Hacker GitHub

← All repos

httptoolkit/frida-interception-and-unpinning

View on GitHub ↗ ★ 2,329 JavaScript

Frida scripts to rewrite mobile applications at runtime to directly MitM all HTTPS traffic

5 mentions on Hacker News by 4 people: 0 stories, 5 comments · first 2024-10-30 · latest 2025-09-15

Mentions per year 5 mentions · busiest year 2025 (3)
20082026
  1. Oh awesome, this is using my Frida scripts! These: https://github.com/httptoolkit/frida-interception-and-unpinn... . Nice project, great to see the scripts doing good work in the wild. If you needed any extra additions or tweaks to get…
  2. And more specifically just use the maintained scripts from HTTP Toolkit. https://github.com/httptoolkit/frida-interception-and-unpinn...
  3. Even if it does use certificate pinning, you can generally disable that using tools like Frida ( https://frida.re ) with scripts like https://github.com/httptoolkit/frida-interception-and-unpinn...
  4. If you want to RE some android apps HTTP or even HTTPS, it's more straight-forward to use httptoolkit and frida. Might be a bit rough the first time you do it, but once its set up its a breeze. You can intercept calls and even modify etc…
  5. If you have root, HTTP Toolkit will handle most of that for you - it can detect root via ADB, install systems certs automatically, and install Frida & intercept individual app targets with most cert pinning disabled (frida scripts it uses…