypass projects.

[@iritesh]

@@HacktifyCyberSecurity I managed bypass by using burp version 1.7.34 but I find that they send bytes or something which is not readable? Can I decode that?

[@jackeagle2734]

Malayali aano?

[@HacktifyCyberSecurity]

Checkout our best seller courses Bug-Bounty : www.udemy.com/course/website-hacking-penetration-testing-bug-bounty-hunting-live-attacks/?referralCode=DD93379953A1FC8EC312 Recon : www.udemy.com/course/recon-for-bug-bounty-pentesting-ethicalhacking-by-shifa-rohit-hacktify/?referralCode=276EAB92035C98FCA13B Network Security : www.udemy.com/course/ethical-hacking-network-security-pentesting-nmap/?referralCode=C3F2D9B9CECA12E2F49F