# Android Unpinner

> Tool from the mitmproxy project that removes certificate pinning from an Android APK you own or are authorized to test, without a rooted device. It marks the app debuggable, touching only AndroidManifest.xml, and injects a Frida Gadget over ADB so an interception proxy can read the app's traffic, reusing HTTP Toolkit's unpinning script. It bundles the Android SDK helpers it needs and can also handle split APKs delivered as XAPK.

- Type: Tool
- Targets: App · Protocol
- Category: Android tools
- Relationship: Foundation tool
- Sources reviewed: 2026-10-19
- Added to the catalog: 2026-10-19
- Original resource: <https://github.com/mitmproxy/android-unpinner>
- Primary source: <https://github.com/mitmproxy/android-unpinner/blob/60cbfee4d43cedaff622d72c27d87e418a111413/README.md>
- Catalog page: <https://awesomerea.org/resources/android-unpinner/>
- Record JSON: <https://awesomerea.org/resources/android-unpinner/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/resources/android-unpinner/index.md)

## Requirements & limits

- Installed with uv or pip and requires Python 3.10+ (pyproject version 1.0); the target device connects to a desktop over USB/ADB, and the tool bundles the adb, apksigner, zipalign and aapt2 helpers for Windows, Linux and macOS.
- Patches the target APK and needs active instrumentation from the desktop each time the app launches, so rooting the device is not required; intended only for apps you own or are authorized to test.
- The README states the project's own code is MIT-licensed, with no separate LICENSE file for GitHub to detect; bundled components keep their own licenses, including HTTP Toolkit's unpinning script (AGPL-3.0), the Frida gadgets (wxWindows Library Licence) and Android build/platform tools. The repository also ships HTTP Toolkit's open-source SSL-pinning demo APK (Apache-2.0) as a test target.

## Primary sources

1. <https://github.com/mitmproxy/android-unpinner/blob/60cbfee4d43cedaff622d72c27d87e418a111413/README.md>
2. <https://github.com/mitmproxy/android-unpinner/blob/60cbfee4d43cedaff622d72c27d87e418a111413/pyproject.toml>

## More in Apps

- [apk-mitm](https://awesomerea.org/resources/apk-mitm/index.md) · Tool
- [Frida Mobile Interception Scripts](https://awesomerea.org/resources/frida-interception-and-unpinning/index.md) · Tool
- [reFlutter](https://awesomerea.org/resources/reflutter/index.md) · Tool
- [ddc](https://awesomerea.org/resources/ddc/index.md) · Tool
- [Simplify](https://awesomerea.org/resources/simplify-android-deobfuscator/index.md) · Tool
- [GDA (GJoy Dex Analyzer)](https://awesomerea.org/resources/gda-android-decompiler/index.md) · Tool

## About this entry

The description was reviewed against primary sources.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.