SSL Pinning

 

Пример конфига с защитой
<?xml version="1.0" encoding="utf-8"?>
<network-security-config>
    <domain-config cleartextTrafficPermitted="true">
        <domain includeSubdomains="true">pdlnikapps.online</domain>
        <domain includeSubdomains="true">loans-online.icu</domain>
    </domain-config>
</network-security-config>

PWNed
Application
android:networkSecurityConfig="@xml/security_config"


<?xml version="1.0" encoding="utf-8"?>
<network-security-config xmlns:tools="http://schemas.android.com/tools">
    <domain-config cleartextTrafficPermitted="true">
        <domain includeSubdomains="true">*</domain>
    </domain-config>
    <base-config cleartextTrafficPermitted="true"
        tools:ignore="InsecureBaseConfiguration">
        <trust-anchors>
            <certificates src="system" />
            <certificates src="user" />
        </trust-anchors>
    </base-config>
</network-security-config>

 

 

 .
..
arm64-v8a
armeabi
armeabi-v7a
x86
x86_64