{
  "added_at": "2026-10-19",
  "additional_evidence_urls": [
    "https://github.com/mitmproxy/android-unpinner/blob/60cbfee4d43cedaff622d72c27d87e418a111413/pyproject.toml"
  ],
  "category": "android",
  "description_en": "Tool from the mitmproxy project that removes certificate pinning from an Android APK you own or are authorized to test, without a rooted device. It marks the app debuggable, touching only AndroidManifest.xml, and injects a Frida Gadget over ADB so an interception proxy can read the app's traffic, reusing HTTP Toolkit's unpinning script. It bundles the Android SDK helpers it needs and can also handle split APKs delivered as XAPK.",
  "description_zh": "来自 mitmproxy 项目的工具，可在无需 root 的情况下移除使用者拥有或有权测试的 Android APK 的证书固定。它将应用标记为可调试（仅改动 AndroidManifest.xml），并通过 ADB 注入 Frida Gadget，复用 HTTP Toolkit 的解固定脚本，使检查代理能够读取应用流量。工具自带所需的 Android SDK 辅助程序，并可处理以 XAPK 形式提供的分包。",
  "entry_url": "https://awesomerea.org/resources/android-unpinner/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/android-unpinner/",
  "evidence_url": "https://github.com/mitmproxy/android-unpinner/blob/60cbfee4d43cedaff622d72c27d87e418a111413/README.md",
  "group": "tools",
  "id": "android-unpinner",
  "json_url": "https://awesomerea.org/resources/android-unpinner/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/android-unpinner/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/android-unpinner/index.md",
  "name": "Android Unpinner",
  "name_zh": "Android Unpinner",
  "record_type": "resource",
  "relationship": "foundation",
  "requirements": [
    "Installed with uv or pip and requires Python 3.10+ (pyproject version 1.0); the target device connects to a desktop over USB/ADB, and the tool bundles the adb, apksigner, zipalign and aapt2 helpers for Windows, Linux and macOS.",
    "Patches the target APK and needs active instrumentation from the desktop each time the app launches, so rooting the device is not required; intended only for apps you own or are authorized to test.",
    "The README states the project's own code is MIT-licensed, with no separate LICENSE file for GitHub to detect; bundled components keep their own licenses, including HTTP Toolkit's unpinning script (AGPL-3.0), the Frida gadgets (wxWindows Library Licence) and Android build/platform tools. The repository also ships HTTP Toolkit's open-source SSL-pinning demo APK (Apache-2.0) as a test target."
  ],
  "requirements_zh": [
    "通过 uv 或 pip 安装，要求 Python 3.10+（pyproject 版本为 1.0）；目标设备经 USB/ADB 连接到桌面计算机，工具自带适用于 Windows、Linux 与 macOS 的 adb、apksigner、zipalign 与 aapt2 辅助程序。",
    "工具会修补目标 APK，且每次启动应用时都需要来自桌面的主动插桩，因此无需 root 设备；仅适用于使用者拥有或有权测试的应用。",
    "README 说明项目自身代码采用 MIT 许可证，没有可供 GitHub 识别的独立 LICENSE 文件；随附组件各自保留其许可证，包括 HTTP Toolkit 的解固定脚本（AGPL-3.0）、Frida gadget（wxWindows Library Licence）以及 Android 构建/平台工具。仓库还附带 HTTP Toolkit 的开源 SSL 固定演示 APK（Apache-2.0）作为测试目标。"
  ],
  "targets": [
    "app",
    "protocol"
  ],
  "url": "https://github.com/mitmproxy/android-unpinner",
  "verification": "source-reviewed",
  "verified_at": "2026-10-19"
}