I am creating an android application which is able to ping the server for certain information and return them. There are a few methods by which a user can bypass the pinned SSL certificate of an android application by using tools like Frida, Objection, etc. Is there a way to prevent the bypass of SSL certificate in android. so that, the user cannot be able to see the traffic? (assume the user phone is rooted)

  • Generally no. You can at most make it harder. Rooted phone = user can do anything. – Peter Harmann May 2 at 11:27

No there isn't. Your app is a guest on the system, the user is the owner of the device is the master. They get to decide what your app can or cannot do, and there isn't much you can do about it.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.