Android Apps Security: Mitigate Hacking Attacks and Security Breaches

© Sheran Gunasekera 2020

S. GunasekeraAndroid Apps Securityhttps://doi.org/10.1007/978-1-4842-1682-8_9

9. Bypassing SSL Pinning

Sheran Gunasekera¹ 

(1)

Singapore, Singapore

 

With so much discussion around the topic of securing data in transit, I wanted to take a bit of time to dive into the actual process of SSL/TLS encryption and how Android and apps written for Android handle this. The best way to go about it is to get down and do the work, so in this chapter, we will see how to generate an SSL certificate, write a back-end API in Golang, and write an Android client to talk to that back end, and finally we will see how to intercept SSL traffic.

Let’s first take a very quick look at how an SSL connection is established. Figure 9-1 shows the steps that ...