If you do not know what it is or what it is for, we already tell you: it is a repository of modules in your phone you can change or try new features in Android KitKat, Lollipop 5.1, Marshmallow, Oreo or Nougat 7.0 and 7.1 without touching the ROM of the device, so the process is completely reversible, unlike what happens when we flash our phone with a ROM like CyanogenMod, for example. Modify your Android without flashing a ROM. Get the most out of the customization possibilities of your Android device thanks to the Xposed Framework, which you can install on your smartphone or tablet through the Xposed Installer APK. 2) Open SSLUnpinning, look for the app on which you are trying to bypass the certificate pinning, and select it.Xposed Installer For PC – Free Download Xposed Installer Review (You may need to generate the keystore first with keytool:) # keytool -genkey -v -keystore my-key.keystore -alias alias_name -keyalg RSA -keysize 2048 -validity 10000ĥ) Finally, install the new version and enjoy!īonus Track: If you need to bypass Certificate Pinning (in order to use the app with Burp Proxy for example) you can do this:īypass Certificate Pinning With “Xposed” module: 1) Once you have Xposed installed on your phone, search for “SSLUnpinning” module. Note: Other detection techniques look for any of the below-installed packages on the mobile device at runtime: - supersu.apk - Busybox - Root Cloak - Xpose framework - Cydia - Substrateģ) Build the new version of APK with APKTool: # apktool b /path/to/modified apk/target-new.apk -o /path/to/output/ (“b” for “build” and “-o” for output dir)Ĥ) Sign with jarsigner tool # /path/to/my-key.keystore -storepass password -keypass password target-new.apk alias_name

Using GREP, search for any of the follow strings and change them to something random: - Superuser - Supersu - /su - /system/app/Superuser.apk - /system/bin - /system/bin/su - /system/sd/xbin - /system/xbin/su - /system/xbin - /data/local - /data/local/bin - /data/local/xbin - /sbin - /system/bin/failsafe - /vendor/bin Unfortunately this didn’t work for me, so… let’s do this the “hard way” (or should i say… “old school”? :) ).īypass Root Check Manual Way: 1) Decompile the APK file using “APKTool” # apktool d /path/to/apk/target.apk -o /path/to/output/ (“d” for “decompile” and “-o” for output dir) 2) Most root detection techniques rely on checking for files on the OS that indicate the device has been rooted.

Xposed bluestacks 2