From e10f34cf1b84c16e0bc67a4add720b2d24a863d3 Mon Sep 17 00:00:00 2001 From: Ryan Welton <772364+Fuzion24@users.noreply.github.com> Date: Thu, 5 Apr 2018 18:04:50 -0400 Subject: [PATCH] Update Readme.md --- Readme.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Readme.md b/Readme.md index f324e1c..9ffa606 100644 --- a/Readme.md +++ b/Readme.md @@ -1,7 +1,7 @@ JustTrustMe =========== -An xposed module that disables SSL certificate checking. This is useful for auditing an application which does certificate pinning. You can read about the practice of cert pinning [here](https://viaforensics.com/resources/reports/best-practices-ios-android-secure-mobile-development/41-certificate-pinning/). There also exists a nice framework built by @moxie to aid in pinning certs in your app: [certificate pinning](https://github.com/moxie0/AndroidPinning). +An xposed module that disables SSL certificate checking. This is useful for auditing an application which does certificate pinning. There also exists a nice framework built by @moxie to aid in pinning certs in your app: [certificate pinning](https://github.com/moxie0/AndroidPinning). An example of an application that does cert pinning is [Twitter](https://play.google.com/store/apps/details?id=com.twitter.android). If you would like to view the network traffic for this application, you must disable the certificate pinning.